Ask Mandy

Privacy Policy

Last updated: [date]

Draft: this page accurately describes what the product does with your data today, but the bracketed placeholders (legal entity name, jurisdiction, contact email) need to be filled in — and it should be reviewed by a lawyer — before you treat it as a binding policy.

Who we are

Ask Mandy is operated by [Company Legal Name], [registered address / jurisdiction]. If you have questions about this policy, contact us at [support email].

Information we collect

  • Name, email address, and phone number when you book a session.
  • The job title, skills, and job description (pasted, selected, or extracted from an uploaded resume) you provide for your interview.
  • If you choose to upload a resume, its contents are processed to prefill the booking form.
  • Audio captured during your interview is transcribed in real time; we store the resulting text transcript, not audio recordings.
  • Payment details are handled entirely by our payment processor (Dodo Payments) — we do not receive or store your card or UPI details.

How we use it

We use your information to schedule and run your mock interview, generate interview questions tailored to your role and job description, transcribe your spoken answers, generate your feedback report, and email you your interview link and report.

Third parties we use

To provide the service, we share the minimum necessary data with:

  • OpenAI — to generate interview questions, convert them to speech, and generate your feedback report.
  • Deepgram — to transcribe your spoken answers in real time.
  • Supabase — to store your booking, transcript, and report.
  • Postmark — to send you booking and report emails.
  • Dodo Payments — to process payment for your session.

Data retention

[Describe how long booking, transcript, and report data is kept, and how a candidate can request deletion.]

Your rights

You can request access to, correction of, or deletion of your data by contacting [support email]. [Add any jurisdiction-specific rights, e.g. GDPR/DPDP, that apply to your users.]