The short version: we collect your CV, your interview audio and transcripts, and the minimum needed to run your account. We use them to run your interviews and produce your reports — nothing else. We never sell your data, never use it for advertising, and never hand it to anyone but the small set of providers that run the product for us. You can export or delete any of it, at any time, from your profile.
01
Who we are and what this covers
RoundAlpha (“RoundAlpha”, “we”, “us”) provides an AI interview practice and screening service through this website and the apps and interfaces connected to it. When you use RoundAlpha as an individual, we are the controller of your personal data — we decide what is collected and why.
This policy covers everything we do with personal data across the practice product, the employer hiring workspace, and this marketing site. It does not cover third-party websites you might reach from a link here; those run under their own policies.
If an employer invited you to a screening interview, read “If an employer invited you” below — that section explains the one case where somebody other than you decides how your interview is used.
02
Information you give us
We deliberately ask for as little as the product can run on. Everything in this list is something you actively hand over:
- Account details — your name, and the email address or mobile number you sign in with. If you use Google Sign-In, we receive the name, email address and profile picture on that Google account, and nothing else from it.
- Your CV — the file you upload, plus the roles, employers, projects, skills and seniority we read out of it in order to build an interview that is actually about you. Saved CVs stay in your library until you delete them.
- Interview context — the target company, role and level you type into setup, so questions can be shaped to the round you are actually preparing for.
- Interview content — the audio of what you say during a live interview, the transcript produced from it, anything you type in the work chat, and the code or system-design diagrams you produce during a working step.
- Reports and history — the scores, evidence quotes and written feedback generated from each session, kept so your progress is visible over time and so later interviews can avoid repeating what you have already been asked.
- Anything you write to us — support emails, feedback, and the contents of a data request.
03
Information we collect automatically
Some data arrives simply because the product is running in a browser. We keep this to the operational minimum:
- Device and connection data — IP address, browser and operating system, and screen size, used to serve the right layout, keep sessions secure and diagnose faults.
- Session and security data — sign-in times, refresh-token identifiers, and failed sign-in attempts, used to keep your account yours and to stop abuse.
- Product events — which screens you opened, when an interview started, ended or dropped, and whether a call reconnected. We use these to keep live interviews reliable and to know when something broke.
- Media diagnostics — whether your microphone and camera were reachable and whether audio was flowing, so a failed interview can be told apart from an abandoned one.
We do not run third-party analytics, advertising or cross-site tracking on RoundAlpha. There is no ad network, no data broker, and no pixel following you to other sites.
04
Information from other people
A small amount of data reaches us from somebody other than you. It is always tied to an action you or an employer took:
- From Google, when you choose Google Sign-In: your verified email address, name and profile picture.
- From our payment provider, when you buy credits: confirmation that a payment succeeded, the amount, and a reference. Card and bank details are entered on the provider's own checkout and never reach our servers.
- From an employer, when they invite you to a screening interview: your name and contact details, and the job description or role they want you interviewed against.
05
How we use your information
Every use below serves the product you asked for. There is no secondary use hiding behind them.
- To build your interview — reading your CV and target role so the questions are specific to your experience rather than generic.
- To run the live interview — streaming your audio to the AI interviewer so it can respond to what you actually said, and holding the session open if you drop and rejoin.
- To produce your report — grading the transcript and any artefacts you produced across the scored dimensions, and quoting your own words back as evidence.
- To make later interviews better for you — using a digest of your past sessions so the next one does not re-ask what you have already answered well.
- To run your account — signing you in, tracking your credit balance, issuing and reconciling invitations, and taking payment.
- To keep the service safe and working — detecting abuse, debugging failures, and protecting accounts.
- To talk to you — service messages such as sign-in codes and receipts, and replies when you contact us.
- To meet legal obligations — tax and accounting records, and responding to lawful requests.
We do not use your CV, your voice, your transcripts or your reports to train AI models — ours or anyone else's. Our AI provider processes this content only to return a response to us, under terms that forbid using it for their own model training.
06
The legal bases we rely on
Where data protection law requires a legal basis — for example the GDPR in the UK and Europe, or India's Digital Personal Data Protection Act — these are ours:
- Performance of a contract — running interviews, generating reports, managing credits and delivering what you paid for.
- Consent — capturing microphone and camera input for a live interview, which your browser asks you to grant and which you can withdraw at any time by ending the session or revoking the browser permission.
- Legitimate interests — keeping the service secure and reliable, preventing fraud and abuse, and improving the product using aggregated, de-identified signals. We balance these against your rights and use the least data that works.
- Legal obligation — retaining billing records and responding to valid legal process.
07
Automated decisions and AI scoring
Your interview is conducted and graded by an AI system. The score, the written feedback and the evidence quotes in your report are produced automatically, without a human reviewing them first.
For personal practice this has no legal or similarly significant effect on you: it is a rehearsal, and the report exists for you alone. Where an employer uses a RoundAlpha screening interview as part of a hiring decision, that decision is theirs to make and they are responsible for keeping a human in the loop; RoundAlpha produces the report, never the outcome.
AI systems make mistakes. If you think a report misread you, tell us and we will look at it.
09
International transfers
RoundAlpha is operated from India, and some of the providers above process data in other countries — including the United States and the European Union. That means your personal data may be transferred outside the country you live in.
Where such a transfer is regulated, we rely on recognised safeguards: contractual protections such as the European Commission's Standard Contractual Clauses, providers covered by an adequacy decision or an approved transfer framework, and encryption in transit for every hop. You can ask us for detail on the safeguards covering a particular transfer.
10
How long we keep it
We keep personal data only as long as it is doing a job. In practice:
What How long Then what CVs in your library Until you delete them or close the account Deleted from storage Interview audio Not stored after the session — it is streamed live and transcribed Only the transcript remains Transcripts and reports Until you delete the session or close the account Deleted, including from your history digest Account and profile For the life of the account Deleted within 30 days of closure Billing records As long as tax and accounting law requires Retained in a restricted form, then purged Security and diagnostic logs Up to 12 months Deleted or anonymised Deleting a CV or a session from your profile takes effect immediately — it is a real deletion, not a hidden flag.
11
How we protect it
We treat your practice material as confidential, because it is: an interview transcript is a record of you being uncertain in public, and that deserves care.
Concretely: every connection runs over TLS; data is encrypted at rest by our storage providers; passwords do not exist because sign-in is by one-time code or Google; refresh tokens are stored hashed and never in a form a script on the page can read; access to production data is limited to the people who need it to operate the service; and the interview room is scoped so one account can never reach another's sessions.
No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your personal data, we will tell you and the relevant regulator as quickly as the law requires and as clearly as we can.
12
Your rights and choices
Depending on where you live, you have some or all of the following rights over your personal data. We honour them for everyone, regardless of where you are:
- Access — get a copy of the personal data we hold about you.
- Correction — fix anything inaccurate or incomplete.
- Deletion — have your data erased, including your CVs, transcripts and reports.
- Portability — receive your data in a portable, machine-readable format.
- Objection and restriction — object to processing based on legitimate interests, or ask us to pause it while a dispute is resolved.
- Withdraw consent — revoke microphone and camera access at any time; it will not affect anything processed before you did.
- Complain — raise it with your local data protection authority. We would rather you came to us first, but it is your right either way.
Most of this you can do yourself: your profile lets you view, export and delete CVs, sessions and reports, and close your account outright. For anything broader, write to privacy@roundalpha.com and we will respond within 30 days.
13
If an employer invited you
When a company invites you to a RoundAlpha screening interview, the arrangement is different in one important way: the resulting report is prepared for that employer. They see your scores, your transcript and the evidence behind them; you see that you completed the round.
For that interview, the employer decides why your data is being processed and is the controller of it — we act on their instructions. Their own privacy notice governs what they do with the report, how long they keep it, and who inside their business sees it, so requests about the hiring process itself should go to them.
The account you get from an invitation is still yours. Anything you go on to do with it — personal practice sessions, CVs you upload afterwards — is private to you and never visible to the company that invited you.
14
Children
RoundAlpha is built for people preparing for professional work and is not directed at children. We do not knowingly collect personal data from anyone under 18, and where local law sets a higher bar for processing a child's data, we do not offer the service below it.
If you believe a child has used RoundAlpha, contact us and we will delete the account and everything attached to it.
15
Changes to this policy
When we change this policy we update the “last updated” date at the top. If a change materially affects how we handle your data, we will tell you in the product or by email before it takes effect, so you have the chance to object or close your account.
Older versions are available on request — we do not quietly rewrite history.
16
How to contact us
For anything about this policy, your data, or a request under the rights above, write to privacy@roundalpha.com. For everything else, hello@roundalpha.com reaches the same small team.
We answer privacy requests within 30 days. If we need longer because a request is complex, we will tell you why before that deadline passes.