Effective date: August 25, 2026 · Controller: RoleLever (Canada) · Contact: contact@rolelever.co
RoleLever is an AI mock-interview platform. Candidates practice voice interviews with an AI interviewer, receive an AI-generated report, and can optionally make a vetted profile discoverable to recruiters. This policy explains what we collect, why, who we share it with, how long we keep it, and your rights.
You provide: account email, password (stored only as a salted hash), optional name; profile details (display name, target role, experience level, bio, résumé text, skills, country, work-authorization status, languages, links, projects, "open to work"); and any job description you paste.
Generated when you take an interview: an audio recording of the interview, a turn-by-turn transcript with timestamps, AI assessment data (scores, per-question feedback, competency ratings, an estimated cost figure), and your coach chat messages. If your camera is on, we also record a video recording of the interview (your camera and your voice) — see section 5, which explains why, and what we do not do with it.
Collected automatically: technical/usage data (IP address, browser/user-agent, request origin, session identifiers, a login token in your browser's localStorage) and, if enabled, product-analytics events.
Payment data: if you buy a paid plan, your card details are collected and processed directly by our payment processor (Stripe). We do not store full card numbers; we keep only a billing reference, your plan, and transaction status.
Sensitive/biometric note: an interview recording is your voice — and, if you record video, your face — and may be treated as biometric or special-category data under some laws (e.g. GDPR Art. 9, Illinois BIPA, Texas CUBI). We process recordings only with your consent, we do not run face recognition, faceprinting or any other biometric identifier extraction on them, and we do not use them to identify you. You can turn video off, or decline recording-related sharing, and still use every practice feature.
| Purpose | Legal basis |
|---|---|
| Provide the interview, report, transcript, coach | Contract |
| Store your profile & history | Contract |
| Process payments & manage subscriptions | Contract |
| Make your profile/badge discoverable to recruiters | Consent (opt-in) |
| Store/share interview recordings (audio and video) | Explicit consent |
| Security, abuse/fraud prevention, rate limiting | Legitimate interests |
| Product analytics & improvement | Consent / legitimate interests |
| Legal compliance | Legal obligation |
We do not sell your personal information, and we do not use your interview content to train third-party AI models.
Your interview is conducted and scored by AI models. Assessments are automated and may be inaccurate — they are practice/guidance, not a definitive measure of ability or a hiring decision. Where a recruiter uses RoleLever signals to evaluate you, that recruiter (not RoleLever) makes any employment decision. If you have rights regarding automated decision-making, contact us.
Your profile is private by default. Only if you enable "share with recruiters" can vetted recruiters discover your profile and interview-derived badge and competency signals. Interview recordings are not shared with recruiters by default — a recruiter can access a recording only if you give a separate, explicit grant for that referral. You can withdraw sharing consent at any time. Recruiter access is logged.
Why we record video. How you come across is half of an interview, and it is the half a transcript cannot show you: whether you looked up and answered or froze, how long the silence really was, what your hands were doing while you thought. Recording the video lets you watch your own delivery back beside your scored report, which is the only way to work on it. That is the entire purpose. It is not used to judge you.
What we do not do with it. We do not run facial recognition, emotion or sentiment detection, personality or trait inference, body-language analysis, or any other computer-vision scoring on your video. Your report is generated from what you said — the transcript — and would be identical if the camera had been off. We do not use your video to train AI models, our own or anyone else's, and we do not sell or disclose it for advertising.
You decide, every interview. The camera and microphone controls sit on the screen before the interview starts, and RoleLever tells you in a notice, before the first frame is written, that recording is on and how to turn it off. Choosing "start without video" runs an ordinary audio interview. Before the interview begins, the camera preview is local to your browser and nothing is saved. You can turn video off at any point mid-interview without ending the interview, and turn it back on again. Your consent is recorded per interview, with a timestamp — never inferred from a setting you chose once.
Who can see it. Only you. Video is stored privately, served through short-lived, per-recording links that expire, and requires your login. Recruiters cannot access your interview video — not by default and not by the separate grant that can share an audio recording for a referral. Our staff do not watch your recordings; access is limited to what is strictly necessary to operate or repair the Service, and is logged.
How long we keep it, and how to erase it. Video is kept for up to 365 days and then deleted automatically. You can delete any recording yourself, at any time, from its report — that erases the stored file, not just the link — and deleting your account erases all of them. Deleted data may persist in encrypted disaster-recovery backups for up to ~6 months before rotation.
Where it lives. Video is processed and stored by us on our own hosting; it is not sent to Deepgram, Anthropic, or any other sub-processor in section 6. The audio track of your interview is transcribed as it always is, whether or not you record video.
Interviewing other people. RoleLever records mock interviews, and the only person in front of the camera should be you. Do not use it to record anyone else without their knowledge and consent — in many places, including Canada and several US states, that is against the law.
We use a small set of trusted third-party providers to run the Service. We share only the data each provider needs for its function, under contracts that require them to protect it.
| Provider | Purpose | Data involved |
|---|---|---|
| Deepgram | Speech-to-text transcription and AI voice (text-to-speech) | Interview audio & transcript text |
| Anthropic (Claude) | AI language model that runs and scores the interview | Transcript, job description, résumé text |
| Supabase | Authentication and database hosting | Account & profile data |
| Stripe | Payment processing for paid plans | Billing details & card data (held by Stripe) |
| SMTP2GO | Transactional and product email delivery | Email address & message content |
| Cloud hosting (VPS) | Runs the application and stores your data | All service data |
| Google Fonts (CDN) | Web fonts and icons | IP address only |
Some providers are located outside your country (for example, in the United States). Where required, we rely on safeguards such as Standard Contractual Clauses for international transfers. If we change our sub-processors, we will update this list.
Interview video recordings are deleted automatically after 365 days (see section 5). Otherwise we keep data only as long as needed for the purposes above or as required by law. You can delete your account, recordings, and chat history in-app. Note that deleted data may persist in encrypted disaster-recovery backups for up to ~6 months before rotation. When you delete your account we also retain a one-way cryptographic hash of your email address for 30 days, solely to prevent abuse of free-tier limits (e.g. repeatedly deleting and recreating an account to reset free usage); it contains no readable personal data and is discarded after 30 days. Deleting your account erases your interview recordings and transcripts, reports, saved jobs and applications, practice sessions, résumé data and profile. Two things deliberately survive: a record that the deletion happened (so we can show the request was honoured), and the billing and usage totals for interviews already run — minutes and cost figures with the content removed, kept because they are the accounting record for the account.
Data is encrypted in transit (HTTPS/TLS). We restrict access, hash passwords (bcrypt), rate-limit sensitive endpoints, and keep an audit log of sensitive actions. No system is perfectly secure.
GDPR/UK: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time; you may complain to your data-protection authority. Canada (PIPEDA): the right to access and correct your personal information and to withdraw consent, subject to legal and contractual limits; you may complain to the Office of the Privacy Commissioner of Canada. CCPA/CPRA (California): the right to know, delete, correct, opt out of sale/sharing (we do not sell), and limit use of sensitive information; no discrimination for exercising rights. To exercise any right, email contact@rolelever.co.
We use localStorage to hold your login token (necessary) and a few interface preferences — for example, whether you asked us not to show the video-recording notice again. That preference only hides a message; it can never turn recording on, and your camera choice is never carried over from one interview to the next. If analytics are enabled, identifiers may be set. We do not use third-party advertising cookies.
RoleLever is not directed to children under 18 and we do not knowingly collect their data.
We may update this policy and will post a new effective date; for material changes we will notify you.
RoleLever (Canada) — contact@rolelever.co.