Privacy Policy

1. Introduction

Orirify ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered technical interview practice platform (the "Service"). By accessing or using the Service, you agree to this Privacy Policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Account Information: Email address, name, password (encrypted)
• Profile Information: Seniority level, preferred programming languages, career goals
• Payment Information: Billing details processed securely through Stripe (we do not store full credit card numbers)
• Communication Data: Messages you send through our contact forms or support channels

2.2 Interview Data

During your use of the Service, we collect:

• Code Submissions: All code you write during practice interviews
• Voice Recordings: Audio transcripts of your conversations with the AI interviewer (audio is processed in real-time and not permanently stored)
• Performance Metrics: Scores, completion times, test results, and feedback
• Interview History: Records of all interviews you complete, including questions, responses, and evaluations

2.3 Automatically Collected Information

We automatically collect certain information when you use the Service:

• Usage Data: Pages visited, features used, time spent, click patterns
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, error logs
• Cookies and Tracking: Session cookies, authentication tokens, analytics cookies

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Service: Deliver interview practice sessions, generate AI feedback, track your progress
• Personalization: Adapt difficulty levels, select appropriate questions, customize your experience
• Improvement: Analyze usage patterns, improve AI models, enhance features, fix bugs
• Communication: Send service updates, respond to inquiries, provide customer support
• Payment Processing: Process transactions, manage subscriptions, prevent fraud
• Legal Compliance: Comply with legal obligations, enforce our terms, protect our rights
• Analytics: Understand user behavior, measure effectiveness, generate aggregate statistics

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• OpenAI: For AI-powered interview conversations and feedback generation
• Supabase: For database hosting and authentication services
• Stripe: For payment processing
• Cloud Hosting: For infrastructure and content delivery
• Analytics Providers: For usage analytics and performance monitoring

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety, or that of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.4 Aggregated Data

We may share aggregated, de-identified data that cannot reasonably be used to identify you for research, marketing, or analytics purposes.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL
• Password Protection: Passwords are hashed and salted using bcrypt
• Access Controls: Strict access controls limit who can view your data
• Regular Audits: We conduct regular security audits and vulnerability assessments
• Secure Infrastructure: Our infrastructure is hosted on secure, SOC 2 compliant platforms

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:

• Account Data: Retained while your account is active and for 90 days after deletion
• Interview Data: Retained indefinitely to track your progress, unless you request deletion
• Payment Records: Retained for 7 years for tax and accounting purposes
• Log Data: Retained for 90 days for security and debugging purposes

You may request deletion of your data at any time by contacting us at support@orirify.com.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Request a copy of your data in a machine-readable format
• Objection: Object to processing of your information for certain purposes
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at support@orirify.com. We will respond within 30 days.

You may also opt out of marketing communications by clicking the "unsubscribe" link in our emails or adjusting your account settings.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for authentication and basic functionality
• Analytics Cookies: Help us understand how you use the Service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.

9. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at support@orirify.com, and we will delete such information.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at privacy@orirify.com.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access, rectify, erase, restrict, or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your information includes: performance of a contract, legitimate interests, consent, and legal obligations.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: