Your practice should stay yours.

Auri Pal is operated by D Strategy Ltd, a company based in the United Kingdom. D Strategy Ltd is the controller of the personal information described in this policy. In this policy, “Auri”, “we”, “us”, and “our” mean D Strategy Ltd in connection with the Auri Pal service.

This policy applies when you visit Auri Pal, create an account, configure or take a mock interview, receive an assessment, buy interview credits, or contact us about the service. It does not replace the privacy notices of third-party services that act as independent controllers for some of their own purposes.

Depending on how you use Auri, we process:

• Account information: your name, email address, profile image, authentication identifiers, and account creation and update dates. When you sign in with Google, Google provides the account details you choose to share.
• Interview setup: the interview topic, experience level, role preferences, job description or job context, and any experience summary you provide.
• Interview content: finalised text transcripts of your answers and the AI interviewer's questions, typed messages, timestamps, and the AI provider used for the session.
• Assessment information: scores, strengths, improvement suggestions, supporting transcript extracts, and preparation recommendations generated from the interview.
• Payment information: your Stripe customer reference, purchase and credit status, product purchased, and transaction references. Auri does not receive or store your full card details.
• Service and security data: session status, connection timing, reconnect counts, token and audio-duration usage, provider errors, estimated service cost, and limited browser or network information in application and infrastructure logs.
• Support information: the content of messages you send us and the contact details needed to respond.

We receive information directly from you, from Google when you sign in, from Stripe when a payment is made, and from the systems and AI providers used to deliver an interview.

Please do not paste special-category information, confidential employer material, or personal information about another person into a job description, experience summary, or interview answer unless you are entitled to provide it and it is genuinely needed.

Voice mode needs permission to use your device microphone. Audio is sent as a live stream from your browser to OpenAI or Google, depending on the provider selected for the interview. The Auri application does not create an audio file, add the audio to your account, or make it available for playback later.

The selected AI provider processes the live stream to understand your speech, generate the interviewer's response, and produce text transcript events. Providers may keep limited operational, safety, or session data under the terms that apply to Auri's API account. That provider-side processing is different from the Auri application storing an audio recording.

We do not use your voice to identify you, create a voiceprint, or perform biometric recognition. You can deny or revoke microphone permission in your browser and use the typed fallback where it is available.

Where we rely on legitimate interests, we consider the impact on your rights and use only the information reasonably needed for that purpose. Where we ask for consent for a future optional feature, you may withdraw it at any time without affecting earlier lawful processing.

We do not sell your personal information, use interview content for targeted advertising, or use it to train an Auri-owned AI model.

Auri uses AI to conduct mock interviews and generate assessment reports. Live audio and conversation context are sent to OpenAI or Google for the realtime interview. The stored transcript, interview setup, and relevant context are sent to Anthropic, with OpenAI used as a fallback, to generate the assessment.

The report analyses patterns in your answers and returns scores, feedback, transcript-linked evidence, and preparation ideas. It is automated, may be inaccurate, and is intended only as practice guidance. Auri does not use the report to make employment, education, credit, or other decisions that have legal or similarly significant effects on you.

Auri does not opt interview content into model training. Provider processing and temporary retention are governed by the commercial API settings and terms applicable to Auri's accounts. You can read the current data information published by OpenAI, Google Gemini, and Anthropic.

We disclose only what is reasonably needed to:

• Google: account sign-in and, when selected, the Gemini Live interview.
• OpenAI: realtime voice interviews and assessment generation when used as the fallback provider.
• Anthropic: primary post-interview assessment generation.
• Stripe: checkout, payment processing, fraud prevention, and payment records. Stripe may also act as an independent controller for some regulated payment purposes; see the Stripe Privacy Centre.
• Infrastructure suppliers: trusted hosting, database, storage, security, and support suppliers that operate the service under contractual controls.
• Authorities and advisers: where disclosure is required by law or reasonably necessary to protect users, the service, or legal rights.

If ownership of Auri or relevant business assets changes, personal information may be disclosed as part of that transaction subject to appropriate confidentiality and data-protection safeguards.

Some suppliers may process information outside the United Kingdom, including in the United States and other countries where they operate. When UK data-protection law restricts a transfer, we use an applicable adequacy regulation or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, and carry out any required risk assessment. You may contact us for more information about the safeguards relevant to your information.

Our current retention approach is:

• Audio recordings: the Auri application does not create or retain them. AI providers may temporarily process or retain data under their applicable terms as described above.
• Interview sessions, transcripts, and reports: kept while your account is active so you can access your history. Deleting an interview removes its transcript, report, and related session records from Auri's active database.
• Account and profile information: kept while your account is open and deleted or anonymised after a verified deletion request, except where continued retention is required by law or for a compelling security or legal reason.
• Payment and transaction records: kept for as long as needed to provide purchased credits and meet tax, accounting, fraud-prevention, dispute, and legal requirements. Stripe keeps its own records under its policies and legal duties.
• Operational and security data: kept only for as long as it remains reasonably needed to diagnose issues, measure reliability, prevent misuse, or establish legal claims, then deleted or anonymised.

We may retain minimal records of a privacy request where necessary to show that we complied with it. Information may remain briefly in protected backups until those backups are overwritten on their normal cycle.

Auri uses strictly necessary authentication cookies to keep you signed in and protect access to your account. During an interview, Auri also places a short-lived realtime connection descriptor in your browser's local storage so the session can connect or recover from a brief interruption. It contains an expiry time and is removed when the interview completes, or when Auri next reads it after it has expired.

Auri does not currently use advertising cookies or third-party behavioural analytics. Blocking necessary cookies or clearing necessary browser storage may prevent sign-in or interrupt an active interview.

Depending on the circumstances, UK data-protection law may give you the right to ask us to:

• provide a copy of your personal information;
• correct inaccurate or incomplete information;
• delete your information;
• restrict how we use your information;
• provide certain information in a portable format;
• stop processing based on legitimate interests; or
• honour a withdrawal of consent where consent applies.

You can delete an individual interview from its report page. For an account request or any other privacy request, email us using the address below. We may need to verify your identity before acting. These rights can have legal limits, which we will explain if they apply.

You can also complain to the UK Information Commissioner's Office. Visit ico.org.uk/make-a-complaint. We would appreciate the chance to address your concern first.

We use measures designed to protect personal information, including authenticated access controls, encrypted network connections, short-lived provider credentials, separation of user records, and restricted operational access. No online service can guarantee absolute security, so please use a trusted device, keep your Google account secure, and contact us if you believe your Auri account has been misused.

Auri is designed for interview practice and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child has provided information to Auri, please contact us so we can investigate and delete it where appropriate.

We may update this policy when Auri's features, suppliers, or legal duties change. We will publish the revised policy here and change the “last updated” date. If a change materially affects how we use existing personal information, we will provide an additional notice where required.