Privacy Policy

Information we collect

We collect minimal information necessary to provide our service:

• Email address: Collected when you start an interview. Used solely to send your scorecard report.
• IP address: Used for rate limiting to prevent abuse (max 5 interviews per IP per 24 hours). Stored temporarily and expires automatically after 24 hours.
• Session metadata: Your match score and hiring decision are logged to our database after your interview completes, without any CV or chat content.

What we deliberately do not store

Mockolab is built with a strict privacy-first approach. We treat your uploaded content with the highest level of confidentiality:

• Your PDF is sent directly to the AI model to extract the necessary data. Your CV document is never written to disk, cloud storage, or any database.
• The job description is sent to the AI model along with your CV to generate relevant interview questions. It is not stored beyond the active session.
• Interview messages exist only in a temporary server session that automatically expires after 2 hours and are never persisted to any permanent storage.
• When you use voice input, your microphone audio is streamed directly from your browser to Deepgram for transcription. The audio never passes through or is stored on our servers.

How we use your information

We use the collected information for the following purposes:

• We process your interview session, generate AI-powered questions, and deliver your scorecard report via email.
• We apply rate limiting to prevent misuse and ensure fair access for all users.
• Aggregated, anonymized session metadata (scores, decisions) may be used to analyze and improve service quality. We never use your CV content, job descriptions, or interview messages for this purpose.
• We comply with applicable laws, regulations, and legal processes when required.

Information sharing and disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Trusted third-party services that assist us in operating Mockolab (listed below).
• When required by law, court order, or government request, or to protect the rights, property, or safety of our users.
• In the event of a merger, acquisition, or sale, your information may be transferred as part of that transaction. We will notify you before your information is transferred.

Third-party services

We rely on the following services to operate Mockolab. These providers are committed to protecting your data under their own privacy policies:

• OpenAI receives your CV text, job description, and interview messages to generate questions and evaluations.
• Deepgram receives your microphone audio stream in real time to provide speech-to-text transcription during voice input. Audio is streamed directly from your browser to Deepgram and is never stored on our servers.
• Upstash stores your IP address temporarily for rate limiting and holds session data with automatic 2-hour expiration.
• Supabase stores session metadata (email, IP, score, decision). No CV or chat content is ever stored.
• Resend delivers the scorecard email to your inbox.
• Vercel hosts the application and processes all requests.

Data security

We implement appropriate technical and organizational security measures to protect your information. All data is encrypted in transit and at rest. Your CV is processed by AI and never used to train models. Session data expires automatically after 2 hours. Industry-standard security headers are enforced on all requests. While we strive to protect your information, no method of transmission or storage is 100% secure.

Data retention

Session metadata (email, score, decision) is retained in our database until manually deleted. IP rate limit data expires automatically after 24 hours. Active session data expires automatically after 2 hours. We do not retain CV documents, job descriptions, or interview messages beyond the active session.

Your privacy rights

Depending on your location, you may have certain rights regarding your personal information:

• You can request information about what data we hold about you.
• You can request deletion of your session metadata from our database.
• You can opt out of any future communications.

To exercise these rights, contact us at hello@mockolab.app. We will respond within a reasonable timeframe.

Cookies and tracking

Mockolab uses a single cookie to remember your language preference (English or Turkish). We do not use analytics cookies, advertising trackers, or any third-party tracking technologies.

Children's privacy

Mockolab is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

International data transfers

Our service uses cloud infrastructure and third-party service providers that may process your data in different countries. We ensure your data is protected through encryption in transit and at rest, regardless of where it is processed.

Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top and post the revised policy on our website. Your continued use of Mockolab after changes become effective constitutes acceptance of the revised Privacy Policy.

Contact

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at hello@mockolab.app.