Privacy notice

Who is responsible

When you take an interview, the interview creator that invited you decides why and how your interview is used. They are the data controller. Intaviu processes your data on their behalf. For our own customers' account and billing information, Intaviu is the controller.

What happens on your device

The Intaviu desktop app recognises your speech and produces the interviewer's voice on your own computer. If you take an interview or practice in your browser instead, the interviewer's voice is produced in your browser, and your speech is turned into text by your browser's own speech recognition (for example Google's service in Chrome or Apple's in Safari), or on your device where the browser has none. Intaviu never receives or stores your camera picture or recordings of your voice, and never sends them to the interview creator. Only the text of what was said reaches Intaviu.

Some interviews are open only in certain places. For those, your device shares its location once before you start, with your permission. We send the coordinates to a geocoding service (Geoapify, or geocode.maps.co if it can't answer) to find the state and country, keep only the state and country with your interview, and never store your exact position. The interview creator sees the state and country.

What we collect from candidates

• Your name, email address and, if you give it, your phone number.
• Details the interview creator adds about you when they invite you, such as where you work or study.
• The text transcript of your interview, with timestamps.
• Files you share during the interview, and files the interview creator adds to your record (such as your CV), with the text read from PDF, Word and text files.
• If the interview creator requires your camera or microphone: when each one was off and for how long. Never the picture or the sound.
• An AI-assisted evaluation of your answers against the interview creator's rubric, with quoted evidence.
• Technical details such as app version and operating system, and an optional experience rating and comment.

We never ask for, and the interviewer is instructed never to ask about, your age, religion, ethnicity or tribe, state of origin, marital status, pregnancy, health or disability.

Signing in with Google or LinkedIn

You can create an account or log in with your Google or LinkedIn account instead of a password. Only after you agree on Google's or LinkedIn's own consent screen, we receive your name, email address, profile picture and whether that service has confirmed your email address. We ask for nothing else: we can't read your email, contacts, files, calendar, posts or connections, and we never post or act on your behalf.

We use this information only to create your Intaviu account and sign you in. It is stored with your account in Intaviu's own database. We never sell it, never use it for advertising, and never share it with anyone except the service providers named in this notice that host and run Intaviu for us. Intaviu's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Intaviu's access at any time in your Google Account (myaccount.google.com/permissions) or your LinkedIn settings; you then sign in with your email address and a password instead. Deleting your Intaviu account deletes this information with the rest of your account.

Gender and where you heard about us

When you set up your account, candidates can give their gender (male, female or other), and everyone can tell us where they heard about Intaviu. We ask for gender only to understand who uses Intaviu, counted in aggregate. "Prefer not to say" is always available. Your gender is stored with your account only: it is never shared with interview creators, never given to the interviewer and never used in interviews, scores or recommendations. Where you heard about us is used only to understand which channels bring people to Intaviu, and you can skip that question. Both are included when you download your data, and you can change or remove your gender at any time in your profile.

How it is processed

Interview text, the interview creator's details about you and the text of your files are processed by a language model service to run the conversation and to prepare the evaluation. The main one is Google's Gemini; when it is unavailable, the same text may go to a backup provider we have contracted for the same purpose. The scores in an evaluation are set by Perplexity's Decider model, reached through OpenRouter, which receives the interview text and the interview's rubric; requests are routed only to endpoints that keep none of it. These providers process the data under their terms for paid API customers and do not use it to train their models. Processing may take place outside Nigeria under safeguards required by the Nigeria Data Protection Act 2023.

In a video interview, the interviewer's synthesised voice is sent to HeyGen's LiveAvatar service, which turns it into the presenter's video. Your voice, camera picture and answers are never sent to HeyGen.

Evaluations support, and never replace, a human decision. The interview creator reviews every interview and decides what happens next.

Personalisation

To suggest practice interviews and next steps, Intaviu uses what you do on Intaviu: the pages and practices you view and roughly how long a practice page stays open, the filters you use on practice lists, the practices you search, save, share and take and how far you get in each, the job openings you preview from a link (their title and website), the suggestions you're shown and which ones you open, your practice scores, your upcoming interviews and the country or state you chose. Practice interviews also use it to focus on what you need to work on. It never affects an interview you're invited to (the questions, the interviewer or how your answers are scored), interview creators never see it, everyone sees the same prices, and we never infer or use sensitive characteristics such as age, gender, ethnicity, religion or health. You get a copy of this data, with everything else we hold about you, from "Download your data" in Profile. To switch personalised recommendations off or have us start over, email [email protected] from your account's address. With it off, we keep only what the service itself needs, such as your purchases and the interviews you take, and suggestions follow popular practice and your upcoming interviews. When you delete your account, we delete these records and the profile built from them. We also respect your browser's Do Not Track setting.

Lists such as "Popular in Lagos" show the practices opened most in a state. They come from Google Analytics totals across everyone who visits the practice pages, and any count under 10 views is left out, so a list never shows what one person looked at. Your state comes from the city in your profile or, without one, from the area your internet address points to. It only decides which list you see: it never shapes your other suggestions.

When you share a practice page, the link opens the service you picked (such as WhatsApp, X or LinkedIn) in a new tab, or your email app, with the page's address. Intaviu sends that service nothing itself and loads no code from it; we record only which one you picked, as one of the events above. What you post there is covered by that service's own terms.

Google Analytics and advertising

Intaviu shows no ads on its own pages. With your consent, we use Google Analytics 4 for two purposes, each off until you turn it on:

• Analytics: to count visits and see which pages and features people use, so we can make Intaviu better.
• Advertising: so Google can use that Google Analytics data, including Google signals, to show you Intaviu's ads on other sites and apps, choose which are relevant to you, and measure how they work. It needs Analytics, since it uses the same data.

On the website a banner asks first, with Accept All (both), Reject Non-Essential (neither) and Manage Settings (choose each). The desktop app asks once, about analytics only, with the same three choices; the web room uses your website choice for analytics only. Until you accept, nothing is loaded from Google and no Google cookie is set. If your browser sends Do Not Track or Global Privacy Control, we treat it as Reject Non-Essential.

What is sent: the kind of page you open, with every identifier taken out of its address (interview codes, links' tokens, payment references and the ids of runs, candidates and interviews become a pattern such as /i/[code]; only campaign tags such as utm_source are kept), the page you came from in the same form, a few events (signing up or logging in, starting a practice interview or a checkout, a purchase with its value in naira and the plan or top-up bought, opening an interview link; in the web room and the app, the room or app opening and an interview starting and ending, with its length), a random id for your browser or app, and what Google collects from any browser, such as its type, language, screen size and the approximate area your internet address points to.

What is never sent: your name, email address or phone number, your account, workspace or candidate ids, the names of organisations or interviews, page titles, payment references, and nothing from an interview itself: no transcript, answers, files, scores or evaluations. The web room and the desktop app send their events through Intaviu's own server, which passes on only those events, for analytics only, and drops anything else.

Google signals and ad personalisation are on only when you turn on Advertising. Then, if you are signed in to a Google account and have allowed ad personalisation in your Google settings, Google can link your visits to that account, to count one person across devices, to report on demographics and interests such as age range, and to personalise and measure Intaviu's ads. Intaviu sees only totals, never which account or person a visit belongs to.

Legal basis: your consent, for each purpose. You can withdraw it at any time without affecting what was done before: in Cookie Settings at the bottom of every page on the website (turning a purpose off stops it at once and deletes its cookies on the Intaviu website), and in Preferences, General in the desktop app. Your website choice lasts 6 months, then we ask again.

Who is responsible: for analytics, Google processes the data on Intaviu's behalf, as our processor under Google's data processing terms for Google Analytics. For its own advertising uses, such as personalising ads with Google signals and data from your Google account, Google is an independent controller under its own privacy policy. Google may process the data outside Nigeria, under the safeguards the Nigeria Data Protection Act 2023 requires. Google Analytics keeps the detailed data for 14 months and then deletes it. How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites. Your Google ad settings: myadcenter.google.com. Our cookies notice lists the cookies involved.

Legal basis

We use Google Analytics and Google's advertising features only with your consent, which you can withdraw at any time as described above.

We process candidate data with your consent, which you give before the interview starts, and to take steps at your request before a possible contract with the interview creator, such as for a job or a place on a programme. You can withdraw consent at any time by contacting the interview creator or us; this does not affect processing that already happened.

How long we keep it

Interview creators choose how long to keep interview records (3, 6, 12 or 24 months after the interview, or until they delete them) and can delete a candidate's data at any time. Records are deleted when an interview creator deletes them or closes their account. Billing records are kept for six years to meet tax obligations.

Files you share in an interview or a practice interview are also kept in your documents, so you can share them again later without uploading them. Only you see your documents, and you can delete one at any time in Profile: we delete it from your documents and from your practice interviews. A copy you shared in an interview stays with that interview's creator, as part of your interview record, for as long as they keep that record. Free accounts can keep up to 500 MB of documents, Plus 2 GB, Pro 2.5 GB and Premium 5 GB. File contents are stored with Cloudflare R2, encrypted at rest, and are only ever sent through Intaviu to you or to the interview creator you shared them with.

Your rights

• Access the data held about you.
• Correct anything that is wrong.
• Ask for your data to be deleted.
• Object to or restrict processing, and withdraw consent.
• Complain to the Nigeria Data Protection Commission.

To use these rights as a candidate, contact the interview creator that invited you, or write to [email protected] and we will pass your request on and help them respond within the time the law requires.

Security

Data is encrypted in transit, access is limited to the interview creator's workspace, and every change is logged. Payments are handled by Paystack, in its own checkout window over our page or on its own page; card details go only to Paystack, and we never see or store full card numbers.

Intaviu runs its own sign-in. Your account, email address and password are held by Intaviu itself, not by a separate sign-in company. Passwords are stored only as salted hashes, never as the password you typed. When you choose a new password, we check it against Have I Been Pwned's list of passwords exposed in data breaches by sending only the first five characters of a hash of it, never the password. Signing in with Google or LinkedIn is described in its own section above. When you delete your account, your sign-in details and every signed-in session are deleted with it.

Some forms on the website (sign-up and log-in, password reset, the contact form, sending a confirmation email again, the link box on the practice page when you're signed out, and invitation pages after several wrong interview codes) are protected by Cloudflare Turnstile, which checks that a person, not an automated program, is using them. For that check Cloudflare processes your IP address and signals from your browser and device, such as its user agent and a TLS fingerprint, on our behalf. Cloudflare states it uses these signals only to tell people from bots, never to identify, profile or target anyone. Our server only learns whether the check passed. The website and the Intaviu API are delivered through Cloudflare's network, which handles your IP address and request details to deliver them and protect them from attacks. Cloudflare Web Analytics also counts visits to the website's pages and measures how fast they load, without cookies, browser storage or following you across sites; Cloudflare processes your IP address for this on our behalf, and we see only totals. Our cookies notice lists what is stored in your browser.

Contact

Intaviu, Lagos, Nigeria. Email [email protected].