1. Information We Collect
Account information: email address, display name, and profile details you provide (target company, interview date, skill level).
Usage data: case responses, scores, peer session activity, readiness history, and interview outcomes you log.
Payment data: processed by Stripe. We do not store credit card numbers.
Technical data: browser type, IP address, and device information collected automatically.
2. How We Use Your Data
We use your data to:
- Provide and personalize the Service (AI scoring, recommendations, readiness tracking)
- Process payments and manage subscriptions
- Match you with practice partners based on skill level and availability
- Send service emails: password resets, email-change confirmations, replies to your support requests, notifications about your practice partners, sessions and circles, and circle invitations (sent to the address a circle member enters when inviting someone); payment receipts are sent by Stripe
3. AI Processing
Your case responses are sent to Anthropic's Claude API for scoring and feedback generation. These requests, and the voice requests described below, are processed to answer you and, under each provider's commercial API terms, are not used to train their models. We store AI-generated scores and feedback in our database.
CaseXcel does not use your data to train or fine-tune AI models, and does not send it to anyone for that purpose.
If you use voice in an interview, your recorded answer is sent to OpenAI to turn it into text, and the interviewer's replies are sent to OpenAI to turn them into speech. We keep the text transcript, not the audio.
4. Data Sharing
We share data only with these service providers, each for the purpose listed:
- Supabase: database and authentication provider
- Google Cloud: application hosting, server logs, secret storage and aggregated usage metrics
- Anthropic: AI interviewer, scoring and feedback generation
- OpenAI: speech-to-text and text-to-speech when you use voice
- LiveKit: audio and video for live peer practice sessions (not recorded)
- Stripe: payment processing
- Resend: sending service emails, such as notifications and support replies
Interview outcomes you log in the offer tracker are private to you. If you tick it when logging an offer, your accepted practice partners see an "Offer reported" badge (self-reported, not verified), and the company only if you also tick that. You can turn this off at any time by editing or deleting the outcome. Outcomes do not affect your readiness score.
We do not sell your personal data to third parties.
5. Data Retention
Account data is retained while your account is active. You can delete your account at any time from the Account page; your personal data is deleted immediately. Billing and usage records needed for accounting are kept without anything that identifies you.
6. Security
We use industry-standard security measures: encrypted data in transit (TLS), encrypted data at rest (Supabase), row-level security on all database tables, and secret management via Google Cloud Secret Manager.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Download a copy of your data (profile, practice history and transcripts, scores, plans, outcomes, and more) as a JSON file from the Account page
- Correct inaccurate data via your profile settings
- Change your email address from the Account page (the change takes effect after you confirm it from both your current and your new inbox)
- Delete your account and data from the Account page
8. Cookies
We use essential cookies for authentication session management (Supabase auth tokens). The free case game sets one first-party cookie with a random device ID to count its daily question limit. Anonymous case game play records hold no IP address, device ID or other personal data (signed-out answers from one day are grouped by a one-way code that changes every day). If you are signed in, your answers are linked to your account, included in your data download and deleted with your account. Play records older than 13 months are deleted. While you play signed out, a short tally of right and wrong answers per skill is kept in your browser; after you sign in it is saved to your account once as a game practice estimate and kept until you delete your account. We do not use advertising or third-party tracking cookies.
9. Changes to This Policy
We may update this policy. Updates are posted on this page with a new "Last updated" date. Continued use after changes constitutes acceptance.
10. Contact
Privacy questions? Contact us at privacy@casexcel.app.