Legal

Privacy Policy

Last updated May 26, 2026. This policy explains how Qortz handles data for job seekers, recruiters, candidates, and people viewing shared interview links.

Plain-language notice
This page is intended to be clear and practical, but it is not legal advice. Before public launch, have counsel review this policy, including company legal name, address, governing law, and regional privacy obligations.
Information we collect
  • Account information such as name, email address, profile image, authentication provider, role, settings, and Google and LinkedIn OAuth sign-in details.
  • Profile and career information such as target roles, recruiter company information, interview context, resumes, CVs, uploaded files, and extracted resume text.
  • Interview content such as recorded video, audio, answer clips, merged interview videos, thumbnails, duration metadata, transcripts, AI feedback, and improved answer suggestions.
  • Recruiter and invite information such as invite links, candidate names or emails, question sets, progress, share tokens, stakeholder viewer emails, and interview result metadata.
  • Payment and credit information such as package purchases, wallet balances, credit transactions, Stripe checkout identifiers, and billing status. Qortz does not store full card numbers.
  • LinkedIn connection data when you choose to connect LinkedIn, such as LinkedIn identity details, granted scopes, connection status, and posting tokens needed to share content you approve.
  • Technical information such as IP address, device/browser data, logs, security events, rate-limit metadata, cookies, and usage events needed to operate and protect the service.
How we use information
  • To create accounts, authenticate users, route job seekers and recruiters to the right dashboard, and maintain secure sessions.
  • To record, upload, store, process, transcribe, polish, merge, and display interview videos and answer clips.
  • To generate AI-assisted feedback, interview coaching, improved answer drafts, recruiter-safe summaries, and resume-aware suggestions.
  • To power recruiter invite workflows, candidate progress tracking, interview review pages, secure stakeholder share links, and notification emails.
  • To process payments, grant credits, reserve recruiter credits, prevent double-crediting, detect abuse, and provide purchase history.
  • To let users create LinkedIn-ready posts or publish LinkedIn content only after they connect LinkedIn and approve the content.
  • To improve reliability, troubleshoot errors, enforce rate limits, prevent fraud, secure the platform, and comply with legal obligations.
AI and service providers
  • Qortz uses OpenAI or similar AI providers to transcribe audio and generate feedback from interview answers, resumes, transcripts, and optional context you provide.
  • Qortz uses Cloudinary or similar media providers to store, deliver, transform, and process video, image, resume, and related media assets.
  • Qortz uses Stripe for checkout, payments, wallet funding, billing records, and payment-related fraud prevention.
  • Qortz uses Resend or similar email providers for transactional messages such as recruiter invites, completion notices, expiry notices, and share-token emails.
  • Qortz may use hosting, database, logging, analytics, error monitoring, and rate-limiting providers such as Vercel, PostgreSQL hosting, Upstash, and Sentry-style services.
  • These providers may process information only as needed to provide their services to Qortz, subject to their own security, privacy, and retention practices.
Sharing and disclosure
  • Job seekers control when to share their own completed interview links, LinkedIn posts, or downloaded assets.
  • Recruiter-invited candidates understand that recruiters and authorized hiring stakeholders may view submitted answers, transcripts, metadata, and resumes when shared.
  • Anyone with a valid share token or public share link may be able to view the shared interview content until the link expires or is revoked.
  • Qortz does not sell personal information. We may disclose information to service providers, comply with legal obligations, enforce our terms, protect rights and safety, or complete a business transaction such as a merger or acquisition.
  • LinkedIn, Google, Stripe, OpenAI, Cloudinary, Resend, and other third parties are separate services. Their handling of data is governed by their own terms and privacy policies.
Retention and deletion
  • We keep account, interview, resume, transcript, payment, and recruiter invite data while needed to provide Qortz, comply with law, resolve disputes, and enforce agreements.
  • When you delete an interview in Qortz, related database records are removed according to the app deletion flow. Copies in backups or external processors may persist for a limited period.
  • You may request account deletion, correction, access, or export by contacting us. We may need to verify your identity before acting on the request.
  • Some records, such as payment, tax, audit, abuse-prevention, and security logs, may be retained where legally required or reasonably necessary.
Your choices and rights
  • You can update profile information, resumes, interview context, and sharing preferences in the product where available.
  • You can choose whether to connect LinkedIn, whether to post to LinkedIn, and whether to share Qortz interview links externally.
  • You can revoke or expire share links where the product provides link-management controls.
  • Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to processing of your personal information.
  • You can contact us at hello@qortz.com to make a privacy request or ask questions about your data.
Security, children, and international processing
  • We use reasonable administrative, technical, and organizational safeguards to protect information, including authenticated access, secure OAuth flows, protected APIs, and provider security controls.
  • No internet service can guarantee perfect security. You are responsible for protecting your account, devices, and share links.
  • Qortz is not intended for children under 16. If you believe a child provided information to Qortz, contact us so we can review and remove it where appropriate.
  • Qortz and its providers may process information in the United States, the United Kingdom, the European Union, or other locations where we or our providers operate.
Contact and updates
  • Contact Qortz at hello@qortz.com for privacy questions, data requests, or concerns.
  • Business/legal placeholder: add Qortz legal entity name, registered address, and data protection contact before launch.
  • We may update this Privacy Policy as Qortz changes. The updated version will be posted here with a new last-updated date.