Privacy Policy

The data controller for HateInterviews is TOKEN LABS LIMITED (company number 17372231), a private limited company registered in England and Wales (“HateInterviews,” “we,” “us,” or “our”). We provide a real-time AI interview copilot: client applications plus a web account for billing, credits, and history. This Privacy Policy covers hateinterviews.com (and related domains), our web dashboard, and HateInterviews client software.

Registered office: 98 Lozells Road, Birmingham, England, B19 2TB.

For privacy requests, email support@hateinterviews.com. We have not appointed a separate data protection officer.

Under the UK GDPR and Data Protection Act 2018, we must give you clear information about how we process personal data. This page is that transparency notice. It is not a contract and does not replace our Terms of Service. Using the Services does not, by itself, mean you “agree” to every possible processing activity — we process data only where a lawful basis applies (see below).

This notice applies when you:

• visit our marketing site or create an account;
• manage billing, credits, or interview history in the dashboard;
• run live or practice sessions in a HateInterviews client app.

It does not control third-party products you use alongside us (Zoom, Google Meet, Stripe Checkout pages, speech/LLM vendors, and so on). Those providers process data under their own notices.

Account and profile. Email address, authentication identifiers (for example email/password or Google sign-in via our auth provider), and profile fields you choose to store (preferences, uploaded materials related to interviews).

Billing. Plan status, credit balances, and purchase history. Card numbers are collected by Stripe, not stored on our application servers. We may keep Stripe customer/subscription IDs and limited card metadata Stripe provides (for example last four digits).

Interview session data. During an active session the app may process microphone and/or system audio to produce transcripts and AI suggestions. That can include your voice and, depending on how you capture audio, voices of other people in the room or call (for example an interviewer). We may store session metadata (start/stop, credit use, display names) and conversation artifacts needed for history or support. We do not sell interview recordings.

Device and usage. IP-derived approximate location, browser or OS type, app version, diagnostic logs, and how you use the site or dashboard.

Communications. Support messages you send us, and service emails we send (security, billing, product notices).

Referrals. If you arrive via an invite or affiliate link, we may associate a referral code with your signup for commission tracking.

Under UK GDPR we need a lawful basis for each purpose. We rely on the following (the exact mix can depend on the feature):

• Contract (Art. 6(1)(b)) — creating and securing your account; running interview sessions you start; showing history and credits; providing paid subscription or credit features you buy.
• Legitimate interests (Art. 6(1)(f)) — securing the Service, preventing fraud and abuse, improving reliability, basic product analytics in aggregate, and defending legal claims — where those interests are not overridden by your rights.
• Legal obligation (Art. 6(1)(c)) — tax, accounting, and responding to lawful requests.
• Consent (Art. 6(1)(a)) — where we ask for it (for example optional marketing emails, or non-essential cookies/storage if we introduce them). You can withdraw consent at any time without affecting prior lawful processing.

AI training. We do not use your live interview audio or transcripts to train HateInterviews’s own foundation models. Session content is sent to third-party speech and language providers solely to generate suggestions for your session. If that changes, we will update this notice and obtain consent where required.

Other people’s voices. You must only use capture modes that are lawful in your situation. Where the app processes audio that includes someone else, you are responsible for having a lawful basis or permission to capture that audio (for example telling participants, or using the tool only where your local law allows). Do not use the Services to secretly record others where that is illegal.

We do not sell personal data. We share it with processors and partners only as needed:

• Infrastructure and auth — currently Supabase (database and authentication);
• Payments — Stripe (checkout, subscriptions, invoices);
• Speech and AI — vendors that transcribe audio and generate suggestions (for example AssemblyAI and an LLM provider such as DeepSeek or OpenAI, depending on configuration);
• Operations — tools for email delivery, error monitoring, or support;
• Legal and safety — when required by law or to investigate fraud, abuse, or security incidents;
• Corporate transactions — if we explore or complete a merger, financing, or asset sale, under appropriate confidentiality.

Invite-only creators in our affiliate programme may see aggregated commission data about referred signups, not your interview transcripts.

Some processors (including US-based cloud, payments, speech, or AI vendors) process data outside the UK. Where UK GDPR requires safeguards, we use appropriate transfer tools such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another mechanism recognised by the ICO / UK law, plus supplementary measures where needed.

• Account profile — for the life of the account, then deleted or anonymised within a reasonable period after closure (target: within 90 days), except where we must retain records.
• Billing and transaction records — typically up to 6 years (or longer if required for tax/accounting disputes).
• Interview session history / transcripts we store — while the account is active and as needed for support; deletable on verified account-deletion requests subject to backup cycles (usually cleared from primary systems within 90 days).
• Security and server logs — usually 30–180 days unless needed for an investigation.
• Support emails — typically up to 24 months after the last message in a thread.

Aggregated or irreversible anonymised metrics may be kept longer. Exact periods can vary; contact us if you need detail for a specific dataset.

We use HTTPS/WSS, access controls, and least-privilege practices for production systems. No transmission or storage method is perfectly secure. Protect your password and device, and tell us promptly about suspected account compromise.

We use cookies and similar storage as described in our Cookie Notice. Non-essential storage that requires consent under PECR will only run after you opt in, if we introduce it.

Depending on the circumstances, you may have the right to:

• Access — a copy of personal data we hold about you;
• Rectification — correct inaccurate data;
• Erasure — ask us to delete data in certain cases;
• Restriction — limit how we use data while a dispute is resolved;
• Portability — receive certain data in a machine-readable form;
• Object — object to processing based on legitimate interests (and to direct marketing if we ever send it);
• Withdraw consent — where processing is based on consent;
• Complain — to the UK Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint.

To exercise rights, email support@hateinterviews.com. We may need to verify your identity. You can also update some profile and billing details in the dashboard, and cancel subscriptions as described in the Terms.

We do not use solely automated decision-making that produces legal or similarly significant effects about you without human involvement.

The Services are not aimed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.

We may update this Privacy Policy. The “Last updated” date will change, and for material changes we may also email the address on your account or show an in-product notice. Check this page periodically.

Privacy requests: support@hateinterviews.com

Related: Terms of Service · Cookie Notice