DojoPrep

Privacy Policy

Effective June 15, 2026

DojoPrep (“DojoPrep,” “we,” “us”) provides an AI-powered interview-preparation service at dojoprep.com. This policy explains what we collect, why, who we share it with, and the rights you have. It applies to the website, web app, and desktop app.

Who we are

DojoPrep is the data controller for the information described here. For privacy questions or to exercise your rights, contact hello@dojoprep.com.

Information we collect

  • Account data — your email, name, and authentication identifiers, provided when you sign up (including via Google sign-in). Handled by our authentication provider, Clerk.
  • Profile & career data — résumé text, work history, skills, and anything you add to your profile or upload (PDF/DOCX). We extract text from uploaded files in memory and do not retain the original file beyond processing.
  • Practice data — interview sessions, your written answers, AI-generated questions and feedback, and session reports.
  • Job-fit data — job descriptions you paste or link, and the fit analyses and tailored résumés we generate. Tailored résumé PDFs are stored in private object storage.
  • Usage & billing data — credit balances, plan, and subscription status. Payment card details are collected and processed by Stripe; we never see or store your full card number.
  • Technical data — IP address, device/browser information, and error diagnostics, used to operate, secure, and debug the service.

How we use your information

  • To provide the service — generate tailored questions, score answers, analyze job fit, and produce reports.
  • To operate your account, process payments, and enforce plan/credit limits.
  • To secure the service and prevent abuse (e.g. rate limiting, bot detection on public tools).
  • To send transactional and, where you opt in, practice-reminder emails.
  • To improve the product through aggregate, de-identified analytics.

Lawful bases (where GDPR applies): performance of our contract with you (providing the service), our legitimate interests (security, product improvement), your consent (optional analytics cookies and reminder emails), and legal obligations.

AI processing

To generate questions, feedback, fit analyses, and résumés, we send the relevant text (your profile/résumé and the job description) to our AI sub-processors, Anthropic and OpenAI, via their APIs. We use their standard API offerings, under which your inputs and outputs are not used to train their models. We send only the data needed for the feature you requested.

Sub-processors

We rely on the following providers to operate DojoPrep. Each processes only the data needed for its function:

  • Vercel — application hosting and serverless compute.
  • Clerk — authentication and account management.
  • Neon — primary database (Postgres).
  • Anthropic and OpenAI — AI text generation.
  • Stripe — payment processing and subscription billing.
  • Vercel Blob — private storage for generated résumé PDFs.
  • Upstash — caching and rate limiting.
  • Resend — transactional and reminder email delivery.
  • Sentry — error monitoring (with PII scrubbing).
  • PostHog — product analytics (loaded only with your consent).
  • Zyte — fetching public job-posting pages you link to.

Cookies & analytics

We use strictly-necessary cookies to run the site and keep you signed in. We load analytics (PostHog) only after you accept via our cookie banner; if you decline, analytics tracking stays off. Error monitoring (Sentry) runs to keep the service reliable and is configured to scrub personal data.

Data sharing

We do not sell your personal information. We share data only with the sub-processors above, when required by law, or in connection with a business transfer (e.g. merger or acquisition), in which case we will notify you.

Data retention

We keep your data while your account is active. When you delete your account, we hard-delete your data after a 7-day grace period, except where we must retain limited records for legal, tax, or fraud-prevention purposes. Uploaded files are processed in memory and not retained.

Your rights

Depending on where you live (e.g. EEA/UK under GDPR, California under CCPA/CPRA), you may have rights to access, correct, export, or delete your data, and to object to or restrict certain processing. You can export all your data and delete your account at any time from Settings, or email hello@dojoprep.com. We do not sell or “share” personal information as defined under California law.

Data transfers & security

Our providers may process data in the United States and other countries. We use providers that offer appropriate safeguards. We protect data with encryption in transit, access controls, and private storage for sensitive artifacts. No system is perfectly secure, but we work to protect your information.

Children

DojoPrep is intended for users 18 and older. We do not knowingly collect data from children.

Changes

We may update this policy. Material changes will be posted here with a new effective date and, where appropriate, notified by email.