1.Who we are
Intervable ("we", "us") is the data controller for personal data processed through intervable.com. We are committed to handling your data lawfully, fairly, and transparently under the EU General Data Protection Regulation (GDPR).
For privacy-related questions, contact our Data Protection team at privacy@intervable.com.
2.What data we collect
From candidates:
- Account info: name, email, password hash, authentication tokens
- Profile info: target role, industry, seniority, skills, country
- Interview answers, audio transcripts, and AI-generated feedback
- Generated CVs, cover letters, and application history
- Session metadata: scores, duration, completion status
From businesses:
- Company name, work email, billing details
- Job postings and required-skill criteria
- Candidate search activity and contact requests sent
3.Why we collect it (legal basis)
We process your personal data under the following GDPR legal bases:
- Contract performance — to deliver the Service you signed up for (mock interviews, CV generation, hiring tools).
- Legitimate interests — to keep the Service secure, prevent fraud, and improve AI quality (with your separate consent).
- Consent — for optional features like AI training and marketing emails. You can withdraw consent at any time.
- Legal obligation — to comply with tax, accounting, and GDPR record-keeping requirements.
4.How we use your data
- To run mock interview sessions and produce AI feedback;
- To generate tailored CVs and cover letters from your profile;
- To match candidates with companies in the anonymized talent pool;
- To send transactional emails (sign-up, password reset, session results);
- To investigate abuse, prevent fraud, and keep accounts secure.
5.AI improvement consent
You can opt in to allow Intervable to use your anonymized interview answers and feedback to train and improve our AI models. This is strictly optional — the Service works fully without it. You can grant or withdraw consent at any time from Settings → Privacy. Withdrawal applies going forward and does not affect data already used in model training.
6.Data sharing
We do not sell personal data. We share it only with the processors needed to run the Service, under strict data-processing agreements:
- Supabase — database and authentication hosting (EU region).
- ElevenLabs — text-to-speech for voice interview mode.
- Google — OAuth sign-in (only when you choose to sign in with Google).
- AI providers — to score interview answers and generate CVs.
7.Data retention
- Interview session data: retained for 2 years from the session date.
- Account profile data: retained until you request deletion.
- Billing records: retained for 10 years (legal requirement).
- Server logs: retained for 30 days for security investigations.
8.Your rights under GDPR
As a data subject in the EU, you have the right to:
- Access — get a copy of the data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data ("right to be forgotten").
- Portability — download your data in a machine-readable format from Settings → Download My Data.
- Withdraw consent — at any time, for features that rely on it.
- Lodge a complaint — with your local supervisory authority. In Lithuania, that's the State Data Protection Inspectorate (vdai.lrv.lt).
To exercise any of these rights, email privacy@intervable.com.
10.Contact
Privacy questions? Email privacy@intervable.com.