Privacy Policy

1. Introduction

Kegaro ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mock interview platform and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

We collect information to provide and improve our Service.

2.1 Personal Information

We collect information you provide directly to us, including:

• Your name and email address when you create an account.
• Profile information such as your industry, experience level, and skills.
• Interview responses and recordings (audio and, if you choose, video).
• Content from your resume and cover letter.
• Payment information (e.g., credit card details) for premium subscriptions, which is securely processed by our third-party payment provider, Stripe.
• Your communication preferences and notification settings.

2.2 Usage Information

We automatically collect certain information about your use of our Service:

• Interview practice sessions and performance metrics, including text, voice-recorded, and live voice interview attempts with scores and feedback.
• Learning path progress through structured modules (theory, practice, assessments) with completion tracking and achievements.
• Resume analysis results including ATS scores, feedback, and improvement suggestions.
• Cover letter generation history and AI-powered content creation patterns.
• Job application tracking data and application limits based on subscription tier.
• Feature usage patterns across interview formats, learning paths, and premium features.
• Device information and browser type to ensure optimal platform functionality.
• IP address and location data for rate limiting, security, and fraud prevention.
• Referral system usage including codes shared, successful referrals, and credit rewards earned.

2.3 Audio and Video Data

When you use our audio or video recording features:

• Audio recordings are captured on-device and streamed directly to our transcription service provider for speech-to-text conversion.
• We receive only the text transcript; audio files are not retained by Kegaro after transcription.
• Video recordings (if you enable them) are processed for feedback on non-verbal cues and presentation style.
• All recordings are encrypted and stored securely during processing.
• Transcripts remain in your account until you delete them, close your account, or request earlier deletion.
• You can delete your recordings and associated data at any time through your account settings.

2.4 Third-Party Sub-processors

We use the following sub-processors for specific services:

• Deepgram, Inc.: Audio transcription and speech-to-text conversion for voice interviews
• Google Gemini AI: Interview feedback generation, performance analysis, and AI-powered content creation
• Stripe: Secure payment processing for subscriptions and credit packages
• Resend: Email delivery and communication services

All sub-processors are contractually bound by GDPR-compliant Data Processing Agreements and are prohibited from using your data for any other purpose.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process your interview sessions and provide feedback
• Generate personalized learning recommendations
• Track your progress and achievements
• Process payments and manage subscriptions
• Send important service updates and notifications
• Prevent fraud and abuse of our platform
• Comply with legal obligations

3.1 Legal Basis for Processing

Our processing of your personal data relies on:

• Contractual necessity (Art. 6(1)(b) GDPR): To deliver the Service you signed up for
• Legitimate interest (Art. 6(1)(f) GDPR): To improve and secure our Service, prevent fraud, and provide personalized experiences
• Consent (Art. 6(1)(a) GDPR): For optional features like marketing communications

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Processing payments (Stripe)
• Transcribing audio recordings
• Sending emails and notifications
• Analyzing usage patterns and improving our Service

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal requests from law enforcement
• Court orders or subpoenas
• Protection of our rights and property
• Emergency situations involving public safety

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction. We will notify you of any such change in ownership or control of your personal information.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

You have the following rights regarding your personal information:

6.1 Access and Control

• Access and review your personal information
• Update or correct inaccurate information
• Delete your account and associated data
• Download your data in a portable format
• Control email preferences and notifications

6.2 Data Retention

We retain your information for as long as your account is active or as needed to provide our Service. Specific retention periods:

• Account Data: Retained while your account is active
• Interview Recordings: Deleted immediately after transcription by Deepgram
• Interview Transcripts: Retained until you delete them or close your account
• Resume Analysis Data: Retained for ongoing improvement tracking
• Learning Path Progress: Retained for achievement tracking and module completion
• Cover Letter History: Retained until you delete them or close your account
• Job Application Data: Retained within subscription limits (5 for free, unlimited for premium)
• Referral System Data: Retained for credit tracking and fraud prevention
• Payment Records: Retained for 7 years for tax and legal compliance
• Rate Limiting Logs: Automatically deleted after 30 days

Upon account deletion, we will remove your personal data from active systems within 30 days, with backups purged within an additional 30 days. You can request immediate deletion by contacting our Data Protection Officer.

6.3 Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can control cookie settings through your browser preferences.

7. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Sending you an email notification
• Updating the "Last updated" date at the top of this policy

Your continued use of our Service after any changes constitutes acceptance of the updated Privacy Policy.

10. Your Data Protection Rights (GDPR)

If you are a resident of the European Economic Area (EEA) or United Kingdom, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, contact our Data Protection Officer at dpo@kegaro.com. We will respond within one month of receiving your request.

10.1 Complaints to Supervisory Authorities

You have the right to lodge a complaint with your local data protection authority. In the United Kingdom, this is the Information Commissioner's Office (ICO). We encourage you to contact us first so we can try to resolve your concern.

12. Automated Decision-Making & Profiling

Certain features rely on algorithmic processing and AI analysis:

• Interview Performance Scoring: AI-generated analysis of text, voice-recorded, and live voice interview responses using Google Gemini AI
• Resume ATS Scoring: Automated analysis of resume content for applicant tracking system compatibility
• Learning Path Recommendations: AI-powered suggestions for module progression and skill development
• Cover Letter Generation: AI-powered content creation based on job descriptions and resume data
• Interview Question Generation: AI-generated questions tailored to job titles, descriptions, and difficulty levels
• Performance Analytics: Automated tracking of interview scores, learning progress, and improvement areas

These outputs are provided for informational and educational purposes only. They are not used by Kegaro to make decisions that produce legal or similarly significant effects about you. You may contest or seek human review of any automated output by contacting our Data Protection Officer.