Privacy policy
Updated
Draft — pending legal review
This is a working draft for the web version of Offermic. It is not final and may change before launch.
This Privacy Policy explains how GRP LLC (“we”, “us”) collects, uses and shares personal data when you use Offermic: the website, the web app at /app and the iOS app (together, the “Service”). GRP LLC is a limited liability company registered in Wyoming, USA, and is the controller of your personal data.
Contact: support@offermic.com (please put “Privacy” in the subject line).
Summary
- We use your resume, job postings and answers to run mock interviews and give feedback. That is the product.
- Your content is processed by AI providers, mainly Google Gemini, to generate questions, run live voice interviews and score answers.
- On the web, your account, interview history and uploaded files are stored in our database so you can come back to them. You can export or delete them at any time.
- We do not sell your personal data. The iOS app uses the Meta SDK to measure app-install ads, only if you allow tracking.
What we collect
Account data (web). Email address, sign-in method (email, Google or Apple), display name, language and the goals you choose during onboarding. If you try a free tool without an account, we create an anonymous session.
Content you provide. Resumes and CVs (which include your work history, education, skills and any contact details you put in them), job postings, typed answers, voice recordings streamed during a live interview, and the transcripts of those interviews.
Results we generate. Scores, feedback, rewritten answers, interview reports and your practice history.
Payment data. Web subscriptions are processed by Stripe; we receive the subscription status, plan and billing country, but not your full card number. App Store purchases are processed by Apple and managed through RevenueCat; we receive the subscription status.
Technical and usage data. Device and browser type, app version, language, pages and features used, error reports, and approximate location derived from your IP address. On the web we use privacy-friendly analytics; in the iOS app we collect usage data and, with your permission, the advertising identifier (see “iOS app” below).
Support messages. What you send us and our replies.
How we use it
| Purpose | Data | Legal basis (EU/UK) |
|---|---|---|
| Run mock interviews, score answers, analyse resumes and jobs | Content, results, account | Performance of our contract with you |
| Keep your history and progress | Content, results, account | Performance of contract |
| Take payments and manage subscriptions | Payment data, account | Performance of contract |
| Prevent abuse, enforce limits, keep the Service secure | Technical data, account | Legitimate interests |
| Understand and improve the product | Usage data | Legitimate interests; consent where required |
| Measure iOS advertising | Advertising identifier, install events | Consent (Apple’s tracking prompt) |
| Answer support requests | Support messages | Legitimate interests |
| Meet legal obligations (tax, accounting, legal requests) | Payment data, account | Legal obligation |
We do not use your resumes, answers or recordings to train our own AI models, and our AI providers’ terms for paid API use do not allow them to train on your data.
Who we share it with
We share personal data only with service providers that process it for us:
| Provider | What for |
|---|---|
| Google (Gemini) | Resume and job analysis, question generation, live voice interviews, scoring |
| Anthropic (Claude) | Backup AI processing when the primary model is unavailable |
| Supabase | Database, authentication, file storage and server functions |
| Vercel | Website hosting |
| Cloudflare | Bot protection (Turnstile) and web analytics |
| PostHog | Product analytics on the web, where enabled |
| Stripe | Web payments and subscription billing |
| Apple, RevenueCat | App Store payments and subscription management (iOS) |
| ElevenLabs, OpenAI | Text-to-speech voices (iOS) |
| D-ID | Talking-avatar video: an interviewer portrait and audio are sent to generate a lip-synced clip (iOS) |
| Meta | Ad attribution in the iOS app, only with your permission |
| Resend | Sending support and account emails |
We may also disclose data if the law requires it, to protect rights and safety, or as part of a sale or merger of our business (in which case this policy continues to apply).
iOS app
The iOS app includes the Meta (Facebook) SDK to measure whether our ads lead to installs. It only accesses your advertising identifier if you allow tracking in Apple’s App Tracking Transparency prompt. You can change this at any time in iOS Settings, Privacy & Security, Tracking. Some iOS results, such as resume analyses, are stored on your device.
How long we keep it
We keep account data, content and results while your account exists. When you delete your account in the web app settings, we delete your account and content from our live systems; backups roll off on their normal schedule. Anonymous sessions from the free tools are kept only as long as needed for rate limits and abuse prevention. Payment records are kept as long as tax and accounting law requires.
Your rights
You can access and export your data from the web app settings, and delete your account there. Depending on where you live, you may also have the right to correct your data, restrict or object to processing, withdraw consent and receive your data in a portable format. EU and UK residents can complain to their data protection authority. California residents have the right to know, delete and correct personal information, and to not be discriminated against for exercising these rights; we do not sell or share personal information for cross-context behavioural advertising on the web.
To exercise a right, email support@offermic.com. We answer within 30 days.
International transfers
We and most of our providers are based in the United States. When we transfer personal data from the EU, UK or Switzerland, we rely on the European Commission’s standard contractual clauses or the provider’s certification under the EU–US Data Privacy Framework.
Security
Data is encrypted in transit, access to production systems is restricted, and uploaded files are private to your account. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
Children
The Service is not for anyone under 16. We do not knowingly collect data from children under 16; if you believe a child has used the Service, contact us and we will delete the data.
Changes
We will update this page when our practices change and show the date at the top. For material changes we will also notify you in the app or by email.