Privacybeleid

Laatste Update: March 15, 2026

Inleiding

Aivium ("we," "our," or "us") operates the AI Mock Interviewer platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. We are committed to protecting your privacy and ensuring the security of your personal data in compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.

Data Controller: Aivium, registered as a JDG (Jednoosobowa Działalność Gospodarcza) in Poland.

Gegevens Die We Verzamelen

Persoonlijke Informatie

  • Name and email address (for account creation)
  • Payment information (processed securely by Stripe)
  • Profile information you choose to provide

Interviewgegevens

  • Audio recordings during mock interviews
  • Interview transcriptions and AI-generated feedback
  • Performance analytics and progress data
  • Interview session metadata (duration, type, date)

Technische Gegevens

  • IP address and device information
  • Browser type and version
  • Usage patterns and feature interactions
  • Error logs and performance metrics

Hoe We Uw Gegevens Gebruiken

  • Dienstverlening: To provide AI-powered interview practice and feedback
  • Gebruikersaccounts: To create and manage your account
  • Betalingsverwerking: To process subscription payments via Stripe
  • Dienstverbetering: To analyze usage patterns and improve our platform
  • Klantenondersteuning: To respond to your inquiries and provide support
  • Wettelijke Naleving: To comply with legal obligations and protect our rights

Juridische Grondslag voor Verwerking

Under GDPR, we process your data based on:

  • Contractuele Noodzaak: To provide our services as per our Terms of Service
  • Legitieme Belangen: For service improvement, security, and business operations
  • Toestemming: For marketing communications (where explicitly provided)
  • Wettelijke Verplichtingen: For compliance with applicable laws

Gegevensdeling

We do not sell your personal data. We may share data with:

  • Stripe: For payment processing (governed by Stripe's privacy policy)
  • OpenAI: For AI interview analysis and feedback generation
  • Anthropic (Claude): For AI interview analysis and feedback generation
  • Google (Gemini AI): For AI interview analysis and feedback generation
  • Our proprietary AI models: For specialized interview assessment
  • Legal authorities: When required by law or to protect our rights

AI Model Training

No Training on Your Data: We do not use your personal data or interview recordings to train or improve our AI models. Your data is used solely for providing personalized feedback to you. When we share data with AI service providers (OpenAI, Anthropic, Google Gemini), it is processed according to their enterprise privacy policies and is not used for model training.

Gegevensbewaring

  • Accountgegevens: Retained while your account is active plus 30 days after deletion
  • Interviewopnames: Stored for up to 12 months or until account deletion (some data may be archived and removed earlier based on usage patterns)
  • Analysegegevens: Anonymized data may be retained for research purposes
  • Betalingsgegevens: Retained as required by law (typically 7 years for tax purposes)

Uw Rechten

Under GDPR and other privacy laws, you have the right to:

  • Recht op Toegang: Request a copy of your personal data
  • Recht op Rectificatie: Correct inaccurate or incomplete data
  • Recht op Wissing: Request deletion of your data ("right to be forgotten")
  • Recht op Beperking: Limit how we process your data
  • Recht op Overdraagbaarheid: Receive your data in a portable format
  • Recht van Bezwaar: Object to processing based on legitimate interests
  • Toestemming Intrekken: Withdraw consent for processing

To exercise these rights, contact us at [email protected]

Gegevensbeveiliging

We implement appropriate security measures including:

  • Encryption in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication
  • Secure data centers and infrastructure
  • Staff training on data protection

Business Transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data, including your personal information, among the assets transferred to any parties who acquire us. You acknowledge that such transfers may occur, and that any parties who acquire us may, to the extent permitted by applicable law, continue to use your personal information according to this policy, which they will be required to assume as it is the basis for any ownership or use rights we have over such information.

Internationale Overdrachten

Your data may be transferred to and processed in countries outside the EU/EEA. We ensure adequate protection through:

  • EU Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • Certification schemes and codes of conduct

Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies. You can control cookie settings through your browser preferences.

Privacy van Kinderen

Our service is not intended for children under 16 (or applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If we discover we have collected such data, we will delete it promptly.

Beleidswijzigingen

We may update this Privacy Policy periodically. We encourage you to review this Privacy Policy regularly to stay informed of any changes. Continued use of our service after changes constitutes acceptance of the updated policy.

Contactinformatie

For privacy-related questions or to exercise your rights:

Supervisory Authority: You have the right to lodge a complaint with your local data protection authority. In Poland, this is the Personal Data Protection Office (UODO).