Your privacy matters to us

Account Information

• Name, email address, and company name when you create an account
• Password (stored as a one-way hash, never in plain text)
• Google account data if you sign in via Google OAuth

Meeting & Interview Data

• Audio and video recordings of interviews and meetings
• Transcripts generated from recordings via speech-to-text
• AI-generated evaluations, scores, and candidate analysis
• Screenshots captured during interviews (with participant awareness)
• Chat messages and shared notes during meetings
• Calendar data if you connect Google Calendar

Technical & Billing Data

• IP address, browser type, and device information
• Usage logs and analytics (via Axiom)
• Authentication cookies (HTTP-only, secure)
• Payment info processed by Stripe (we never store card details)

• Provide and operate the Service (interviews, meetings, transcription, analysis)
• Process payments and manage your account
• Send transactional emails (verification codes, invitations, reminders)
• Improve service quality using aggregated, anonymized data only
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We share the minimum data necessary with these services:

• All data encrypted in transit (TLS/HTTPS)
• Recordings stored in AWS S3 with server-side encryption (SSE-S3)
• Passwords hashed using bcrypt
• Auth tokens stored in HTTP-only, secure cookies
• Database backups encrypted with 30-day retention
• Servers hosted in the EU (Frankfurt, Germany)

• Account data retained while your account is active
• Recordings and transcripts retained until you delete them or your account
• Account deletion permanently removes all data within 30 days
• Anonymized, aggregated analytics may be retained indefinitely

Depending on your location, you may:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Export your data in a portable format
• Object to or restrict processing
• Withdraw consent at any time
• Delete your account entirely (Settings or contact us)

We use a single essential cookie (bat) to keep you signed in. It is HTTP-only and secure. We do not use tracking, advertising, or third-party analytics cookies.

If you are a candidate in a Boooply-powered interview:

• Your interview may be recorded (audio and video)
• A transcript and AI evaluation may be generated
• The inviting organization controls your interview data
• Contact the organization for data access or deletion requests

Boooply is not intended for anyone under 16. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be communicated via email or through the Service. Continued use after changes constitutes acceptance.

Questions about this policy or your data rights?