Privacy Policy

1. Data Controller

Morerange S.L., CIF B70668637, c/de Fluvia 97, 1-14, 08019 Barcelona, Spain. Contact: 115028@gmail.com.

2. Data We Collect

We collect and process the following categories of personal data:

Account data: email address, hashed password (managed by Supabase authentication).

Session data: audio recordings of interviewer speech (system audio capture), screenshots of interview screen content, OCR-extracted text from screen captures.

Profile data: resume text uploaded by the user for personalized AI responses.

Usage data: session timestamps, AI model usage, token consumption for billing purposes.

3. Legal Basis for Processing

We process your data based on: (a) performance of a contract — to provide the YouTellMe service you have subscribed to; (b) legitimate interest — to improve service quality and prevent abuse; (c) consent — for optional features such as resume upload and voice hint preferences.

4. How We Use Your Data

Audio and screen data are processed in real time to generate AI-powered hints during your interview session. Audio is transcribed using speech-to-text services, and screen content is analyzed via OCR. This data is sent to AI language models to produce contextual answers. Session data is temporarily stored for the duration of the session and for billing reconciliation.

5. International Data Transfers

To provide the service, your data may be processed by third-party API providers located outside the European Economic Area (EEA):

Anthropic (USA): AI language model processing. Text data (transcripts, OCR content, resume) is sent for hint generation.

OpenAI (USA): alternative AI language model processing (when selected by the user).

Groq (USA): speech-to-text transcription of audio data.

Deepgram (USA): real-time streaming speech-to-text transcription (when selected by the user).

These transfers are governed by Standard Contractual Clauses (SCCs) as approved by the European Commission, or equivalent safeguards as required by GDPR Article 46.

6. Data Retention

Audio data is processed in real time and not permanently stored. Transcripts and AI-generated answers are retained for up to 30 days for session history and billing purposes, then automatically deleted. Account data is retained for the duration of your account. Resume text is retained until you delete it or close your account.

7. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

Right of access: request a copy of your personal data.

Right to rectification: correct inaccurate personal data.

Right to erasure: request deletion of your personal data (“right to be forgotten”).

Right to restrict processing: limit how we use your data.

Right to data portability: receive your data in a structured, machine-readable format.

Right to object: object to processing based on legitimate interest.

To exercise any of these rights, contact us at 115028@gmail.com. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted data transmission (TLS), secure authentication via Supabase, and access controls on our server infrastructure.

9. Cookies

We use essential cookies only for authentication and session management. We do not use tracking cookies or third-party analytics.

10. Children

YouTellMe is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically.

12. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.

13. Contact

For any questions regarding this Privacy Policy or your personal data, contact us at 115028@gmail.com.