Privacypolicy

This policy explains what personal data Rehearse collects, why, and what you can do about it. Rehearse is run by an independent business based in Mauritius, which is the data controller. We follow the Mauritius Data Protection Act 2017, and we give everyone the rights in the EU and UK GDPR, wherever they live.

1. What we collect

• Account details: your email address. If you sign in with Google, we also get your name and a Google account ID.
• Interview content: the details you enter to set up an interview (such as your role, background or target country), your answers, and the reports we generate.
• Security data: the browsers you're signed in on (browser, operating system and when each was last active), and the public key of any passkey you add. The private key of a passkey never leaves your device.
• Abuse protection: your IP address and a device cookie, used to enforce sign-in and free-usage limits. They're kept only as short-lived counters, not as a history of what you did.
• Purchases: which pass you bought and when. Your card details go straight to our payment provider. We never see or store them.

We don't sell your data, use it for advertising, or use it to train AI models.

2. Why we use it

• To run your interviews and save your reports (to provide the service you asked for).
• To sign you in, protect your account, email you sign-in codes and alert you about new sign-ins (to provide the service and keep it secure).
• To enforce free limits and stop abuse (our legitimate interest in keeping Rehearse fair and running).
• To process purchases and refunds, and to keep records the law requires (to fulfil our contract with you, and our legal obligations).

3. Who we share it with

We use these service providers to run Rehearse. Each gets only what it needs for its job:

• AI providers (Groq, Google (Gemini)): your interview setup and answers, to generate questions and your report. We use Google's free Gemini tier as a backup, and Google may use what's sent to it to improve its products, so please don't include sensitive personal details in your answers.
• Render: hosts the website, in Frankfurt, Germany.
• Supabase: hosts our database.
• Resend: sends our emails (sign-in codes and security alerts).
• Cloudflare: protects the site, runs the bot check on sign-in, and counts page visits with Web Analytics, which doesn't use cookies or track you across sites.
• Google: only if you choose to sign in with Google.
• Our payment provider: processes payments as merchant of record, under its own privacy policy.

Some of these providers are outside Mauritius, including in the EU and the US. We rely on their data protection terms, such as standard contractual clauses, to protect your data when it's transferred. We'll also share data if the law requires it.

4. Cookies

We only use cookies Rehearse needs to work: one to keep you signed in, one to limit free usage per device, and short-lived ones that secure the sign-in process. We don't use advertising or tracking cookies, so there's no cookie banner.

5. How long we keep it

• Your account, interview details and reports: until you delete them or your account.
• Sign-in codes: 10 minutes. Sign-in sessions: until you sign out, or after 60 days without use.
• Abuse-protection counters: a few days at most.
• Purchase records: as long as tax and accounting laws require, which can be several years.

6. Your rights

You can ask to see, correct, export or delete your data, or object to how we use it. You can delete your account and all its data at any time from your account page, and that happens straight away. For anything else, email support@rehearse.guru and we'll reply within 30 days. You can also complain to the Data Protection Office of Mauritius, or to the data protection authority where you live.

7. Children

Rehearse isn't for anyone under 16. If you think a child has given us data, email us and we'll delete it.

8. Security

Connections are encrypted with HTTPS. Sign-in codes and session tokens are stored only as hashes. We alert you to sign-ins from new devices, and you can sign out other devices from your account page. No system is perfectly secure, but we work to protect your data.

9. Changes

If we change this policy significantly, we'll tell you by email or on the site. The date at the top shows when it last changed.

10. Contact

Privacy questions or requests: support@rehearse.guru.