1. Controller & contact
Controller: Shark Lane - Interview Prep. Data protection contact: support@sharklaneprep.com.
2. Data we process
Account: name, email, country, tax details when required for invoicing, limited billing data (processed by Stripe), preferences.
Usage: activity, results, technical logs, IP address, device identifiers/cookies.
User Content: essay-style and multiple-choice answers, interview simulations, feedback, and metadata. We do not intentionally collect sensitive data; please avoid including sensitive information in answers.
3. Purposes & legal bases
- Contract/service delivery: create your account, provide content, score exercises, issue invoices, and support.
- Fraud prevention & security.
- Product improvement & evaluation models: we use answers and metrics to train/tune evaluation models and calibrate rubrics on the basis of legitimate interests (after a balancing test), with data minimization and pseudonymization/anon where feasible. You may object via the privacy channel; where applicable we provide an opt-out that does not harm essential features.
- Legal/accounting obligations.
- Consent (where applicable): for marketing or uses beyond the above.
- AI processing: To operate features and improvements, we may process content through AI services acting as our processors. We do not allow your data to train third-party foundation models without a lawful basis or your consent where required.
4. Automated decisions / profiling
Algorithms may suggest scores/feedback to help you practice. We do not make decisions with legal or similarly significant effects about you.
6. International transfers
We may transfer data across borders (e.g., to the United States for payments or cloud infrastructure). Where required by law, we use safeguards such as Standard Contractual Clauses (SCCs), UK IDTA/Addendum, Brazilian SCCs, vendor data-protection addenda, and/or rely on adequacy decisions. We also apply measures to protect data during transfer and storage.
7. Retention & deletion
We retain data while your account is active and as needed to meet legal obligations or resolve disputes. You may request deletion of User Content subject to legal/technical limits.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, port, object, and request anonymization or restriction of processing. Where applicable, you may also exercise rights related to automated decision-making. We respond within the timeframe required by applicable law (generally 15–30 days). To exercise your rights, contact us via the channel above.
9. Security
We implement administrative, technical, and organizational measures proportionate to risk, including encryption in transit and other industry-standard controls. Payment data is segregated and processed by Stripe; we do not store full card numbers on our systems and rely on Stripe’s tokenization for payment processing.
10. Children & minors
The Platform is intended for individuals 18+ (see Terms). We do not knowingly collect personal data from children or minors without valid consent/authorization where required by law. If we learn that we have collected such data, we will delete it and take reasonable steps to limit any further processing.