UnderFireAI ("we," "our," or "us") operates https://underfireai.com and the UnderFireAI platform. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using UnderFireAI, you agree to the practices described in this policy.

1. Information We Collect

Account Information

When you register, we collect your email address and a hashed password. We do not store plaintext passwords. You may optionally provide your name.

Resume Data

If you upload a resume, we store the file and extract structured data (skills, experience, education) to power resume-targeted interview features. Resume files and parsed data are associated with your account and not accessible to other users.

Interview Data

We store the full content of your mock interview sessions, including messages, AI responses, performance scores, and analysis data. This data is used to power session replay, progress tracking, and coaching feedback.

Job Descriptions

Job descriptions you upload for gap analysis are stored and associated with your account. They are used solely to generate analysis results and practice plans for you.

Payment Information

We use Stripe to process payments. We do not store your credit card number, CVV, or full payment details on our servers. Stripe handles all payment processing and is PCI-DSS compliant. We receive and store your Stripe customer ID and subscription status.

Usage Data

We collect basic usage data including session timestamps, interview counts, feature usage, and performance metrics. This data is used to improve the platform and is not sold to third parties.

2. How We Use Your Information

To provide and operate the UnderFireAI platform and all its features.
To generate personalized interview questions, coaching feedback, and performance analysis.
To power session replay, progress tracking, and historical reporting.
To process subscription payments and manage your account.
To send transactional emails (account confirmation, billing receipts). We do not send marketing email without your consent.
To detect and prevent abuse, fraud, and unauthorized access.
To improve the platform based on aggregated, anonymized usage patterns.

3. Data Sharing

We do not sell your personal information. We do not share your interview transcripts, resume, or personal data with third parties for advertising or marketing purposes.

We share data only with the following service providers who process it on our behalf:

Supabase — database hosting and authentication (United States)
Stripe — payment processing
OpenRouter / DeepSeek — AI language model processing for interview generation and analysis
Cartesia — text-to-speech synthesis for voice mode
Judge0 (RapidAPI) — sandboxed code execution for coding challenges

All service providers are contractually required to protect your data and use it only to provide their services. We may also disclose information if required by law or to protect the rights, safety, or property of UnderFireAI or its users.

4. Data Security

All data is encrypted in transit using TLS and encrypted at rest. We use Row Level Security (RLS) policies at the database layer to ensure your data is isolated from other users — not just at the application level, but at the database level.

No security system is perfect. If you believe your account has been compromised, contact us immediately at support@underfireai.com.

5. Data Retention

We retain your account data and interview history for as long as your account is active. If you delete your account, all associated data — interview sessions, messages, resume files, job descriptions, and account information — is permanently deleted within 30 days.

Anonymized, aggregated usage statistics may be retained indefinitely for product analytics. These do not contain personally identifiable information.

6. Your Rights

You have the right to:

Access — request a copy of the personal data we hold about you.
Correction — request correction of inaccurate or incomplete data.
Deletion — delete your account and all associated data at any time from your account settings.
Portability — request an export of your interview history and profile data.
Objection — object to certain uses of your data as permitted by applicable law.

To exercise any of these rights, contact us at support@underfireai.com.

7. Cookies

We use cookies and local storage only for authentication session management and user preferences. We do not use tracking cookies or third-party advertising cookies. You can clear cookies at any time through your browser settings, though this will sign you out.

8. Children

UnderFireAI is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has registered, contact us and we will delete the account immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email. Continued use of UnderFireAI after changes are posted constitutes your acceptance of the updated policy.

10. Contact

Questions or concerns about this Privacy Policy? Contact us at support@underfireai.com.