Privacy policy

myIBpartner is a brand of MyQuantPartner, LLC, a Delaware limited liability company (registered details on our Legal Notice). MyQuantPartner, LLC is the data controller for the personal data described in this policy.

For any question, request or complaint about your personal data, contact us at [email protected]. We respond within one month.

We only collect what we need to run the Service.

• Account information. You sign in with Google. Google shares your email address, your name and a unique account identifier with us, and may share other basic profile details such as a profile picture. We never receive your Google password.
• Your CV. When you upload a CV (a PDF), we read the text out of it and store that text, together with a structured version of it (for example your education, experience, skills and the contact details it contains) and the file's name, size and page count. We do not keep the PDF file itself. Your CV is used to tailor the questions in your mock interviews.
• Mock interviews. The name you give an interview process, the rounds and topics you choose, the written transcript of what you and the interviewer said, the state of each conversation (so an interrupted round can resume), and the scores and written feedback for each round and each question, with their timings.
• Practice. The answers you submit, whether you typed or dictated them, the time you took, and the scores and feedback they received.
• Your voice. When you speak in a mock interview or dictate an answer, the audio is streamed directly from your browser to our speech recognition provider and turned into text in real time. We do not record or store your audio. Only the resulting text reaches us. The interviewer's voice is generated by our speech provider from text.
• Technical data. Your IP address and the device and browser information sent with every web request are processed by our hosting and content delivery providers to deliver the site. Our server logs record requests, their outcome and timing, and the account identifier involved in some actions such as signing in.
• Billing data. If you buy a paid plan, our payment processor handles your payment details. We receive your plan, billing period and the identifier the processor assigns you, never your full card number.
• Messages you send us, by email or otherwise, and our replies.

Please do not include sensitive information in your CV or your answers that the Service does not need, such as health data, religious or political views, or government identification numbers, and do not upload information about other people that you are not entitled to share.

For users covered by the General Data Protection Regulation (GDPR), each purpose below has a legal basis under its Article 6.

• To create and run your account and provide the Service, including tailoring interviews to your CV, running live mock interviews and grading your answers: performance of our contract with you (Art. 6(1)(b)).
• To process payments and keep accounting records: contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)).
• To keep the Service secure, prevent abuse and fix problems: our legitimate interest in protecting the Service and its users (Art. 6(1)(f)).
• To improve the Service, for example by studying how features are used in aggregate: our legitimate interest in developing the Service (Art. 6(1)(f)).
• To send service emails, such as account and billing messages: contract (Art. 6(1)(b)).
• To send product news or offers, where we do: your consent or, where the law allows, our legitimate interest. You can unsubscribe at any time.

We do not use your personal data for advertising, and we do not sell it.

The Service uses AI systems, including large language models, to read the text of your CV, to play the interviewer, and to score your answers and write feedback on them. To do this, the text of your CV, your answers and your interview transcripts is sent to our AI providers, who process it on our behalf.

Scores and feedback are estimates produced by these systems. They can be wrong. They are used only inside the Service to help you prepare, and they have no legal or similarly significant effect on you: we do not share them with employers, schools or anyone else. If you think a score is wrong or want to understand how it was produced, contact us.

We share the minimum data needed with the service providers that help us operate the Service. We describe them by category here; a list of the providers we currently use is available on request at [email protected].

• Cloud hosting and content delivery providers, which run our servers and deliver the site.
• Database and authentication providers, which store your account, CV, interview and practice data for us.
• AI and large language model providers, which read your CV, play the interviewer, and score your answers and write feedback.
• Speech providers, which transcribe what you say in real time and generate the interviewer's voice.
• Google, as the identity provider you sign in with.
• A payment processor, if you buy a paid plan.

We may also disclose data where the law requires it, to protect our rights or the safety of others, to our professional advisers under confidentiality, or to a buyer or successor if our business or this Service is sold or reorganized, in which case this policy will continue to apply to your data.

Our providers act on our instructions and are bound by written agreements that protect your data.

MyQuantPartner, LLC is based in the United States, and some of our providers process data in the United States and in other countries. Where we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses (or their UK and Swiss equivalents), which require the recipient to protect the data to an equivalent standard. You can ask us for more information about these safeguards.

• Account, CV, interview and practice data: for as long as your account exists. When you ask us to delete your account, we delete this data within one month, except where the law requires us to keep part of it.
• Billing and accounting records: for as long as tax and accounting law requires, even after your account is deleted.
• Server logs: up to twelve months, then deleted or anonymized.

Deleted data can remain in our providers' encrypted backups for a limited time before it is overwritten.

Depending on where you live, and in all cases under the GDPR, you have the right to:

• access a copy of the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• have your data deleted;
• restrict how we process it in certain situations;
• receive your data in a portable format;
• object to processing based on our legitimate interests;
• withdraw your consent at any time, where processing relies on it.

To exercise any of these rights, or to delete your account, email [email protected] from the address linked to your account. We respond within one month and do not charge for this unless a request is manifestly unfounded or excessive. We may need to confirm your identity first.

If you are in the European Union or the United Kingdom, you can also complain to your local data protection authority (in France, the Commission Nationale de l'Informatique et des Libertés, CNIL). We would appreciate the chance to address your concern first.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. If you live in a state that gives you privacy rights, such as the right to know, correct or delete your personal information, you can exercise them by writing to [email protected]. We will not discriminate against you for doing so.

We use a small number of strictly necessary cookies: to keep you signed in and renew your session, to protect your account against forged requests, to secure the sign-in step, and to remember a display preference. These do not require your consent under EU law. We use no analytics, advertising or tracking cookies; if we ever do, we will ask for your consent first.

We protect your data with technical and organizational measures, including encrypted connections (HTTPS), session cookies that scripts on the page cannot read, protection against forged requests, and access controls that keep each user's data separate. No system is perfectly secure, and we cannot guarantee that your data will never be accessed without authorization, but we work to keep that risk low.

If a personal data breach is likely to put your rights and freedoms at risk, we will notify the competent data protection authority within 72 hours where the GDPR requires it, and inform you without undue delay.

The Service is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child under 16 has given us personal data, contact us and we will delete it.

We may update this policy to reflect changes to the Service, the law or our providers. The date at the top of this page changes whenever we do. If a change materially affects your rights, we will tell signed-in users by email or in the Service before it takes effect.