Privacy Policy

Intervable ("we", "us") is an early-stage product operated by Rokas Kursevičius, a natural person based in Lithuania, acting as the data controller for personal data processed through intervable.com. Intervable is not yet incorporated as a company; once a legal entity is registered, this page will be updated with its name, registration number and registered address, and that entity will take over as controller.

We process personal data in line with Regulation (EU) 2016/679 (GDPR) and the Lithuanian Law on Legal Protection of Personal Data (BDAR įgyvendinantis įstatymas).

For any privacy request or question, contact support@intervable.com.

Intervable has not launched yet. Right now the only personal data most visitors give us is a waitlist sign-up. For each sign-up we store:

• your email address;
• whether you signed up as a candidate or as an employer;
• the date and time you signed up and confirmed;
• whether you ticked the optional product-updates box, and when.

Double opt-in. After you submit your email we send one confirmation message. Your address is only treated as an active waitlist entry once you click the confirmation link. If you never confirm, we delete the entry within 30 days.

What we send. Everyone on the confirmed list receives the launch notice. Product updates and early-access news are sent only to people who ticked the optional box. Legal basis: consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Opting out. Every email contains a one-click unsubscribe link. You can also email support@intervable.com and we will remove your address entirely.

From candidates:

• Account info: name, email, password hash, authentication tokens
• Profile info: target role, industry, seniority, skills, country
• Interview answers, voice transcripts, and AI-generated feedback
• Generated CVs, cover letters, and application history
• Session metadata: scores, duration, completion status

From employers:

• Company name, work email, billing details
• Job postings and required-skill criteria
• Candidate search activity and contact requests sent

We also keep short-lived technical logs (error traces, request timestamps) needed to keep the service running securely.

• Consent (Art. 6(1)(a)) — waitlist sign-up, product-update emails, analytics cookies, and the optional use of anonymized interview data to improve our AI.
• Contract performance (Art. 6(1)(b)) — running your account, mock interviews, CV generation and hiring tools once the service is live.
• Legitimate interests (Art. 6(1)(f)) — keeping the service secure, preventing fraud and abuse.
• Legal obligation (Art. 6(1)(c)) — tax, accounting and GDPR record-keeping duties.

• To tell you when Intervable opens, and to send updates if you asked for them;
• To run mock interview sessions and produce AI feedback;
• To generate tailored CVs and cover letters from your profile;
• To match candidates with companies in the anonymized talent pool;
• To send transactional emails (sign-up, password reset, session results);
• To investigate abuse, prevent fraud, and keep accounts secure.

We do not sell personal data and we do not share it with advertisers. AI scoring produces feedback and a profile you control; it does not, on its own, make a decision that produces legal effects concerning you (Art. 22 GDPR). Hiring decisions are always made by the employer, and no employer sees your identity until you choose to reveal it.

Once the product is live you can opt in to let Intervable use your anonymized interview answers and feedback to improve our AI models. This is strictly optional — the service works fully without it. You can grant or withdraw consent at any time from Settings → Privacy. Withdrawal applies going forward and does not affect data already used in past training.

We share personal data only with the processors needed to run the service, each under a data-processing agreement:

• Lovable Cloud / Supabase — application hosting, database and authentication (EU region).
• Resend — delivery of confirmation, transactional and waitlist emails.
• Google Analytics — anonymous usage statistics, loaded only after you accept analytics cookies.
• Google — OAuth sign-in, only if you choose to sign in with Google.
• ElevenLabs — text-to-speech for voice interview mode.
• AI model providers — to score interview answers and generate CVs.

We may also disclose data where required by law or to defend legal claims.

Our database and authentication are hosted in the EU. Some processors (Google Analytics, AI model providers) are based in the United States. Where personal data leaves the EEA, the transfer relies on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework, together with additional safeguards such as encryption in transit. You can ask us for details of the safeguards used.

• Unconfirmed waitlist sign-ups: deleted after 30 days.
• Confirmed waitlist emails: kept until launch and for up to 12 months after, or until you unsubscribe or ask for deletion — whichever comes first.
• Interview session data: 2 years from the session date.
• Account profile data: until you request deletion.
• Billing records: 10 years (legal requirement).
• Server and email delivery logs: 30 days.

You have the right to:

• Access — get a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — have your data deleted ("right to be forgotten").
• Restriction and objection — limit or object to certain processing.
• Portability — receive your data in a machine-readable format (Settings → Download My Data once you have an account).
• Withdraw consent — at any time, for the waitlist, marketing emails, analytics cookies, or AI improvement. Withdrawal does not affect processing done before it.
• Complain — to the Lithuanian supervisory authority, the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt), or to the authority where you live.

To exercise any right, email support@intervable.com. We respond within one month, as required by Art. 12(3) GDPR. We may ask you to confirm the request from the address we hold.

We use the minimum needed to run the site:

• Essential (no consent needed) — the authentication session token that keeps you signed in, and a local storage entry that remembers your cookie choice. The site cannot work without these.
• Analytics (consent required) — Google Analytics, used for anonymous usage statistics. These scripts are not loaded at all until you choose "Accept All" in the cookie banner. Choosing "Essential Only" means no analytics cookies are ever set.

You can change your choice at any time: open cookie settings. Clearing your browser storage also resets it.

Data is encrypted in transit (HTTPS), passwords are stored only as hashes, and database access is restricted by row-level security so accounts can only reach their own records. Access to production data is limited to the controller. If a personal data breach is likely to result in a risk to your rights, we will notify the supervisory authority within 72 hours and inform affected users where the law requires it.

Intervable is not aimed at children. Under Lithuanian law, consent-based online services may be used independently from the age of 14; we do not knowingly collect data from anyone younger, and accounts are intended for people aged 16 and over. If you believe a child has given us data, email support@intervable.com and we will delete it.

We update this policy as the product develops — in particular once Intervable is registered as a company and once paid plans launch. Material changes affecting the waitlist will be announced by email before they take effect. The "last updated" date at the top always reflects the current version.

Privacy questions or requests? Email support@intervable.com.