Privacy
Privacy notice
Last updated: 17 October 2026
Who we are
iACE is run by Aprofyle Technologies Ltd, company number 16174107, registered in England and Wales. Registered office: Flat 22, Manners House, 13 Brook Street, Royal Exchange, Kingston upon Thames, KT1 2BN. We are the “data controller” for your account and your practice and preliminary interviews — that means we decide how your data is used and are responsible for protecting it.
When you record an interview for a specific employer’s job, that employer is the controller for their hiring decision and we process the interview on their behalf. Their own privacy notice applies to what they do with it.
Questions, requests or complaints: privacy@iace.io. A person replies.
What we collect
- Account: name, email address, password (stored hashed — we never see it), phone number if you add one, your plan and payment history (card details are held by Stripe, never by us).
- Profile: your CV, the structured profile we read from it (roles, skills, education, headline), your current title and location, and the “what I’m looking for” preferences you set.
- Interviews: your video or audio recordings, the transcript, the scores and written feedback, and — for verified job interviews only — the monitoring notes described on their consent screen (tab switches, face present or not, room sound). We never record your screen, your keystrokes or anything outside the interview page.
- Applications: the jobs you apply to, your application status, and messages from employers.
- Usage and security: sign-in times, device and browser type, error reports (sent to our error-monitoring service with no name or email attached), and the consent versions you accepted.
We do not collect or infer: emotion, personality, mood, age, ethnicity, health, or any “employability score”. Our software never decides anything about you on its own.
Why we use it, and the legal basis
| What | Why | Legal basis |
|---|---|---|
| Running your account, recording, transcribing and scoring your interviews, showing your feedback | It is the service you signed up for | Contract |
| Reading your CV into a profile to tailor your practice questions and job matches | Core part of the service | Contract |
| Comparing your CV to a job description you choose | You asked for it | Contract |
| Sharing your preliminary interview with people you give your link to | Only when you switch it on | Your choice (consent), revocable any time |
| Verified job interviews: identity check and in-interview monitoring | Required by that employer; you are told before you start | Consent (explicit, on its own screen) and the employer’s legitimate interest in a fair process |
| Checking answers for abusive, discriminatory or threatening language | Keeping the platform safe for everyone | Legitimate interest |
| Emails about your account, reminders before a recording is removed, and messages from employers | You need them to use the service | Contract |
| Anonymised, aggregated statistics (for example, how long interviews take on average) | Improving the service; never about you individually | Legitimate interest |
| Fraud and security monitoring, keeping backups | Protecting you and the service | Legitimate interest and legal obligation |
If you decline something that is based on consent (a verified interview, sharing your link), the rest of iACE keeps working.
Who else processes your data
We use a small number of specialist companies, each under a written contract that forbids using your data for anything else, including training their models:
| Company | What they do for us | Where |
|---|---|---|
| Anthropic (Claude) | Scores interview answers, reads CVs into a profile, compares CVs to job descriptions | USA, under UK transfer safeguards |
| OpenAI (Whisper) | Turns your recorded answers into a transcript | USA, under UK transfer safeguards |
| LiveAvatar | Runs the live AI interviewer: streams the conversation and produces its transcript | USA, under UK transfer safeguards |
| HeyGen | Produces the AI interviewer’s video clips. Receives only our question text, never your data | USA |
| Supabase | Hosts the service and stores your data | EU (Ireland) |
| Stripe | Takes payments. Your card details go to Stripe, not to us | USA / EU |
| Resend | Sends our emails to you | USA |
| Sentry | Error monitoring — receives technical error reports with no name or email, kept up to 90 days | EU (Germany) |
| Didit | Identity checks for verified job interviews (document, liveness, face match). We store the result and a reference — never the images | EU |
| Google Fonts | Supplies the typefaces on our pages; your browser requests them from Google, which sees your IP address | USA |
We never sell your data and never share it with advertisers.
How long we keep it
- Practice recordings: the video/audio is removed 30, 45, 60 or 90 days after each practice depending on your plan (we email you 7 days before). Your transcript, scores and feedback stay in your account.
- Preliminary interviews: kept while your account is active, up to your plan’s number. If you don’t sign in for 6 months we warn you twice and then remove the recordings; the account stays.
- Job interviews for an employer: kept according to that employer’s retention period and agreement with us.
- Account data: while your account exists. You can delete your account from Settings; deletion happens straight away and cannot be undone — your profile, CV, recordings, transcripts, scores and messages all go in one step. The only things kept are records we must keep by law (payment invoices, held by Stripe for 6 years) and security logs that no longer name you.
- Backups: daily backups age out automatically after 7 days; we never restore individual data from them, so deleted data drops out of backups within that period.
Your rights
You can: see what we hold about you; correct it; delete recordings, your CV or your whole account; get a copy in a portable format; object to or restrict processing based on legitimate interests; withdraw consent at any time; and complain to the Information Commissioner’s Office (ico.org.uk). To exercise any of these, use Settings or email privacy@iace.io — we respond within one month.
No decision with a legal or similarly significant effect on you is made by our software alone. Scores are information for a person to weigh; where an employer uses iACE, a person at that employer decides.
Cookies
We use only the cookies needed to keep you signed in and remember your cookie choice. No advertising or analytics cookies are set, and no analytics or tracking scripts run on our pages.
Age
iACE is for people aged 18 and over.
Changes
We will post changes here with a new date and, for significant changes, tell you by email.