Privacy Policy

1. What data we collect

We collect the following categories of personal data:

Account data

• Your name and email address (provided via Google OAuth when you sign up)
• Your Google account ID
• Account creation date

Resume data

• The resume file you upload (stored securely in our file storage)

Interview data

• Job descriptions you paste into the product
• Audio recordings of your interview answers
• Transcripts of your spoken answers

Payment data

• Payment history (amount, date, product purchased)
• Your Stripe customer ID
• We do not store card numbers or full payment details — these are handled by Stripe

Usage data (with consent only)

• Pages visited and interactions within the product (via Google Analytics 4)
• Browser type and device information
• This data is only collected if you accept cookies

2. How we use your data

We use your personal data only for the following purposes:

• To provide and operate the Elvas interview coaching service
• To generate personalized interview questions based on your resume and job description
• To produce feedback reports on your interview answers
• To process payments and manage your account
• To improve the product (analytics, only with your consent)
• To respond to support requests and privacy inquiries

We do not use your data for automated decision-making that produces legal or similarly significant effects.

3. We will never sell your data

We do not sell, rent, or trade your personal data to any third party, ever. Your interview recordings, transcripts, resume, and feedback are yours. We use them only to deliver the service to you.

4. How long we retain your data

We retain your data for as long as you have an active account with Elvas.

You can request deletion of your account and all associated data at any time by emailing privacy@elvas.io. We will process your request within 30 days.

6. Cookies

We use cookies and similar technologies for the following purposes:

• Authentication — a session cookie is set when you sign in. This is strictly necessary and does not require consent.
• Analytics — Google Analytics 4 sets cookies to measure how the product is used. This is only active if you click "Accept cookies" on our consent banner.

You can change your cookie preferences at any time by clearing your browser storage for this site and reloading the page, which will show the consent banner again.

7. Your rights under GDPR

As a user in the EU/EEA, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restriction — request that we limit how we process your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to our processing of your data
• Right to withdraw consent — withdraw analytics consent at any time without affecting previous processing

To exercise any of these rights, email us at privacy@elvas.io. We will respond within 30 days.

8. Legal basis for processing

• Contract — processing your account data, resume, and interview data is necessary to deliver the service you signed up for
• Legitimate interest — maintaining payment records and preventing fraud
• Legal obligation — retaining payment records as required by Swedish law
• Consent — analytics tracking via Google Analytics 4

9. Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we will notify you by email or by displaying a notice in the product. The date at the top of this page reflects when the policy was last updated.