Privacy Policy

InterviewCue is operated by PDX Web Properties, LLC. This policy explains what information we collect, why we collect it, and what rights you have over it. We wrote it in plain language because nobody should need a lawyer to understand how their data is handled.

The short version: we collect what we need to run the service, we don't sell your data, we don't use it for advertising, and you can export or delete everything at any time.

What We Collect

Account information

When you create an account, we collect your name, email address, and password. Your password is hashed with Argon2 (an industry-leading algorithm) before storage. We never store or see your actual password.

Interview content

Everything you create in InterviewCue belongs to you: questions, background notes, reference links, timestamped events, chapter markers, show notes, and any other interview data. We store this to provide the service.

Audio files

If you upload recordings (original or final edits), we store them securely on US-based servers. Audio files are only accessible to you and anyone you explicitly share a live session with.

Transcripts

InterviewCue generates transcripts on our own servers. Your audio is not sent to any third-party AI service for transcription. No OpenAI, no third-party speech APIs. The processing happens entirely within our infrastructure.

Newsletter subscription (optional)

If you subscribe to our newsletter, we collect your first name, last name, and email address. Our newsletter system is self-hosted (not a third-party email marketing platform). You can unsubscribe at any time.

Server logs

Like most web services, our servers automatically log request data including your IP address, browser type, pages visited, and response times. These logs are used for debugging, security monitoring, and performance optimization. They are not shared with anyone.

Analytics

We use a self-hosted, privacy-focused analytics tool that collects no personal information and uses no cookies. We see aggregate page view counts. We cannot identify individual visitors. We chose this specifically to avoid services like Google Analytics that track you across the web.

How We Use Your Information

• Providing the service — storing your interviews, generating transcripts, enabling real-time collaboration, and producing exports
• Account management — authentication, password resets, and account-related communications
• Email communications — transactional emails (password resets, account changes) and our newsletter if you opted in
• Error monitoring — identifying and fixing bugs that affect your experience
• Security — protecting against unauthorized access and abuse

We do not use your data for advertising, profiling, automated decision-making, or AI model training. Your interview content, audio, and transcripts are never analyzed for any purpose other than delivering the features you asked for.

Cookies

We use exactly two cookies, both essential for the service to function:

• Session cookie — keeps you logged in. Secure, HTTP-only, same-site. Contains no personal information beyond a signed session identifier.
• CSRF token — protects against cross-site request forgery attacks. A standard security measure.

That's it. No tracking cookies. No advertising pixels. No third-party cookies of any kind. Our analytics are completely cookieless.

Third-Party Services

We minimize third-party dependencies. Where we do use external services, here's exactly what they receive:

DigitalOcean Spaces (audio storage)

Your uploaded audio files are stored on DigitalOcean Spaces, a US-based cloud storage service. Files are encrypted in transit and at rest. Only InterviewCue's servers can access them.

Sentry (error monitoring)

When errors occur, diagnostic information (including IP address and request details) is sent to Sentry so we can identify and fix bugs. This data is used exclusively for debugging.

Postmark (transactional email)

We use Postmark to deliver transactional emails such as password resets and account notifications. Postmark receives your email address and the content of these messages. They do not use your data for marketing or advertising.

Cloudflare Turnstile (bot protection)

We use Cloudflare Turnstile to protect forms like registration and login from automated abuse. Turnstile is a privacy-preserving alternative to traditional CAPTCHAs. It may collect limited technical data (such as browser characteristics) to distinguish humans from bots. It does not track you across sites or use cookies for advertising. See Cloudflare's privacy policy for details.

What we self-host

Several services that are typically outsourced run on our own infrastructure: analytics, newsletter management, and transcript generation. This means your data stays within systems we control.

Data Storage and Security

• All data is stored on US-based servers
• All connections use HTTPS with strict transport security
• Passwords are hashed with Argon2, the current best-practice algorithm
• Every request verifies that you own the data you're accessing
• Our application has been reviewed against the OWASP Top 10, the global standard for web security
• CSRF protection on all state-changing requests

No system is perfectly secure, but we treat security as a foundation rather than an afterthought.

Your Rights

You have full control over your data:

• Access — view all data associated with your account at any time through the application
• Export — download a complete copy of all your data (interviews, audio, transcripts, show notes, chapters) as a ZIP file from your account settings
• Update — change your name, email, or password through your account settings
• Delete — permanently delete your account and all associated data from your account settings. This is irreversible: we delete everything including interview data, audio files, transcripts, and newsletter subscriptions

No hoops to jump through. No emailing support and waiting. These controls are built directly into your account settings.

For Users in the European Union

If you're in the EU, here's how InterviewCue aligns with the General Data Protection Regulation (GDPR):

• Legal basis — we process your data based on the contract you enter when creating an account (providing the service you signed up for) and legitimate interest (security, error monitoring)
• Data portability — the full data export feature (described above) satisfies your right to data portability. Your export includes all data in standard, machine-readable formats
• Right to erasure — account deletion permanently removes all your data from our systems, including backups, within 30 days
• Right to access — you can view and export all data we hold about you at any time
• Data transfers — your data is stored on US-based servers. By using the service, you consent to this transfer. We protect your data with the security measures described in this policy

For GDPR-related requests, contact us at support@interviewcue.com.

What We Don't Do

To be completely clear:

• We don't sell your data to anyone
• We don't share your data with advertisers or data brokers
• We don't use your content to train AI models
• We don't use tracking cookies or advertising pixels
• We don't send your audio to third-party transcription services
• We don't profile you or make automated decisions about you
• We don't monetize your data in any way

Age Requirement

InterviewCue is designed for adults. You must be at least 18 years old to create an account. We do not knowingly collect information from anyone under 18. If we learn that we have, we will delete the account and associated data promptly.

Contact

Questions about this policy or how your data is handled? Reach us at support@interviewcue.com.

PDX Web Properties, LLC
pdxwebproperties.com