How we protect your data

Intuiterview is designed with internationally recognized security principles. We do not claim formal certifications we do not yet hold; instead, we describe the concrete practices we follow today, and we expand this program as we grow.

Encryption

• Data in transit is protected with HTTPS/TLS between your browser and our servers, and between our servers and our service providers.
• Passwords are stored as one-way cryptographic hashes using industry-standard algorithms, we never store or transmit plaintext passwords.
• Sensitive tokens (session cookies, verification tokens) are cryptographically random and short-lived.

Secure authentication

• You can sign in with email and password or with a supported social sign-in provider.
• Password requirements include a minimum length and are validated on account creation and password change.
• Verification emails and password reset links expire after a short window.
• Sessions are protected with secure, HTTP-only cookies to reduce exposure to common web attacks.

Account protection

• You can update your password, sign out of all devices, and delete your account at any time from Settings.
• We monitor for suspicious sign-in activity and apply protections against brute-force attempts.
• Administrative access to production systems is limited to authorized personnel and audited.

Responsible AI practices

• AI providers only receive the content necessary to produce the requested output.
• We do not sell your personal data. We do not use your personal data to train third-party foundation models beyond the scope of a single request.
• AI-generated content is stored on your account so you can review, edit, and delete it.
• See our AI Transparency page for how AI can go wrong and how to review it safely.

Data deletion

• Delete individual mock sessions and Interview Day Briefs from within the app.
• Clear your full interview history from Settings → Privacy.
• Delete your entire account and personal data from Settings → Account.
• Deletion from active systems is immediate; deletion from backup systems follows our regular retention schedule.

Report a security concern

We welcome responsible disclosure. If you believe you have found a vulnerability, please contact us at hello@intuiterview.com with steps to reproduce, potential impact, and any supporting materials. Please do not publicly disclose the issue until we have had a reasonable opportunity to investigate and respond.