Privacy Policy

1. Introduction

Welcome to NorthStar. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our GenAI role-play platform for interview preparation.

Please read this Privacy Policy carefully. By using NorthStar, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

• Name
• Email address
• University and graduation year (optional)
• Career interests and target roles
• Account credentials (password is encrypted)

2.2 Voice Data

When you use our AI interview simulation features, we collect:

• Voice recordings of your interview responses
• Transcriptions of your spoken answers
• Speech patterns, pace, and delivery metrics
• Pauses and filler word analysis

2.3 Usage Data

We automatically collect:

• Interview session history and performance metrics
• Questions practiced and feedback received
• Time spent on the platform
• Feature usage patterns
• Progress and improvement tracking data

2.4 Technical Data

We collect:

• IP address and device information
• Browser type and version
• Operating system
• Cookies and similar tracking technologies
• Log data and error reports

3. How We Use Your Information

We use the collected information for:

3.1 Service Delivery

• Providing AI-powered interview simulations
• Generating personalized feedback on your performance
• Analyzing speech content and delivery
• Tracking your progress over time
• Recommending relevant interview questions and practice sessions

3.2 Service Improvement

• Improving our AI algorithms and feedback quality
• Developing new features and functionalities
• Understanding user behavior and preferences
• Conducting research and analysis

3.3 Communication

• Sending account-related notifications
• Providing customer support
• Sending marketing communications (with your consent)
• Notifying you of updates, new features, or changes to our service

3.4 Security and Legal

• Protecting against fraud and abuse
• Enforcing our Terms of Service
• Complying with legal obligations
• Resolving disputes

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

Third-party vendors who perform services on our behalf, including:

• Supabase (database and authentication)
• AI processing services for speech analysis
• Cloud storage providers
• Analytics providers
• Payment processors (if applicable)

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

4.3 Business Transfers

In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

4.4 Aggregated Data

We may share aggregated, anonymized data that does not identify you personally for research, analytics, or marketing purposes.

5. Voice Data Processing

Special considerations for voice data:

• Voice recordings are processed by our AI systems to generate feedback
• Recordings are stored securely and encrypted
• You can request deletion of your voice recordings at any time
• Voice data may be used to improve our AI models (in anonymized form)
• We retain voice recordings for [specified period] unless you request earlier deletion

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure authentication via Supabase
• Regular security audits and updates
• Access controls and authentication requirements
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Opt-out: Unsubscribe from marketing communications
• Data Portability: Request your data in a portable format
• Restriction: Request limitation of processing in certain circumstances
• Object: Object to processing based on legitimate interests

To exercise these rights, please contact us at privacy@northstar.com

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide you with our services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

9. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Remember your preferences and settings
• Understand how you use our service
• Provide personalized content
• Analyze site traffic and usage patterns

You can control cookies through your browser settings. Note that disabling cookies may affect functionality.

10. Children's Privacy

Our Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Your continued use of the Service after changes constitutes acceptance of the updated policy.