1. Introduction
This Privacy Policy explains how ACED-IT (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you visit acedit.app or use our design interview preparation service (the “Service”).
We are the data controller for personal data processed through the Service. If you have questions or want to exercise your rights, contact us at support@acedit.app.
This policy is written for users in the United Kingdom and European Economic Area. If you access the Service from elsewhere, local laws may also apply.
2. Personal data we collect
We may collect the following categories of personal data:
- Account data: name, email address, password (stored in hashed form by our authentication provider), and optional marketing preferences.
- Profile & billing data: subscription status, trial dates, Stripe customer identifiers, and invoice metadata. We do not store full payment card numbers; card details are handled by Stripe.
- CV & job description content: files and text you upload so we can generate practice questions and tailor feedback to your experience and target role.
- Practice session data: interview questions, voice recordings, transcripts, scores, feedback, session timestamps, and related metadata.
- Whiteboard data: sketches, post-it notes, talk-track text, clarifying chat with the AI interviewer, debrief scores, and saved board images.
- Technical & usage data: IP address, browser type, device information, pages viewed, and diagnostic logs needed to operate and secure the Service.
- Communications: messages you send to support@acedit.app and essential service emails (account verification, billing, security).
You choose what to upload. Do not submit sensitive personal data (e.g. health information, national ID numbers, or third-party confidential information) unless you are comfortable it being processed for practice purposes.
3. How and why we use your data
We use personal data to:
- create and manage your account;
- provide practice interviews, whiteboard challenges, and feedback;
- process subscriptions, trials, and payments;
- send service, billing, and security communications;
- send marketing emails only where you have opted in;
- improve, secure, and troubleshoot the Service;
- comply with legal obligations and enforce our Terms.
Under UK GDPR, our lawful bases typically include: contract (to deliver the Service you signed up for), legitimate interests (security, analytics, product improvement, balanced against your rights), consent (optional marketing), and legal obligation (tax and accounting records).
4. AI and automated processing
Parts of the Service use artificial intelligence to analyse CVs, generate questions, transcribe or interpret answers, score responses, and run whiteboard debriefs. Your content may be sent to AI providers for this purpose.
Automated feedback is for practice only. It is not a human hiring decision and does not guarantee interview outcomes. You may contact us if you want a human review of a decision that significantly affects you.
6. International transfers
Some providers may process data outside the UK/EEA (for example, in the United States). Where this happens, we rely on appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses, or equivalent mechanisms approved under applicable law.
7. How long we keep data
- Account & billing records: for as long as your account is active and for up to seven years thereafter where needed for tax, accounting, or legal claims.
- Practice content: until you delete it, delete your account, or ask us to erase it, subject to backup cycles (typically up to 30 days).
- Marketing preferences: until you withdraw consent or we no longer use the list.
- Support emails: as long as needed to resolve your request and maintain a reasonable support history.
When data is no longer needed, we delete or anonymise it using commercially reasonable measures.
8. Security
We use technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS), access controls, and authenticated APIs. No online service is completely secure; please use a strong, unique password and keep it confidential.
9. Your rights
Depending on where you live, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. Where we rely on consent, you may withdraw it at any time without affecting prior lawful processing.
To exercise your rights, email support@acedit.app. We may need to verify your identity. You can also delete your account in Settings, which removes your authentication profile and cancels active subscriptions where applicable.
UK users may complain to the Information Commissioner's Office (ico.org.uk). EEA users may contact their local supervisory authority.
10. Marketing communications
We send essential service emails (verification, billing, security) regardless of marketing preference. Promotional emails are sent only if you opt in at signup or later. Every marketing email includes an unsubscribe link, or you can email support@acedit.app.
12. Children
The Service is intended for adults preparing for professional roles. It is not directed at children under 16, and we do not knowingly collect their personal data. Contact us if you believe a child has provided data and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on acedit.app and update the “Last updated” date. Material changes may be notified by email or in-app notice where appropriate.
14. Contact
Data protection enquiries: support@acedit.app
Website: https://acedit.app