Your privacy matters to us

Account Information

• Name, email address, and company name when you create an account
• Password (stored as a one-way hash, never in plain text)
• Google account data if you sign in via Google OAuth

Meeting & Interview Data

• Audio and video recordings of interviews and meetings
• Transcripts generated from recordings via speech-to-text
• AI-generated evaluations, scores, and candidate analysis
• Screenshots captured during interviews (with participant awareness)
• Chat messages and shared notes during meetings
• Calendar data if you connect Google Calendar

Technical & Billing Data

• IP address, browser type, and device information
• Usage logs and analytics (via Axiom)
• Authentication cookies (HTTP-only, secure)
• Payment info processed by Stripe (we never store card details)

• Provide and operate the Service (interviews, meetings, transcription, analysis)
• Process payments and manage your account
• Send transactional emails (verification codes, invitations, reminders)
• Improve service quality using aggregated, anonymized data only
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We share the minimum data necessary with these processors:

Some processors are located in the United States. Where data is transferred outside the EU/EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses). Our interview infrastructure (real-time video/audio, database) is self-hosted in the EU (Frankfurt) and is not shared with third parties.

• All data encrypted in transit (TLS/HTTPS)
• Recordings stored in AWS S3 with server-side encryption (SSE-S3)
• Passwords hashed using bcrypt
• Auth tokens stored in HTTP-only, secure cookies
• Database backups encrypted with 30-day retention
• Servers hosted in the EU (Frankfurt, Germany)

• Account data retained while your account is active
• Recordings and transcripts retained until you delete them or your account
• Account deletion permanently removes all data within 30 days
• Anonymized, aggregated analytics may be retained indefinitely

Depending on your location, you may:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Export your data in a portable format
• Object to or restrict processing
• Withdraw consent at any time
• Delete your account entirely (Settings or contact us)

We use a single essential cookie (bat) to keep you signed in. It is HTTP-only and secure. We do not use tracking, advertising, or third-party analytics cookies.

If you are a candidate in a Boooply-powered interview:

• Your interview is recorded (audio, video, and screenshots) and analysed with AI
• A transcript and an AI evaluation are generated for the inviting company
• You see the full notice and give or decline consent before the recording starts

You can see exactly what we hold and access, export, or delete your data yourself — no need to go through the company. Full details are in the candidate privacy notice.

If you join an interview or meeting as an interviewer, host, or team member:

• The session is recorded as part of conducting the interview — this rests on the legitimate interests of the organization and your role, not on your consent
• You are told before recording starts
• You can join with your camera off if you prefer not to be on video — you remain part of the audio record, but no video of you is captured

Boooply is not intended for anyone under 16. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be communicated via email or through the Service. Continued use after changes constitutes acceptance.

Questions about this policy or your data rights?