Privacy notice
Last updated: 21 October 2026 (email list and anonymous usage counts added)
- We use your CV, the job details you paste in and your answers only to run your mock interview and give you feedback.
- The file you upload is deleted as soon as we have read the text from it.
- Your CV text and answers are sent to OpenAI, our AI provider, to generate your interview and feedback. OpenAI does not use them to train its models.
- Your session is deleted automatically 14 days after you last use it, and you can delete it yourself at any time with the Delete button. We don't use advertising or third-party analytics trackers, and we keep only anonymous counts of how many people reach each step.
1. Who we are
InterviewGrey is operated by Carl Cook, trading as InterviewGrey, Buckingham, MK18, United Kingdom. We are the “controller” of the personal information described here, which means we decide how and why it is used.
For anything to do with your data, contact us at [email protected].
2. What we collect
| Information | Where it comes from | What we keep |
|---|---|---|
| Your CV | The PDF, Word (.docx) or text file you upload | We read the text from the file and then delete the file immediately. The text is kept with your session only until your interview profile has been generated, then removed. |
| Job details | The job advert and (optional) job description you paste in | Kept with your session. |
| Your interview profile | Generated by the AI from your CV and the job details: for example your name as it appears on your CV, a short professional summary, relevant experience, skills, strengths and possible gaps for the role | Kept with your session. |
| Interview questions, your answers and your feedback | Generated by the AI, and typed by you | Kept with your session. |
| A session identifier | Created when you start an interview | Stored in our system and in your browser's local storage so you can return to your session. It is not an advertising or tracking identifier. |
| Your IP address and technical logs | Your device, when it connects to the site | Used to limit how often the service can be used (to prevent abuse and control costs). For this we hold IP addresses in memory for up to one hour; they are not written to disk. Our servers may also keep short-lived technical and error logs for security and troubleshooting; these do not contain the content of your CV or answers. |
| Your email address (optional) | You give it to us on the coming-soon page, or at the end of your report | Kept with the date you gave it and the page you gave it on, until we have sent you the one email you asked for (when InterviewGrey opens, or when accounts and new features arrive), then deleted. It is stored on our own server in the UK, and you can ask us to remove it at any time. |
| Anonymous usage counts | Created as you use the site: which page or step was reached, how long an AI step took, and a 1 to 5 rating if you choose to give one | Kept in a log with the date and time only. There is no IP address, cookie or session identifier in it, and nothing from your CV, job details or answers. |
You don't need to create an account to use InterviewGrey, and we don't ask for your email address.
Please remove sensitive details before uploading. A CV doesn't need your date of birth, home address, photo, national insurance number, or information about your health, ethnicity, religion, sexual orientation or political views, and the service does not use them. If your CV contains any of these, we suggest taking them out first.
3. How we use it, and our legal basis
- To provide the service you ask for — reading your CV and the job details, generating your interview profile and questions, and analysing your answers. Our legal basis is that this is necessary to provide the service you have requested (UK GDPR Article 6(1)(b)).
- To keep the service secure and working — rate limiting, preventing abuse and fixing faults. Our legal basis is our legitimate interest in running a secure and affordable service (Article 6(1)(f)).
- To send you the one email you asked for (when InterviewGrey opens, or when accounts and new features arrive), if you give us your email address. Our legal basis is your consent (Article 6(1)(a)). You can withdraw it at any time by emailing us, and we will delete your address.
- To understand how the service is used and improve it, using the anonymous usage counts described above. Our legal basis is our legitimate interest in improving the service (Article 6(1)(f)). The counts cannot identify you.
We do not sell your information, use it for advertising, or use it to train AI models.
4. AI-generated feedback
Your interview profile, questions and feedback are produced automatically by an AI model. They are coaching suggestions to help you prepare, and they can be wrong or incomplete. We do not make any decision about you that has a legal or similarly significant effect, and we do not share your results with employers or anyone else.
5. Who we share it with
We share your information only with the service providers we need to run InterviewGrey, under contracts that require them to protect it and use it only on our instructions:
- OpenAI (AI provider). Your CV text, the job details, the generated profile and questions, and your answers are sent to OpenAI's API to generate your interview and feedback. Under OpenAI's API data terms, this content is not used to train OpenAI's models and may be retained by OpenAI for up to 30 days to monitor for abuse, after which it is deleted unless the law requires otherwise. OpenAI processes data in the United States (see section 7).
- OVHcloud (hosting). Our servers are hosted by OVHcloud in a data centre in the United Kingdom.
We don't share your email address with anyone, and we don't currently use an email delivery service. If we start using one, we will update this notice first.
We may also disclose information if the law requires it.
6. How long we keep it
- Uploaded files: deleted as soon as the text has been read — normally within seconds.
- CV text: removed from your session once your interview profile has been generated.
- Your session (job details, profile, questions, answers and feedback): deleted automatically 14 days after you last use it. Session data is not included in our server backups, so no copies are kept after that.
- IP addresses for rate limiting: up to one hour, in memory only.
- Your email address (if you gave it): until we have sent you the one email you asked for, then deleted.
- Anonymous usage counts: up to 24 months.
- At OpenAI: up to 30 days, as described in section 5.
Deleting your session yourself: use Delete next to your session on the start page, or Delete this session at the end of your analysis. This permanently removes your job details, profile, questions, answers and feedback from our systems straight away (session data is not kept in backups). Copies already sent to OpenAI are handled as described in section 5.
If you can no longer reach your session — for example you used a different browser or cleared this site's data — contact us (section 1) with your session identifier if you have it (stored in your browser's local storage under ig_last_session), or tell us roughly when you used the service.
7. International transfers
Because OpenAI processes data in the United States, your information is transferred outside the UK when the AI generates your interview and feedback. We rely on appropriate safeguards for this transfer under UK data protection law, namely [the UK International Data Transfer Addendum / UK Extension to the EU–US Data Privacy Framework — confirm which applies under the OpenAI Data Processing Addendum you have accepted]. You can ask us for more information about these safeguards.
8. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong;
- ask us to delete your information;
- ask us to restrict how we use it, or object to our using it;
- receive your information in a portable format.
You can delete your session yourself at any time (see section 6). To exercise any of the other rights, or if you can't reach your session, contact us (section 1). We will respond within one month. Because we don't collect your name or email address separately, we may ask for your session identifier or other details to find your session.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first, so please contact us before going to the ICO.
9. Cookies and local storage
We don't use cookies, advertising trackers or third-party analytics. Our own anonymous usage counts are described in section 2. The app stores your session identifier in your browser's local storage so that you can return to your interview; this is strictly necessary for the service to work. You can remove it at any time by clearing this site's data in your browser.
10. Security
Connections to InterviewGrey are encrypted (HTTPS). Uploaded files are deleted straight after reading, stored data is kept to a minimum and deleted on a schedule, and access to our servers is restricted to the operator.
11. Children
InterviewGrey is intended for people aged 16 and over who are preparing for job interviews.
12. Changes to this notice
If we change how we use your information, we will update this notice and the “last updated” date at the top.