Privacy Policy
Last updated: January 16, 2026
Introduction
PrepLinx LLC ("we," "our," or "us") operates PrepLinx (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. Please read this privacy policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.
Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR and applicable laws:
Information We Collect
Personal Information
When you register for an account, we may collect:
- Name and email address
- Profile information (such as profile picture)
- Account credentials
- Resume and job-related information you provide
Usage Data
We automatically collect certain information when you use our Service:
- Interview session recordings and transcripts
- Performance metrics and feedback data
- Device and browser information
- IP address and location data
- Usage patterns and preferences
How We Use Your Information
We use the information we collect to:
- Provide and maintain our Service
- Personalize your interview practice experience
- Generate AI-powered feedback and insights
- Improve and optimize our platform
- Communicate with you about updates and new features
- Respond to your inquiries and support requests
- Detect and prevent fraud or abuse
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Account Information | Until account deletion | Contract |
| Interview Sessions & Transcripts | Until account deletion or 2 years of inactivity | Contract |
| Analytics Data | 12 months | Consent |
| Cookie Consent Records | 3 years after consent withdrawal | Legal Obligation |
| Support Inquiries | 2 years after resolution | Legitimate Interest |
After the retention period expires, your data will be securely deleted or anonymized.
Data Storage and Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your data is stored on secure servers and encrypted in transit and at rest. However, no method of transmission over the Internet or electronic storage is 100% secure.
Third-Party Services
We use third-party services to provide our platform. All third-party processors are bound by Data Processing Agreements (DPAs) that ensure compliance with applicable data protection laws:
- Supabase: Database and authentication services
- Google: Authentication via Google Sign-In
- PostHog: Analytics (only with your consent)
- Deepgram: Speech-to-text processing for interviews
- AI Providers: AI-powered interview feedback and analysis
We do not sell your personal information to third parties.
Your Rights
Depending on your location, you may have the following rights under GDPR and other applicable laws:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
To exercise these rights, please contact us at hello@preplinx.com. We will respond within 30 days as required by GDPR.
For comprehensive information about your GDPR rights, please visit our GDPR page.
Cookies and Tracking
We use cookies and similar tracking technologies to track activity on our Service and store certain information. Non-essential cookies (such as analytics) are only set after you provide explicit consent via our cookie consent banner.
For detailed information about the cookies we use, please visit our Cookie Policy.
International Data Transfers
Your data may be transferred to and processed in countries outside the EU/EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in accordance with GDPR requirements.
Children's Privacy
Our Service is not intended for children under 13 years of age (or 16 in certain EU jurisdictions). We do not knowingly collect personal information from children. If we discover that we have collected personal information from a child under the applicable age, we will promptly delete that information.
Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and where appropriate, notifying you by email. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
PrepLinx LLC (Data Controller)
Email: hello@preplinx.com
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.