Privacy

Practising an interview means handing over your voice, your face and your resume. This page says exactly what happens to all three, who else sees them, and how to get rid of them.

Last updated 1 August 2026

The short version

  • Your recordings are private to you. Nobody else can play them back — including us, in normal operation.
  • Recordings are deleted after 30 days automatically, and immediately whenever you ask.
  • Nothing you provide is used to train any AI model — ours or anyone else's.
  • Nothing runs during a real interview. MockLive is a rehearsal tool and works only inside its own session.
  • You can delete your account and everything in it from your account page, without asking us.

Who we are

MockLive AI is operated from India by the team behind this product. For data-protection purposes we are the controller (under the GDPR) and the data fiduciary (under India's Digital Personal Data Protection Act) for the information described here. You can reach us at nirajpatil.hq@gmail.com, which is also our grievance contact.

What we collect

  • Account — your email address, plus your name and profile picture if you sign in with Google. We never see or store your password; Google Firebase Authentication handles that.
  • What you write — the resume and optional job description you paste or upload, so the interviewer can ask about your actual experience.
  • What you say — the audio of your answers and the transcript produced from it.
  • What you record — if you leave recording on, the video and audio of the session, so you can rewatch any answer. You can turn this off before you start, and off means we never create a recording at all.
  • What you write in the editor — code you type during a coding round, and its output when you run it.
  • Session results — your scores, the feedback, and how much of your pass you have used.
  • Payment records — what you bought and when. We never see your card details. Those go directly to the payment provider.

Why we are allowed to hold it

Most of it because you asked us to run an interview and we cannot do that without it — performance of a contract, in GDPR terms, and the legitimate use of providing a service you signed up for under the DPDP Act. Camera recording is separate and runs on your consent: it is a switch you control before the session starts and can withdraw at any time. Payment records we keep because tax and accounting law requires it.

Who else processes it

Running a spoken interview means sending parts of it to specialist providers. Each receives only what its job requires, and none of them are permitted to use your content to train their models.

  • Google — Firebase Authentication (sign-in), Firestore and Cloud Storage (your data and recordings), Cloud Run (the app itself), and the Gemini API, which receives your resume, job description, transcript and any code in order to conduct and score the interview.
  • Deepgram — receives the audio of your answers and returns the text.
  • Inworld— receives the interviewer's written lines and returns the spoken audio. It never receives your answers, your resume or your recordings.
  • Stripe and Dodo Payments — handle payment, and hold your card details rather than us.

We do not sell your personal information, and we do not share it with advertisers, recruiters or employers. There is no version of this product where an employer sees your practice sessions.

How long we keep it

  • Recordings — 30 days.This is enforced by the storage bucket itself, not by a script that might not run, and deletion is permanent: there is no undelete window, which is what makes “delete it now” genuinely mean now.
  • Transcripts, scores and reports — until you delete the session or your account. They are the point of the product, so we keep them until you say otherwise.
  • Resume and job description — kept with the session they belong to, and removed with it.
  • Payment records — retained as long as tax law requires, typically several years, even after account deletion.

Your rights, and how to actually use them

Depending on where you live you may have rights to access, correct, export, restrict or delete your data, to withdraw consent, and to complain to a regulator. Rather than make you write to us for the common ones, they are buttons:

  • Delete a recording — from the session in your account, whenever you like.
  • Delete everything — the delete-account control on your account page removes your sessions, your usage record, every stored recording and your login itself. It is immediate and cannot be undone.
  • Anything else — access, correction, export or a complaint: email nirajpatil.hq@gmail.com and we will respond within 30 days.

If you are in the EU or UK and are not satisfied with our response, you may complain to your local supervisory authority. If you are in India, you may raise the matter with the Data Protection Board after first giving us a chance to resolve it.

Where your data goes

Our servers and databases run in Google Cloud's us-central1region in the United States, and the providers above process data in the United States and the EU. If you are in the EU, UK or India, using MockLive means your information is transferred outside your country. Those transfers rely on the providers' standard contractual clauses.

Cookies

We use cookies and local storage for one thing: keeping you signed in and remembering your session setup between visits. There are no advertising cookies, no third-party trackers, and no cross-site profiling — which is why you are not being asked to dismiss a consent banner.

Children

MockLive is for adults. Our terms require you to be at least 18, or the age of majority where you live, and we do not knowingly collect data from anyone younger. If you believe a minor has created an account, write to nirajpatil.hq@gmail.com and we will remove it.

Security, honestly stated

Recordings live in a private bucket, scoped to your user ID, and the storage rules refuse access to anyone else. Traffic is encrypted in transit and data is encrypted at rest. All of that is true and none of it is a guarantee: no service can promise perfect security, and you should assume that anything you say in a practice session could in principle be exposed by a serious enough failure. If a breach affects you, we will tell you and the relevant regulator as quickly as the law requires.

Changes

If we change how any of this works we will update this page and move the date at the top. For anything that materially reduces your privacy, we will tell account holders by email rather than quietly editing the text.

Questions about any of this?

Write to nirajpatil.hq@gmail.com and a person will answer.