Privacy Policy

ModelCandidate (modelcandidate.com) is the controller of your personal data. Contact: hello@modelcandidate.com.

ModelCandidate is an interview practice platform for machine learning engineers. You answer practice questions in writing, in mock interview conversations and in quizzes, and get AI-generated feedback against a scoring rubric.

• Account details: your email address and a password (stored hashed by our authentication provider). If you sign in with Google, we receive your name, email address and profile picture from Google.
• Your practice content: the answers you write, your mock interview transcripts, quiz answers, and the scores and feedback generated for them.
• Subscription details: your plan and a Stripe customer ID. We never see or store your full card details. Payments are processed by Stripe as the reseller and merchant of record, and Stripe collects the payment and billing details it needs, such as your name, billing address and card, under its own privacy policy.
• Technical data: your IP address and basic device and browser information, used for security, rate limiting and bot protection, and recorded in our hosting and database providers' logs.
• Usage statistics: aggregate page views from Vercel Web Analytics and page load timings from Vercel Speed Insights, which store nothing on your device and don't track you across sites; and, unless you turn analytics off, from PostHog: the pages you view, the buttons and links you click, your device and browser type and approximate location from your IP address, the link or ad that first brought you here (including Google and Meta ad click IDs), and the practice you do (for example quizzes started and interview answers submitted, but never what you wrote), under a random identifier, or under your account ID if you're signed in. For signed-in users we add your plan, sign-up date and, from Stripe, when a subscription starts or is cancelled. In the EEA and Switzerland this only happens if you turn analytics on. Once you choose to keep analytics on, PostHog also records your sessions with all text and anything you type hidden.
• Reporting from our own records: to count sign-ups, practice and upgrades accurately, we copy a reduced set of our records to PostHog: your account ID, when you signed up and how (email or Google), your plan, and for each quiz and interview its topic, dates and score. It doesn't include your email address, payment details or anything you wrote. This uses no cookies, so it doesn't depend on your cookie choices; email us if you object.
• Advertising measurement: if marketing cookies are on, Google and Meta receive information about your visit and whether you signed up or bought Pro, so we can measure our ads. Outside the US they're only on if you accept them. In the US they're on unless you turn them off or your browser sends a Global Privacy Control signal.
• Messages you send us by email.

We don't ask for sensitive information and we don't collect precise location. Please don't include confidential information about your employer, or other people's personal data, in your answers.

We send account emails such as sign-up confirmation and password reset. We don't send marketing emails. If we start, we'll ask first, and every email will have an unsubscribe link.

Your answers and interview transcripts are sent to Anthropic, our AI provider, to generate interview turns, scores and feedback. Under Anthropic's commercial terms, data sent through its API isn't used to train its models. Scores and feedback are automated practice feedback. They aren't decisions that have legal or similarly significant effects on you.

We use these service providers, who process data on our instructions:

• Supabase: database and authentication (hosted in the EU, in Frankfurt, Germany).
• Vercel: hosting, Web Analytics and Speed Insights.
• PostHog: product analytics and session recordings (EU region), unless you opt out; and reporting on our own account and practice records.
• Anthropic: AI grading and mock interviews.
• Stripe: payments (and as merchant of record, an independent controller for purchase data).
• Cloudflare: Turnstile bot protection on sign-up and login.
• Google: Google sign-in, if you choose it; and Google Ads measurement, only with your consent.
• Meta: Meta Pixel ad measurement, only with your consent.

We don't sell your personal data. We may disclose data if the law requires it, or to protect our rights.

Some of these providers process data outside the UK, mainly in the United States. Where they do, we rely on the UK–US data bridge or the UK International Data Transfer Agreement/Addendum, as applicable.

• Account and practice data: while your account is open, and deleted within 30 days after you ask us to delete your account.
• Payment and tax records: as long as tax law requires (up to six years).
• Server logs: kept for short periods by our providers, typically days to weeks.
• PostHog analytics events: up to 12 months. Session recordings: up to 30 days.
• Cookie choices: 12 months.

You can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw consent at any time. Email hello@modelcandidate.com and we'll respond within one month. To delete your account and data, email us from your account email address.

If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk), or to your local data protection authority if you live in the EU.

Depending on your state, you may have rights to know, delete, correct and opt out of "sharing" for targeted advertising. In the US, the Google and Meta advertising pixels are on by default, which may count as sharing. You can opt out at any time by turning marketing off under Cookie settings, and we treat a Global Privacy Control signal from your browser as an opt-out. Email us to exercise any other right. We won't treat you differently for doing so.

See our Cookie Policy. You can change your choices at any time with the Cookie settings link at the bottom of every page.

ModelCandidate is for people aged 18 and over. We don't knowingly collect data from children. If you think a child has given us data, email us and we'll delete it.

We'll update this page when things change and change the date at the top. If a change is significant, we'll tell signed-in users.