Privacy Notice

Last updated: February 9, 2025

This Privacy Notice explains how Brwse Co. ("Brwse", "we", "us", "our"), operating the Rcruit platform, collects, uses, shares, and protects personal data when you visit our website at rcruit.io (the "Website") or use our AI-powered interview practice platform (the "Services").

Key points

  • Voice and video data: interview sessions are processed in real time for AI evaluation. We do not permanently store raw audio or video recordings after session completion.
  • Transcripts and feedback: interview transcripts and AI-generated evaluation results are stored in your account so you can review your performance.
  • No sale of data: we do not sell your personal data or share it for behavioral advertising.

1. Personal data we collect

A. Information you provide

  • Account information: name, email address, and authentication credentials (including via social login providers such as Google, GitHub, LinkedIn, or Apple).
  • Interview content: scenarios you create, job descriptions you provide, and any other content you submit to generate interview rubrics and practice sessions.
  • Voice and video data: audio and video captured during live interview practice sessions for real-time AI processing.
  • Payment information: billing details processed through Stripe. We do not store your full payment card details on our servers.

B. Information generated by the Services

  • Transcripts: speech-to-text transcriptions of your interview sessions.
  • Evaluation results: AI-generated scores, feedback, and coaching recommendations based on your interview performance.
  • Usage data: credit balances, session history, and feature usage.

C. Information collected automatically

  • Device and usage data: browser type, IP address, pages viewed, timestamps, and referring page.
  • Security and operational logs: access logs, error logs, and audit logs.

2. How we use personal data

We use personal data to:

  • Provide the Services: conduct AI-powered interview sessions, generate transcripts and evaluations, and manage your account and credits.
  • Improve the Services: understand usage patterns, fix issues, and develop new features.
  • Process payments: manage credit purchases and billing through Stripe.
  • Communicate with you: respond to support inquiries and send service-related notifications.
  • Protect security: detect fraud, misuse, and security incidents.
  • Comply with legal obligations: respond to lawful requests and enforce our agreements.

3. Third-party services and data sharing

We use the following categories of service providers to operate the Services:

  • AI processing: Google Gemini for interview simulation, evaluation, and feedback generation.
  • Voice and video: LiveKit for real-time communication, Deepgram for speech-to-text and text-to-speech processing.
  • Payments: Stripe for payment processing.
  • Infrastructure: cloud hosting and database providers for storing account data, transcripts, and evaluations.

We may also share personal data with:

  • Professional advisors under confidentiality obligations.
  • Authorities where required by law or to protect rights, safety, and security.
  • Corporate transactions (e.g., merger or acquisition), subject to appropriate safeguards.

4. Legal bases (EEA/UK)

If you are in the EEA or UK, we rely on the following legal bases under GDPR/UK GDPR:

  • Performance of a contract: providing the Services to you as agreed in our Terms of Service.
  • Legitimate interests: securing our systems, improving the Services, and preventing abuse.
  • Consent: where required (e.g., for optional data processing).
  • Legal obligation: complying with applicable laws.

5. Data retention

We retain personal data as follows:

  • Account data: for the duration of your account and a reasonable period thereafter.
  • Transcripts and evaluations: retained in your account until you delete them or your account is closed.
  • Voice and video streams: processed in real time and not permanently stored after session completion.
  • Security logs: retained for a limited period to support investigations and abuse prevention.
  • We may retain data longer where required by law, dispute resolution, or to enforce our agreements.

6. Security

We maintain administrative, technical, and physical safeguards designed to protect personal data, including access controls, encryption in transit, and monitoring. No method of transmission or storage is 100% secure, but we work to protect your data.

7. International data transfers

We operate globally. Where personal data is transferred internationally, we use appropriate safeguards, which may include EU Standard Contractual Clauses (SCCs) and the UK Addendum/IDTA, as applicable.

8. Your rights and choices

Depending on your location, you may have rights to:

  • Access your personal data.
  • Correct inaccurate personal data.
  • Delete personal data.
  • Object to or restrict certain processing.
  • Port your personal data.
  • Withdraw consent where processing is based on consent.

To exercise your rights, contact us at privacy@rcruit.io. If you are in the EEA/UK, you may also lodge a complaint with your local supervisory authority. We do not sell personal data or share it for cross-context behavioral advertising.

9. Children's data

Our Services are not directed to children under 16. We do not knowingly collect personal data from children.

10. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. We will post the updated version on this page and update the "Last updated" date.

11. Contact us

To contact us about privacy, email privacy@rcruit.io.