**Privacy Policy**

**Effective Date:** March 22, 2026
**Last Updated:** March 22, 2026

PrepVista (“PrepVista,” “we,” “us,” or “our”) is committed to protecting your privacy and handling personal information in a responsible, transparent, and secure manner. This Privacy Policy explains how we collect, receive, use, process, store, disclose, transfer, retain, and otherwise handle information when you access, visit, register for, interact with, or use our website, platform, applications, products, features, content, communications, and related services, including interview practice, personalized question generation, coaching, performance reporting, subscriptions, account management, customer support, and any related functionality we make available from time to time (collectively, the “Services”). This Privacy Policy is intended to help you understand what information we collect, why we collect it, how we use it, when it may be shared, how long it may be retained, what rights and choices you may have, and how we seek to safeguard it. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and agree to the practices described in it, subject to applicable law.

We may collect information directly from you, automatically through your use of the Services, and in certain cases from authorized third parties or service providers. The information we collect depends on how you use PrepVista, the features you access, the information you choose to provide, the permissions you grant, and the transactions you complete. Information you provide directly may include your name, email address, account credentials, profile information, communication preferences, subscription choices, support messages, uploaded documents, feedback, form responses, and any other information or content you voluntarily submit through the Services. If you create an account, we may collect information necessary to establish, authenticate, maintain, and secure that account. If you choose to sign in through a third-party authentication provider, we may receive limited profile or account information associated with that provider, subject to the permissions you authorize and the settings of that provider.

As part of the Services, you may upload resumes, CVs, career documents, or similar materials for personalization and interview preparation purposes. When you submit such materials, we may collect, process, analyze, and store the content contained in those materials in order to provide and improve the Services. This may include information such as education history, professional experience, work samples, projects, skills, certifications, achievements, and other career-related details that you choose to include. We may use this information to tailor interview questions, personalize practice sessions, improve the relevance of feedback, adapt question difficulty or subject matter to your background, and provide outputs that are more closely aligned with your profile, goals, and experience. The quality and relevance of some features may depend in part on the accuracy, completeness, and appropriateness of the information you choose to provide.

When you participate in interview sessions, voice-based interactions, coaching flows, evaluation features, feedback modules, or related user experiences, we may collect and process information associated with those interactions. This may include prompts shown to you, answers you provide, transcripts derived from your responses, interview mode selections, timing information, categories of questions, evaluation results, scores, comparative performance insights, progress history, strengths and weaknesses identified by the system, recommendations, coaching feedback, and other session-related information. If a feature involves spoken responses, your spoken input may be converted into text and processed as part of the Services. If a feature requests access to your microphone or camera, such access is requested solely to provide that particular feature or user-selected functionality. Depending on the design of the specific feature, some information may be processed temporarily, locally, or in connection with the relevant session experience in order to support voice interaction, focus monitoring, realistic simulation, personalization, or related service functionality. We do not use camera or microphone access for purposes unrelated to delivering the feature you have chosen to use.

We may also collect technical, device, and usage information automatically when you use the Services. This may include browser type, device type, operating system, language settings, IP address, approximate location information inferred from technical data, timestamps, pages or screens viewed, features accessed, buttons clicked, referral information, session duration, authentication events, account activity, reports viewed or downloaded, interviews started or completed, plan usage, quota consumption, cookies, local storage data, session identifiers, logs, crash information, diagnostic data, and similar information. We collect and use this information to operate the Services, maintain security, authenticate users, preserve session integrity, detect suspicious activity, enforce subscription limits, monitor performance, troubleshoot problems, improve reliability, analyze usage trends, understand how features are used, refine product design, and support overall business operations. We may also generate aggregated, statistical, anonymized, or de-identified information derived from this data for analytics, reporting, research, benchmarking, testing, service optimization, and lawful business improvement purposes.

If you purchase a paid plan, subscription, or related offering, payment-related information may be processed by authorized payment providers in connection with the transaction. We do not store full card numbers, CVV information, or comparable highly sensitive payment credentials unless expressly stated otherwise. However, we may receive and retain limited billing and transaction-related details necessary to confirm payment, activate features, manage subscriptions, maintain records, provide billing support, issue invoices or confirmations, address disputes, prevent fraud, comply with legal obligations, and administer service access. Such information may include billing status, order references, payment identifiers, subscription tier, renewal status, timestamps, plan information, and related account records.

We use personal information for a variety of legitimate business, operational, legal, and service-related purposes. These purposes may include providing, operating, maintaining, supporting, securing, and improving the Services; creating and managing accounts; authenticating user access; personalizing interview questions, reports, and coaching experiences; generating evaluations, scores, recommendations, and feedback; enabling purchases, subscriptions, and billing administration; communicating with you regarding account activity, confirmations, reminders, support requests, security notices, policy updates, product updates, and service-related matters; monitoring compliance with our terms and usage limits; preventing fraud, abuse, misuse, unauthorized access, and security threats; investigating complaints, technical issues, or policy violations; conducting internal research, quality assurance, testing, auditing, analytics, and product improvement; complying with applicable legal, regulatory, tax, accounting, and contractual obligations; and protecting the rights, safety, systems, business operations, personnel, users, and property of PrepVista and others. We may also use aggregated, anonymized, or de-identified data for lawful business purposes, including service improvement, analytics, product planning, and performance evaluation.

We do not sell your personal information. We may share personal information with trusted service providers, contractors, consultants, partners, and vendors who perform functions on our behalf or support the operation of the Services, provided that such parties are permitted to access and use the information only as necessary to perform those functions or as otherwise permitted by law. These recipients may include providers involved in payment processing, communications delivery, customer support, hosting, storage, analytics, security, personalization, evaluation, fraud prevention, and related operational support. To deliver certain personalized or evaluation-based features, we may share relevant content such as resume information, prompts, transcripts, or session context with authorized processing providers where necessary to perform the Services you request. We may also disclose information within our corporate structure, to professional advisers, auditors, insurers, legal counsel, financial advisers, or similar parties where reasonably necessary for lawful business, financial, compliance, or legal purposes. In addition, we may disclose information if we believe such disclosure is necessary or appropriate to comply with applicable law, regulation, court order, subpoena, lawful governmental request, or legal process; to enforce our agreements, policies, or terms; to detect, prevent, investigate, or respond to fraud, abuse, security incidents, technical issues, or unlawful conduct; or to protect the rights, property, safety, or operations of PrepVista, our users, or others. If PrepVista is involved in a merger, acquisition, reorganization, restructuring, financing, dissolution, sale of assets, bankruptcy, or similar business transaction, personal information may be disclosed, transferred, or otherwise processed as part of that transaction, subject to applicable confidentiality and legal safeguards.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain your account, preserve your interview history and reports, fulfill contractual obligations, comply with legal requirements, resolve disputes, enforce agreements, maintain security, support audits, preserve business records, and protect against fraud or misuse. Different categories of information may be retained for different periods depending on the reason for collection, the nature of the relationship, the sensitivity of the information, operational and legal requirements, and legitimate business needs. Account information may be retained while your account is active and for a reasonable period thereafter. Interview history, reports, transcripts, scores, and related data may be retained to allow continued access to prior sessions and progress history. Billing and transaction records may be retained for accounting, tax, compliance, fraud prevention, audit, and dispute resolution purposes. Support records may be retained to improve customer service and address recurring issues. When information is no longer reasonably necessary, we will take steps consistent with applicable law and operational needs to delete, anonymize, aggregate, archive, or otherwise securely handle it.

Depending on your jurisdiction and subject to applicable law, you may have certain rights and choices in relation to your personal information. These may include the right to request access to the personal information we hold about you, request correction of inaccurate or incomplete information, request deletion of your information, request restriction of certain processing, object to certain forms of processing, withdraw consent where consent is the relevant basis of processing, request portability of certain information where required by law and technically feasible, or request information regarding how your personal information has been collected, used, or disclosed. Some rights may be limited, conditional, or subject to exceptions under applicable law. To protect your privacy and account security, we may require you to verify your identity before responding to certain requests. In some circumstances, we may decline or limit a request where permitted by law, including where compliance would adversely affect the rights of others, interfere with legal obligations, undermine security or fraud prevention measures, involve disproportionate effort, or otherwise fall within a lawful exception.

If you request deletion of your account or personal information, we will review and process that request in accordance with applicable law and our legitimate operational obligations. Deletion may be permanent and irreversible, and once certain information is deleted it may not be recoverable. However, even after a deletion request, we may retain certain information where necessary to comply with legal obligations, preserve transaction and financial records, maintain security, investigate misconduct, resolve disputes, enforce our agreements, complete open transactions, prevent fraud, preserve backups for a limited cycle, or otherwise maintain information for lawful and legitimate business purposes. Any retained information will continue to be protected and used only as permitted by applicable law and this Privacy Policy.

We use reasonable administrative, technical, organizational, and physical safeguards designed to protect personal information from unauthorized access, loss, misuse, destruction, alteration, or disclosure. These safeguards may include access controls, authentication measures, encryption where appropriate, logging, monitoring, review procedures, vendor controls, security testing, incident response practices, and other measures intended to reduce risk and support the confidentiality, integrity, and availability of information. However, no method of storage, transmission, or electronic processing can be guaranteed to be completely secure. As a result, while we strive to protect your information using commercially reasonable safeguards, we cannot and do not guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials, protecting your devices, and using strong and unique passwords or comparable security measures where available.

PrepVista is not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16 without appropriate authorization where required by law. If we become aware that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to investigate and, where appropriate, delete such information. Parents or guardians who believe that a child may have provided personal information to PrepVista may contact us so that we can review the matter.

If you access or use PrepVista from a jurisdiction different from the one in which our personnel, partners, service providers, or operations are located, your information may be transferred to, stored in, or processed in one or more jurisdictions where data protection and privacy laws may differ from those of your place of residence. By using the Services, and where permitted by law, you acknowledge that such transfers may occur for the purposes described in this Privacy Policy. Where required, we will take measures intended to provide appropriate safeguards for such transfers in accordance with applicable law.

PrepVista may use cookies, local storage, pixels, tags, session identifiers, and similar technologies to operate, secure, and improve the Services. These technologies may help us recognize your browser or device, keep you signed in, maintain secure sessions, remember preferences, measure usage, analyze traffic patterns, improve performance, support account and billing functionality, prevent abuse, and enhance the user experience. Some of these technologies may be operated by trusted third parties acting on our behalf or supporting related service functions. Your browser or device settings may allow you to manage certain preferences related to cookies or similar technologies, although disabling some of them may limit the availability, quality, security, or functionality of parts of the Services.

The Services may contain links to, integrations with, or features provided by third-party websites, platforms, tools, or services. This Privacy Policy does not apply to the privacy practices of those third parties, and PrepVista is not responsible for their content, policies, terms, or data practices. Your interactions with third-party services are governed by the applicable terms and privacy policies of those services. We encourage you to review any relevant third-party privacy notices before providing information to them or using integrated features.

We may revise or update this Privacy Policy from time to time to reflect changes in our Services, operations, legal requirements, risk environment, or business practices. When we do so, we will update the “Last Updated” date above and, where required by law or where otherwise appropriate, provide notice through the website, platform, email, in-product communication, or other reasonable means. The form, timing, and content of any notice may depend on the nature and significance of the changes. Your continued access to or use of the Services after an updated Privacy Policy becomes effective constitutes your acknowledgement of the revised policy and, to the extent permitted by law, your acceptance of it.

If you have questions, concerns, complaints, or requests regarding this Privacy Policy or our handling of personal information, you may contact us at **[support.prepvistaai@gmail.com](mailto:support.prepvistaai@gmail.com)**. We will review communications received and respond within a reasonable time, subject to the nature of the request, applicable law, and any identity verification requirements that may apply.

To the extent required by applicable law, this Privacy Policy is intended to supplement, and not limit, any rights you may have under relevant privacy, data protection, consumer protection, or electronic communications laws. If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions will continue in full force and effect to the maximum extent permitted by law. In the event of any conflict between this Privacy Policy and a more specific privacy notice provided for a particular feature, promotion, jurisdiction, or user category, the more specific notice will govern to the extent of that conflict.

By continuing to use PrepVista, you acknowledge the importance of reviewing this Privacy Policy periodically and remaining informed about how your information is collected, used, and protected as our Services evolve.