Privacy policy
Updated
This Privacy Policy explains how Offermic (“we”, “us”) collects, uses and shares personal data when you use the Offermic website, the web app at /app and the iOS app (together, the “Service”). We are the controller of your personal data.
Contact: support@offermic.com (please put “Privacy” in the subject line).
Summary
- We use your resume, job postings and answers to run mock interviews and give feedback. That is the product.
- Your content is processed by AI providers, mainly Google (Gemini), to analyse resumes and jobs, generate questions, run live voice interviews and score answers. Anthropic (Claude) is a backup when Gemini is unavailable.
- On the web, your account, the resumes you upload or build, interview transcripts and results are stored so you can come back to them. You can export your data or delete your account in the web app settings at any time.
- We do not sell your personal data, and we do not use your content to train our own AI models.
- The website does not set cookies. Our own analytics are cookie-less, store no IP address and switch off when your browser sends Do Not Track or Global Privacy Control.
- The iOS app uses the Meta SDK to measure app-install ads, and only accesses your advertising identifier if you allow tracking.
What we collect
Account data. Email address, sign-in method (email and password, magic link, Google or, where offered, Apple), display name, language and the goals you choose during onboarding. If you sign in with Google, we receive your email address and basic profile (name and picture) from Google. If you try a free tool or your first practice answer without an account, we create an anonymous account with no email address; if you sign up later, it becomes your account.
Content you provide. Resumes you build in the web app, and resumes and CVs you upload (PDF, Word or image files, which include your work history, education, skills and any contact details you put in them), job postings you paste or upload, typed or spoken answers, and the transcripts of your live interviews.
Voice. During a live interview, your microphone audio is streamed from your browser directly to Google’s Gemini Live service, using a short-lived access token that our server creates for that session. We do not store audio recordings on the web; we store the text transcript.
Results we generate. Resume and job analyses, interview questions, scores, feedback, suggested answers, interview reports and your practice history.
Payment data. Web subscriptions are processed by Stripe. Stripe, or its affiliate Link, may act as the seller of record for a web purchase; in that case it collects your payment and billing details, calculates tax and checks for fraud as an independent controller under its own privacy policy (Stripe, Link). We receive your subscription status, plan, trial and renewal dates, your country and a Stripe customer ID, but not your card number. App Store purchases are processed by Apple and managed through RevenueCat; we receive the subscription status. Web subscription status may also be shared with RevenueCat, our subscription management provider.
Usage records. How many AI features you have used, so we can apply plan limits.
Analytics data (web). Pages and app screens viewed, time on page, how far you scrolled, the referring website’s domain, whether you use a mobile or desktop screen, your browser and operating system type, your time zone and browser language, and your country. See “Analytics” below.
Technical data. Our hosting and backend providers process your IP address and browser details to deliver the Service, protect it from abuse and apply rate limits. We use Cloudflare Turnstile to check that sign-ups, anonymous sign-ins, the free tools and the contact form are used by people rather than bots.
Support messages. What you send us through the contact form or by email, and our replies.
iOS app. The iOS app also collects usage events and error reports linked to a random ID generated on your device, and, with your permission, the advertising identifier (see “iOS app” below).
How we use it
| Purpose | Data | Legal basis (EU/UK) |
|---|---|---|
| Run mock interviews, score answers, analyse resumes and jobs | Content, results, account | Performance of our contract with you |
| Keep your history and progress | Content, results, account | Performance of contract |
| Take payments and manage subscriptions | Payment data, account | Performance of contract |
| Apply plan limits, prevent abuse, keep the Service secure | Usage records, technical data, account | Legitimate interests |
| Understand and improve the product | Analytics data | Legitimate interests |
| Measure iOS advertising | Advertising identifier, install events | Consent (Apple’s tracking prompt) |
| Answer support requests | Support messages, email address | Legitimate interests |
| Send account emails (confirmations, sign-in links, password resets) | Email address | Performance of contract |
| Meet legal obligations (tax, accounting, legal requests) | Payment data, account | Legal obligation |
We do not use your resumes, answers, transcripts or recordings to train our own AI models. To produce questions, scores and feedback we send them to our AI providers through their API services, and their own terms apply to how they handle it. For the website and web app we use paid API plans whose terms say the provider does not use this content to improve or train its models; providers may still keep it for a short period to detect abuse and meet legal obligations.
Analytics
On the website and in the web app we use our own analytics. It sets no cookie and writes nothing to your device. It stores no IP address and no user-agent string. From each request it keeps only coarse details: the browser and operating system family, the country (when our hosting provider supplies it), and the time zone and language your browser reports. To count visits, our server combines them with a secret value and the date, keeps only the resulting hash, and the secret changes the result every day, so visits cannot be linked across days. When you are signed in to the web app, screen views and these details are linked to your account so we can see how the app is used and help you with support requests; when you delete your account, that link is removed. Nothing is sent when your browser has Do Not Track or Global Privacy Control turned on. We delete analytics events after 400 days.
We may also use Cloudflare Web Analytics, which is cookie-less, and PostHog product analytics. Where PostHog is enabled, it may store an identifier in your browser.
Cookies and browser storage
The Offermic website does not set cookies. The website and web app use your browser’s local storage and session storage only for things they need to work:
- your sign-in session, so you stay signed in;
- your language preferences, including your default interview language;
- whether you dismissed a banner, such as the app download banner;
- your onboarding progress and generated practice questions, so a page reload does not lose them;
- small flags, such as whether you postponed onboarding.
Stripe’s payment form and Cloudflare Turnstile run on our pages and may use their own strictly necessary cookies or similar technologies for fraud prevention and security.
Who we share it with
We share personal data only with service providers that process it for us:
| Provider | What for |
|---|---|
| Google (Gemini API) | Resume and job analysis, question generation, live voice interviews, scoring |
| Anthropic (Claude) | Backup AI processing when Gemini is unavailable |
| Supabase | Database, authentication, file storage and server functions |
| Vercel | Website hosting |
| Cloudflare | DNS, bot protection (Turnstile), email forwarding for our support address and, where enabled, web analytics |
| PostHog | Product analytics on the web, where enabled |
| Resend | Sending account emails and support messages |
| Sign-in with Google, if you choose it | |
| Apple | Sign in with Apple, if offered and you choose it; App Store payments (iOS) |
| Stripe (and Link) | Web payments and subscription billing; may act as seller of record for web purchases |
| RevenueCat | Subscription management across iOS and web |
| ElevenLabs, OpenAI | Text-to-speech voices and backup AI processing (iOS) |
| D-ID | Talking-avatar video: an interviewer portrait and audio are sent to generate a lip-synced clip (iOS) |
| Meta | Ad attribution in the iOS app, only with your permission |
We may also disclose data if the law requires it, to protect rights and safety, or as part of a sale or merger of our business (in which case this policy continues to apply).
iOS app
The iOS app includes the Meta (Facebook) SDK to measure whether our ads lead to installs. It only accesses your advertising identifier if you allow tracking in Apple’s App Tracking Transparency prompt. You can change this at any time in iOS Settings, Privacy & Security, Tracking. The app also records usage events and error reports linked to a random ID created on your device. Some iOS results, such as resume analyses, are stored on your device.
How long we keep it
- Account, content and results: while your account exists. This includes uploaded resume files, which stay in private storage so you can reuse them.
- Job posting files: a job posting file you upload is deleted as soon as it has been analysed; we keep the analysis.
- Free tools: the text you enter is sent to our AI provider and the result is returned to you; we do not save that text, only a record that the tool was used.
- Analytics events: 400 days.
- Payment records: as long as tax and accounting law requires.
- Support messages: as long as needed to handle your request and any follow-up.
When you delete your account in the web app settings, we first cancel any active web subscription with Stripe so you are not charged again, then delete your uploaded files and your account, which deletes your profile, resumes, job postings, interviews, results, practice history, billing records and usage records. Analytics events are kept without any link to you. Data in our providers’ backups is removed on their normal backup schedule. Subscriptions bought through Apple must be cancelled in your Apple ID settings.
Your rights
In the web app settings you can download a copy of your data (as a JSON file), correct your display name and preferences, and delete your account. Depending on where you live, you may also have the right to access, correct or delete your data, restrict or object to processing, withdraw consent at any time and receive your data in a portable format.
EU, EEA and UK. You have the rights above under the GDPR or UK GDPR. Where we rely on legitimate interests, you can object. You can also complain to your local data protection authority.
California. Under the CCPA, as amended by the CPRA, you have the right to know what personal information we collect and how we use and disclose it, and to access, correct and delete it, and not to be discriminated against for exercising these rights. We do not sell personal information. On the web, we do not share it for cross-context behavioural advertising. In the iOS app, the Meta SDK is used for ad measurement only if you allow tracking. We do not use sensitive personal information to infer characteristics about you. We honour Global Privacy Control signals on the web.
To exercise a right, email support@offermic.com from the address on your account. We may need to verify your identity. We answer within 30 days, or sooner where the law requires.
International transfers
Offermic is based in the United States, and most of our providers process data in the United States or other countries. When we transfer personal data from the EU, the UK or Switzerland, we rely on the safeguards our providers offer, such as the European Commission’s standard contractual clauses (and the UK addendum) in their data processing terms.
Security
Data is encrypted in transit. Database access is limited by row-level security, so each account can only read its own data, and uploaded files are kept in private storage that only your account can read. Access to production systems is restricted to the people who run the Service. Our internal analytics show users by a pseudonymous code rather than by name or email. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
Children
The Service is not directed to anyone under 16. We do not knowingly collect personal data from children under 16; if you believe a child has used the Service, contact us and we will delete the data.
Changes
We will update this page when our practices change and show the date at the top. For material changes we will also notify you in the app or by email before they take effect.
Contact
Offermic. Email support@offermic.com.