Privacy Policy

01 · Who We Are

LOVEUAD LTD (Company No. 16838046), registered in England & Wales, is the data controller for all personal data processed through InterviewAI and SalesCoach (collectively, "the Service").

Our registered address is in Leeds, United Kingdom. You can reach our data contact at privacy@loveuad.com.

02 · What Data We Collect

03 · How We Use Your Data

• Delivering the Service — generating interview questions, evaluating your answers, producing session feedback.
• Authentication — verifying your identity on each request.
• Credit management — deducting and topping up session credits.
• Service improvement — aggregate, anonymised analysis of session quality. Individual transcripts are not used to train third-party models.
• Legal compliance — retaining transaction records as required by UK financial regulations.

We do not sell your data. We do not use your data for advertising.

04 · Legal Basis for Processing (UK GDPR)

05 · Third-Party Processors

We use the following processors. Each is bound by a data processing agreement and applicable law.

For transfers to the USA (Groq, LemonSqueezy, Apple), we rely on Standard Contractual Clauses (SCCs) under UK GDPR.

06 · Audio & Voice Data

Your audio is sent to Groq's Whisper API solely for conversion to text. Groq's data processing agreement prohibits them from using your audio to train their models. The temporary audio file is deleted from our server immediately after the transcription API call completes.

The interviewer voice you hear is generated by Sarvam AI's text-to-speech service from the question text. No audio of you is sent to Sarvam.

07 · CV / Résumé Data

When you upload a CV, we extract up to 6,000 characters of text to personalise your interview questions. The original PDF is not permanently stored — it is written to a temporary file, parsed, and deleted immediately. Only the extracted text is stored, within your session record in Supabase.

CV text is sent to Google Gemini solely to generate relevant interview questions. Google's API terms prohibit using API input to train Google's models.

08 · Data Retention

You may request deletion of your session data and account at any time (see Section 9). Transaction records are retained for 7 years regardless of account deletion, as required by UK law.

09 · Your Rights

Under UK GDPR you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data (subject to legal retention obligations)
• Restriction — limit how we process your data
• Portability — receive your session transcripts in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent

To exercise any right, email privacy@loveuad.com. We will respond within 30 days. We may need to verify your identity before acting on a request.

10 · India — Digital Personal Data Protection Act 2023

For users accessing the Service from India, the following applies under the DPDP Act 2023:

• Data Fiduciary: LOVEUAD LTD is the Data Fiduciary for all personal data processed through the Service.
• Consent: By creating an account and using the Service, you provide consent to process your personal data as described in this policy. You may withdraw consent at any time by deleting your account.
• Purpose limitation: Your data is processed only for the purposes stated in this policy.
• Data Principal rights: You have the right to access, correct, and erase your personal data, and to nominate a representative. Contact us at privacy@loveuad.com.
• Cross-border transfer: Your data may be processed outside India (UK, EU, USA) by the processors listed in Section 5. We apply appropriate safeguards for all such transfers.
• Grievance Officer: For India-specific data grievances, contact us at privacy@loveuad.com. We will acknowledge within 48 hours and resolve within 30 days.

11 · Children

The Service is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us immediately at privacy@loveuad.com and we will delete the account.

12 · Security

We implement the following measures to protect your data:

• All data in transit is encrypted via TLS 1.2+
• All data at rest is encrypted in Supabase (AES-256)
• Authentication tokens are short-lived JWTs managed by Supabase Auth
• Audio files are written to isolated temporary files and deleted immediately after processing
• Admin access is protected by role-based authentication
• Payment data is never transmitted to or stored on our servers

No system is completely secure. In the event of a data breach affecting your rights and freedoms, we will notify the ICO within 72 hours and affected users without undue delay, as required by UK GDPR Art. 33–34.

13 · Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email (if you have an account) and by updating the "Effective" date at the top of this page. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

14 · Contact & Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

For India, complaints may also be submitted to the Data Protection Board of India once operational under the DPDP Act 2023.