Privacy Policy

Last updated: 7 July 2026

This document is also available in Russian for your convenience. In case of any discrepancy between the Russian and English versions, the English version shall prevail.

This Privacy Policy explains how Lernberg Education OÜ, operating the online interview‑simulation platform Job Interview Sim ("Service", "we", "us"), processes personal data of users ("you", "the candidate") in connection with the Service, and what rights you have regarding your personal data. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.

1. Who is responsible for your data (data controller)

The controller responsible for the processing of your personal data described in this Privacy Policy is:

Lernberg Education OÜ
Tuukri tn 19‑315, 10120 Tallinn, Estonia
Estonian Commercial Register No. 17242612
VAT (Estonia): EE102861655
Represented by: Alex Stachovski
Email: support@hiringsim.com

2. What personal data we process

2.1 Account and profile data

When you register and use the Service we process your name, email address, phone number (optional), avatar (optional), gender (optional), interface language and any interview‑profile settings you create (e.g. target role, language level). Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2.2 Résumé (CV) data

If you upload or fill in a résumé, we process the information it contains: contact details, desired salary, skills, work experience, education, certifications, languages and, if included, a photo. This data is used to tailor interview questions and to generate a résumé review, including with the help of an AI model (see section 2.4). Legal basis: performance of a contract and, where a photo or other data is provided voluntarily, your consent (Art. 6(1)(a) and (b) GDPR).

2.3 Job vacancy data

If you paste or upload a job vacancy description to practice against, we process the text of that vacancy to tailor the interview and feedback to it. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2.4 Interview session data (voice, transcripts, AI feedback)

During a voice interview session, your microphone audio is streamed in real time through our infrastructure and an AI speech‑to‑text service in order to produce a written transcript, and an AI text‑to‑speech service to generate the interviewer's spoken responses. We do not record or store the raw audio stream — only the resulting text transcript, the dialogue history and the AI‑generated feedback and scoring are saved to our databases. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2.5 Payment and subscription data

Paid subscriptions are processed by our payment provider, Stripe. We store the subscription plan you selected, billing period, currency, price and Stripe's own customer/subscription identifiers. We do not receive or store your card number or other card‑verification data — this is handled exclusively by Stripe. Legal basis: performance of a contract and compliance with legal (accounting/tax) obligations (Art. 6(1)(b) and (c) GDPR).

2.6 Technical and log data

We process IP address, browser/device information, and strictly necessary cookies (session, authentication, CSRF protection, language/locale preference, cookie‑consent choice) needed to operate the Service securely. Legal basis: legitimate interest in the security and proper functioning of the Service (Art. 6(1)(f) GDPR).

3. AI‑based nature of the Service

Job Interview Sim uses artificial‑intelligence models to conduct interviews, transcribe speech, synthesise the interviewer's voice and generate feedback and scoring. Interview responses, feedback, and any assessment shown to you are automatically generated and are provided for practice and self‑improvement purposes only; they do not constitute a certified psychological, professional or hiring assessment, and we do not guarantee any particular interview or employment outcome from using the Service.

4. Who we share your data with

We share personal data only to the extent necessary to provide the Service, and only with the following categories of recipients (sub‑processors):

Recipient Purpose Data shared Location
OpenAI AI interviewer / feedback generation, text‑to‑speech voice synthesis, résumé parsing Transcript text, résumé content, vacancy text, generated speech audio United States (SCCs, Art. 46 GDPR)
Deepgram, Inc. Speech‑to‑text transcription of your voice during an interview Streamed voice audio (not stored by us) United States (SCCs, Art. 46 GDPR)
Stripe Payment processing, invoicing, fraud prevention Billing data, payment identifiers United States / EU entity (SCCs, Art. 46 GDPR)
LiveKit (self‑hosted) Real‑time audio/video transport (WebRTC) for the interview session Streamed voice audio, transiently Our own infrastructure, EU/EEA
Hosting provider Hosting of our application, database and infrastructure All data described in section 2 EU/EEA

We may also disclose personal data to public authorities where required by law, or to a successor entity in case of a merger, acquisition or asset sale, subject to the same or equivalent protections.

5. International data transfers

Our own infrastructure (application servers and databases) is located within the European Union/European Economic Area. Some sub‑processors listed above are located in the United States. Where personal data is transferred outside the EU/EEA, we rely on the European Commission's Standard Contractual Clauses (Art. 46 GDPR) and additional technical and organisational safeguards to ensure an adequate level of protection.

6. How long we keep your data

  • Account data (name, email, profile settings): retained while your account is active, and deleted within 30 days of a confirmed account‑deletion request, unless a longer retention is required by law.
  • Résumé and vacancy data: retained while your account is active and deleted within 30 days of account deletion.
  • Interview transcripts, dialogue history and AI‑generated feedback: retained for up to 24 months from the date of the relevant interview session, or until you delete your account, whichever occurs first.
  • Invoices and payment records: retained for 7 years, as required by Estonian accounting law.

You can request earlier deletion of your data at any time — see your rights in section 8. If your account remains inactive, we may delete session‑derived data (transcripts, feedback) earlier than the periods above.

7. Cookies and similar technologies

We currently use only cookies that are strictly necessary for the Service to function: session management, authentication, CSRF protection, language preference and your cookie‑consent choice. We do not currently use analytics, advertising or social‑media tracking cookies. If this changes in the future, we will update this Privacy Policy and the cookie banner shown on the website, and request your consent before setting any non‑essential cookie.

8. Your rights under the GDPR

Subject to the conditions set out in the GDPR, you have the right to:

  • request access to the personal data we hold about you;
  • request rectification of inaccurate or incomplete data;
  • request erasure of your data ("right to be forgotten"), where no legal retention obligation applies;
  • request restriction of processing;
  • receive your data in a structured, commonly used, machine‑readable format ("data portability");
  • object to processing based on our legitimate interest;
  • withdraw, at any time, any consent you have given, without affecting the lawfulness of prior processing;
  • lodge a complaint with a supervisory authority (see section 11).

To exercise any of these rights, contact us at support@hiringsim.com.

9. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction, including encryption in transit, firewalls, access controls and the principle of minimal necessary access.

10. Minors

The Service is intended for users who are at least 18 years old. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal data, please contact us so we can delete it.

11. Supervisory authority

If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work, or the place of the alleged infringement. The supervisory authority competent for Lernberg Education OÜ is:
Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
Tatari 39, 10134 Tallinn, Estonia — www.aki.eeinfo@aki.ee

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes and publish the then‑current version on this page with an updated "Last updated" date.

13. Company details

Lernberg Education OÜ
Tuukri tn 19‑315, 10120 Tallinn, Estonia
Estonian Commercial Register No. 17242612 · VAT (Estonia): EE102861655
Represented by: Alex Stachovski
Email: support@hiringsim.com
Website: hiringsim.com