AceStack AI LLC

Privacy Policy

AceStack AI LLC ("we", "us", "our") operates AceStack AI, an AI-powered interview preparation platform (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Last updated: September 5, 2026

1. Scope

This notice describes how AceStack AI LLC handles personal information when you use AceStack AI. It is a privacy notice, not a request for consent to every activity described below. Where consent is required, such as for optional analytics, we ask separately.

  • Our website and web application
  • All related services, features, and content

2. Information We Collect

2.1 Information You Provide

When you use AceStack AI, you may provide:

Interview responses:

  • Account information (email, name)
  • Profile data (role, experience level, goals)
  • Text answers
  • Code submissions
  • SQL queries
  • Diagrams and system designs
  • Voice audio processed transiently when voice features are used; recordings are not retained
  • Portfolio and repository links (e.g. GitHub)

2.2 Automatically Collected Information

We automatically collect:

This data helps us improve performance and user experience.

  • Usage data (tasks started, completed, attempts, scores)
  • Device and browser information
  • IP address and approximate location
  • Session activity and navigation paths

2.3 AI-Processed Data

Your submitted content may be processed by AI systems to:

This processing may include sending data to third-party AI providers.

Voice audio is sent to our configured third-party speech-recognition provider only to produce a transcript. AceStack AI does not persist the recording with your attempt after the request completes; the AI evaluator receives the transcript, not the audio file.

We use submissions only to provide the requested transcription, coaching, evaluation, and related product features. We do not submit user content for the purpose of training AceStack AI or a third-party general-purpose AI model.

  • Evaluate correctness and quality
  • Generate feedback and suggestions
  • Calculate scores and readiness levels
  • Recommend personalized learning paths

2.4 Interview Intelligence Contributions

If you submit a first-hand interview report, we collect the report context and paraphrased description you provide, separate consent choices, moderation status, security signals and a private status-token hash. We collect a contact email only when you provide one and consent to contact.

The private status URL itself acts as a credential. We store only a one-way hash of its token and do not intentionally include that token in product analytics or operational emails. The submission flow does not send report text to an AI provider.

  • Company and role context, seniority, broad region and approximate interview month
  • Interview stage, environment, duration, tools, task pattern, follow-ups and evaluation signals
  • First-hand, confidentiality, processing, aggregation, contact and optional marketing consent records
  • Automated safety and duplicate-review flags, reviewer decisions and contributor corrections

3. Legal Basis for Processing (GDPR)

If you are located in the EU/EEA, we process your data based on:

  • Contractual necessity — to provide the Service
  • Legitimate interests — to secure the Service, prevent abuse, diagnose failures, and improve reliability
  • Consent — for analytics and non-essential cookies
  • Legal obligations — when we must retain or disclose limited records under applicable law

4. How We Use Your Information

We use your data to:

  • Provide and operate the Service
  • Evaluate interview performance
  • Generate feedback and insights
  • Personalize learning paths and recommendations
  • Maintain system reliability and security
  • Monitor usage and improve features
  • Prevent fraud, abuse, and misuse
  • Privately moderate interview reports and, when separately permitted, produce anonymized and transformed educational patterns

5. Data Sharing and Disclosure

We do not sell your personal data.

We may share data with:

5.1 Service Providers

  • DigitalOcean — application hosting and private object storage; processes hosted account, submission, network, and operational data
  • Supabase — managed PostgreSQL database hosting; stores account, task, attempt, score, preference, and subscription-state records
  • Cloudflare — content delivery, traffic security, and abuse prevention; processes IP addresses, request metadata, and security signals
  • Google and GitHub — optional sign-in providers; provide the account identifier, email, and profile fields authorized during sign-in
  • Amplitude — optional product analytics used only after analytics consent; receives an internal user identifier and content-free event metadata
  • Better Stack — error and performance monitoring; receives limited technical diagnostics, while browser monitoring runs only after analytics consent
  • Stripe — payment and subscription processing; AceStack AI receives customer, subscription, and billing-status identifiers but not complete card numbers

5.2 AI Providers

We use OpenRouter and the model provider selected for the requested feature. We send only the task context and user content needed for that transcription, coaching, or evaluation request.

For text-based AI requests, our service tells OpenRouter not to route the request to providers that collect user content. OpenRouter states that it does not retain prompt or response content unless logging is enabled; it still retains non-content request metadata.

Speech transcription currently uses OpenAI as the primary model provider and DeepInfra as a fallback. OpenRouter identifies both providers as not training on prompts; OpenAI may retain prompts under its provider policy, while DeepInfra is identified as zero-retention. Provider processing remains governed by the applicable provider terms and may change, so contact us if you need current information about a specific request.

  • Transcribe a voice answer
  • Evaluate responses
  • Generate requested coaching or feedback

5.3 Legal Requirements

We may disclose data if required by law or to:

  • Comply with legal obligations
  • Protect rights and security

6. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction.

Where applicable law requires a transfer mechanism, we rely on an adequacy decision, appropriate contractual safeguards, or another lawful transfer basis. You may contact us for information about safeguards relevant to your data.

7. Data Retention

Voice audio is processed in memory for transcription and is not stored with your attempt. The transcript, submitted answer, score, and review remain with the related attempt while the account is active so that Progress and attempt history work.

Stored task artifacts other than transient voice audio remain while needed to provide the related workspace and attempt history. Expired artifacts are removed by automated retention cleanup. Security, fraud-prevention, and legal records may be kept longer when necessary for those purposes.

Cookie choices remain in the browser until you change them or clear browser storage. Authenticated cookie choices are also stored with the account until changed or the account is deleted.

You may request deletion of voice transcripts, submissions, or the account at any time by emailing [email protected]. We verify the request before deleting account data and separately retained files, subject to legal exceptions.

For an interview report, you can use its private status link to request deletion. We clear active report content and contact information while retaining only minimal consent, security and audit records where necessary for legal compliance, fraud prevention and system integrity.

8. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time where processing depends on consent
  • Lodge a complaint with your local data protection authority

To exercise your rights: [email protected]

8.1 California Privacy Rights

Where the California Consumer Privacy Act applies, California residents may request access to categories and specific pieces of personal information, correction, deletion, and information about collection, use, and disclosure. We do not sell personal information or share it for cross-context behavioral advertising.

Submit a privacy request: [email protected]

9. Cookies and Tracking

We use cookies and similar technologies.

Types of cookies:

For more details, see our Cookie Policy.

  • Essential (required for functionality)
  • Analytics (with consent)
  • Functional (preferences)

10. Security

We implement technical and organizational measures, including:

However, no system is completely secure.

  • Access controls
  • Secure data storage
  • Logging and monitoring systems
  • Protection against unauthorized access

11. Children’s Privacy

AceStack AI is not intended for individuals under 16.

We do not knowingly collect data from children.

12. AI Transparency

AceStack AI uses AI to assist evaluation and feedback.

AI features are labeled in the product, and their output is generated by an automated system rather than a human interviewer.

Important:

  • AI outputs may not be fully accurate
  • AI does not make legally binding decisions
  • Users should not rely solely on AI feedback for critical decisions

12.1 Crisis and Self-Harm Safety

AceStack AI is an interview-preparation service, not a mental-health or emergency service. AI Coach detects direct statements of self-harm risk and responds with crisis resources instead of continuing ordinary coaching.

If you may act now or are in immediate danger, call your local emergency number. In the United States, call or text 988. Outside the United States, find a local crisis line through findahelpline.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

Changes will be posted on this page with an updated date.

15. Data Controller

AceStack AI LLC acts as the data controller for your personal data.

30 N Gould St Ste R Sheridan WY 82801