Privacy Policy

1. Introduction

Zvsquared is operated by Aleksandr Zvonarev, an individual based in Thailand ("we", "us", or "our"), who is responsible for the personal data described in this notice. This policy covers zvsquared.com and the interview-practice app at app.zvsquared.com. It explains what we collect, why, who receives it and how to exercise your rights. Contact support@zvsquared.com for privacy requests. This is a notice about processing, not a request for blanket consent.

2. Information We Collect

We collect information you provide directly to us, information collected automatically when you use the Service, and information from third-party sources.

• Account data: email address, display name, and authentication identifiers when you create an account.
• Preferences and support: interview targets, practice settings, and information you choose to include when contacting us.
• Learning and interview data: session history, problem attempts, answers, AI-generated feedback, scores, transcripts, progress records, and session-recovery snapshots. The app can save activity and snapshots automatically while you practise, as well as when you submit an answer.
• Billing data: plan, subscription status, Stripe customer and subscription identifiers, and payment event records. Payment-card details are collected and handled by Stripe, not by Zvsquared.
• Device & log data: IP address, browser type and version, operating system, referring URLs, and timestamps.
• Cookies & similar technologies: see our Cookie Policy for details.

Account and authentication details are needed to provide an account; your answers and relevant context are needed for interview feedback. Billing details are needed only for a purchase. Without the information needed for a feature, we cannot provide that feature. You can browse public pages without creating an account. Do not include sensitive personal data, confidential employer information or other people's personal data in practice answers or support messages.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate you.
• Deliver, personalise, secure, and improve the learning experience.
• Track your progress and generate performance reports.
• Process interview answers and related context to generate AI-assisted feedback and assessments.
• Process payments, subscriptions, cancellations, and billing support.
• Send transactional emails such as account confirmations, password resets, and billing notices.
• Detect, investigate, and prevent fraudulent or abusive use.
• Comply with legal obligations.

We do not sell personal data or use it for targeted advertising. The public website does not use optional visitor analytics or advertising trackers. Its privacy-notice dismissal cookie only remembers your choice for 180 days.

AI feedback is automated practice guidance and may be wrong. It is not an employer's hiring decision. You can contact us about inaccurate personal records or feedback and request a review.

4. Third Parties and Processors

We use the following providers to deliver the Service. They receive information needed for their role; payment providers may also use data for their own legal and fraud-prevention responsibilities.

• Supabase, Inc. — database, authentication, and storage infrastructure. See Supabase's Privacy Policy.
• Anthropic, PBC — AI inference for interview feedback and assessment. Relevant session content is sent to Anthropic when you use AI-assisted features. See the Anthropic Privacy Center.
• Stripe, Inc. — checkout, payment processing, subscription management, and fraud prevention. See Stripe's Privacy Policy.
• Resend — delivery of transactional welcome emails where enabled, including recipient email, display name, message content and delivery records. See Resend's Privacy Policy.
• Vercel, Inc. — hosting, application delivery, and operational logs. See Vercel's Privacy Notice.

We may also disclose information where required by law, to respond to a lawful request, or as necessary to establish or defend legal claims. Provider privacy notices describe their own processing; they do not replace this notice for data we control.

5. International Data Transfers

The operator is based in Thailand and our providers operate internationally, including in the United States. Your information may therefore be processed outside Thailand or your country of residence, where legal protections can differ. Contact us for information about the processing locations and transfer arrangements relevant to your data. Applicable transfer requirements must be met independently of your use of the Service or dismissal of the privacy notice.

6. Data Retention

Account details and saved practice records are retained while your account is active to provide your history and progress. You can request deletion by email. Support correspondence is kept while handling the request and any related dispute. Security logs and recovery backups are retained according to the configured provider periods and any ongoing incident investigation. Billing records may need to be kept after account closure for applicable tax, accounting or legal obligations. We do not currently promise a single automatic deletion deadline for all these records. Contact us for the retention details relevant to your request; any legally required retention or deletion rights continue to apply. Browser-storage lifetimes and clearing instructions are in the Cookie Policy.

7. Legal Bases

Where applicable law requires a legal basis, we rely on the following bases only to the extent that their requirements are met:

• Contract: account access, requested interview practice and AI feedback, saved history, subscriptions, and service communications needed to deliver those features.
• Legitimate interests: delivering public pages, keeping the Service secure, investigating abuse, diagnosing faults and answering support requests, balanced against your rights.
• Legal obligations: required accounting records and responding to legally binding requests.
• Consent: if a specific optional use needs your consent, we must ask separately before that use. Dismissing the privacy notice or accepting the Terms does not provide it.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Object to processing based on legitimate interests or ask us to restrict processing where the law provides this right.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time for processing that relies on it, without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint with the Thai Personal Data Protection Committee or another data-protection authority with jurisdiction.

To exercise any of these rights, contact us at support@zvsquared.com. We will respond within the period required by applicable law and may need to verify your identity before completing a request.

9. Security

We use technical and organisational safeguards designed to protect personal data, including encrypted transport and access controls. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

10. Children

The Service is not directed to individuals under 13 years of age. We do not knowingly collect personal data from children under 13. If a higher minimum age applies where you live, you may use the Service only with any consent required by local law. Contact us if you believe a child has provided personal data without the required consent.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice on the Service before the change takes effect when required by law.

12. Contact

Questions or requests regarding this policy should be directed to:

Aleksandr Zvonarev, operating as Zvsquared
Thailand
support@zvsquared.com