Privacy Policy
Rehearse is operated by Fachrin Aulia Nasution, c/o Impressumservice Dein-Impressum, Stettiner Str. 41, 35410 Hungen, Germany (“we”, “us”, “our”). We are the controller of your personal data. This policy explains what we process when you use rehearse.today, why, how long we keep it, and the rights you have. If you have any questions, write to us at [email protected].
Summary
Your voice is recorded only while you answer and is transcribed when you finish; we never keep the recording. Until your answer is saved, your browser keeps a copy on your device (see Cookies), deleted within 24 hours at the latest. We keep transcripts and reviews with your account until deletion. Analytics run only if you allow them in the consent settings. We do not sell your data or run advertising.
What we process, and why
We process the following categories of personal data, each for the purpose and on the legal basis under the GDPR stated with it:
- Your account: the name and email your sign-in provider (Google or GitHub, through Clerk) shares with us. To create and secure your account. Performance of contract.
- Your materials: the text read from the resumes and job descriptions you upload. Uploaded files are discarded once read; the extracted text, and the professional experience identified in it, are kept to prepare your interview questions. Performance of contract.
- Your answers: recorded only while you answer, sent for transcription when you finish, and not retained after transcription. Performance of contract.
- Transcripts, reviews and their coaching: kept so you can revisit them while your account exists. An active plan is required to open protected reviews. Performance of contract.
- Payment data: handled by Creem, our merchant of record, under its own privacy policy. We receive no card numbers. So that a purchase belongs to your account, we give Creem the verified email address you sign in with; Creem uses it for your receipts and your billing portal. Performance of contract.
- Checkout and purchase records: the consent you give before paying (its exact wording and version, the versions of these documents, the plan and price shown, the time, and your browser’s language setting), and the purchase Creem reports (order reference, amount, billing period, and the country it was taxed in), with a one-way digest of the email you paid with rather than the address. To show what you agreed to and to handle a withdrawal. Legal obligation and performance of contract.
- Withdrawal declarations: the name, email address and order reference you give, when we received it, our assessment and any refund. To handle your withdrawal and keep the record the law expects. Legal obligation.
- Emails we send you: purchase confirmations, withdrawal acknowledgements and outcomes, and refund confirmations, kept as sent, with a copy of each delivered to our own mailbox. To give you the confirmations the law requires, and a record of them. Legal obligation.
- Messages you send us: what you write by email or through our contact form (hosted by Tally), with the contact details you give, to answer you. Legitimate interest, or steps taken before entering into a contract.
- Service and security logs: technical records of requests (such as time, route, status and your IP address as our network providers see it), to keep Rehearse working and to prevent abuse. They never contain your documents, answers or reviews. Legitimate interest.
- Optional analytics: if you consent, Google Analytics 4 measures visits and use of the site, Microsoft Clarity helps us understand page use, and Grafana Faro measures how quickly pages load and respond, the technical errors they hit, and which server request a slow or failing page was waiting on. We manage consent for all three through Cloudflare Zaraz. With that consent, Google Analytics 4 also receives a record of the steps you take in the app, such as preparing a document, starting a rehearsal, answering a question, opening a review or choosing a plan, with the plan you hold and how long each step took. These records are tied to a pseudonymous identifier derived from your account by a one-way hash, not to your name or email, and they never include your documents, answers, transcripts, questions or reviews. The signed-in app is masked from Clarity so its content is not captured, and Grafana Faro records no page content, keystrokes, console output or session replay. Consent is the legal basis; you can change it in Cookie settings.
How the review is produced
Transcription and analysis are carried out by AI language-model providers, reached through Vercel AI Gateway. They process your answers only to provide the service to you. The assessment considers the content of your answers, not your accent, pace or pauses.
The review is produced automatically, for your own practice. It has no legal or similarly significant effect on you, and nobody makes decisions about you based on it.
How long we keep it
We keep each category of data for the following period. The current review policy is served with our plan information:
- Voice recordings: deleted once transcribed, and never stored by us. Until your answer is saved, your browser keeps its recording on your device, as described under Cookies.
- Transcripts and reviews: saved until you delete your account. You need an active plan to open a protected review; ending a plan does not delete it.
- Extracted resume and job-description text: until you remove the document or close your account. On Plus, a job description can be removed once the billing period it was added in has ended. Removing a document stops its reuse for new rehearsals. Facts already used in past rehearsals remain with that history until you delete your account.
- Account data: kept while your account is open. When you close it, your sign-in record at our authentication provider is deleted, and your rehearsal and review records are erased on the account-deletion schedule. Purchase evidence may remain for the period below.
- Service logs: kept only as long as needed to run and secure the service.
- Messages you send us: kept as long as needed to answer and follow up, and longer only where the law requires it.
- Checkout consents, purchase records, withdrawal declarations and the emails about them: 4 years, even after you close your account (the link to your account is removed at closure), so a purchase or a withdrawal can be shown later; then deleted.
- Payment records: kept by Creem as tax law requires.
Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction, portability and objection, and the right to complain to your data-protection authority. To exercise any of them, write to [email protected]. You can download your account data, including saved transcripts and review outcomes. With an active plan, you can also read protected reviews in the app.
We respond within one month. Closing your account stops new rehearsals and removes access; its saved data is erased on the account-deletion schedule described above.
Who processes it with us
We rely on: Cloudflare, which carries site traffic, protects it and manages analytics consent through Zaraz; Clerk for sign-in; Creem for payments, as our merchant of record; Fastmail, which delivers the emails we send you; Tally, for the contact form; Vercel AI Gateway and the AI language-model providers it routes to, for reading your documents, writing your questions, transcription and review; OpenRouter, for the voice that reads each question aloud; Grafana Labs (Grafana Cloud), for monitoring the servers and their technical logs, and, only if you consent to analytics, the performance of pages in your browser; and, only if you consent to analytics, Google Analytics 4 and Microsoft Clarity. The servers themselves are run by us. Where a provider processes data outside the European Economic Area, transfers are covered by the EU–US Data Privacy Framework, EU standard contractual clauses or an equivalent safeguard.
Changes to this policy
If the policy changes materially we will post the new version here and announce it by email. The version at the top always tells you which one applies.