Back to Home
Data Protection

Privacy Policy

Last updated: 20 August 2026

In short:your resume text and your typed or transcribed interview answers are sent to Google's Gemini API — outside India — so the AI can generate questions and feedback. Your voice never reaches us: speech recognition happens in your browser, and we receive only the resulting text. We do not sell your data. You can delete your account and its data at any time from Settings.

1. Who is responsible for your data

PrepAI is an independent product built and operated by Harsh Jain, who is the Data Fiduciary for the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). Contact details, including the Grievance Officer, are in section 9.

2. What we collect

  • Account details — name, email address, and a hashed password (bcrypt; we never store your password in readable form). If you sign in with Google, we receive your name, email and profile image from Google.
  • Profile details you choose to give — college, graduation year, target role or exam.
  • Resume content — the text extracted from any PDF or DOCX you upload, including anything personal you have put in it (phone number, address, employment history).
  • Interview content — the text transcript of your answers, timing and pace measurements, scores, and the feedback generated for you.
  • Payment records — the Razorpay order and payment identifiers, the amount, and which plan you bought. We never see or store your card, UPI or bank details — those go directly to Razorpay.
  • Technical data — a session cookie to keep you signed in, and basic request logs used for rate limiting and abuse prevention.

3. About your voice

Spoken interviews use your browser's built-in speech recognition (the Web Speech API). This means your audio is captured and transcribed by your browser vendor— on Chrome and Edge, that means the audio is sent to Google's speech servers under their privacy policy, not ours. PrepAI never receives, stores or processes your audio; we receive only the text your browser returns. If you would rather not use speech recognition, you can type your answers instead.

4. Who we share it with, and where it goes

We do not sell your personal data and we do not use it to train any AI model. We share the minimum necessary with these processors:

  • Google (Gemini API) — receives your resume text, your interview answers and the topics you request, in order to generate questions, scores, feedback and courses. Processed on servers outside India.
  • Razorpay — receives your name, email and user ID to create and settle payments. Razorpay is an Indian payment processor and is the sole handler of your payment instrument.
  • Vercel — hosts the application and processes requests.
  • Email delivery — used only to send password resets, subscription notices and any digest emails you have opted into.

Cross-border transfer: by using AI features you agree that the data described above is transferred to and processed by Google outside India. If you do not want your resume leaving the country, do not upload it — the question bank, aptitude tests and flashcards work without it.

5. How long we keep it

  • Interview history and reports — visible to you for 7 days on Free, 90 days on Pro, and for the life of the account on Elite. Records beyond your plan's window are no longer shown to you.
  • Resume text — kept until you replace it or delete your account.
  • Account details — kept until you delete your account.
  • Payment records — retained as long as required for tax, accounting and dispute-resolution purposes, even after account deletion.

6. Your rights

Under the DPDP Act you can:

  • Access the personal data we hold about you, and get a copy of it.
  • Correct anything inaccurate — most fields are editable in Settings.
  • Delete your account and its associated data. You can do this yourself from Settings, or email us and we will action it.
  • Withdraw consent to AI processing at any time by deleting your stored resume and no longer using the interview features. Withdrawal does not affect processing already carried out.
  • Nominate someone to exercise these rights if you are unable to.
  • Raise a grievance with us (section 9), and escalate to the Data Protection Board of India if you are not satisfied with our response.

7. Cookies

We use a single essential cookie to keep you signed in. We do not run advertising or third-party tracking cookies.

8. Children

PrepAI is intended for users aged 18 and over. If you are under 18, you may use PrepAI only with the consent of a parent or guardian, as required by the DPDP Act. We do not knowingly process a child's data without such consent; if you believe we have, contact us and we will delete it.

9. Contact and grievance redressal

For any question about this policy, or to exercise any right above:

  • Grievance Officer: Harsh Jain
  • Email: prepaipro@gmail.com
  • Response time: we aim to acknowledge within 72 hours and resolve within 30 days.

10. Changes

If we change how we use your data in a material way, we will update the date at the top of this page and, where the change is significant, notify you by email.