Privacy Policy — Lenviva

Lenviva ("we", "us") provides an AI-powered job interview practice service. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR) and comparable laws.

1. Data we collect

Account data: name, email address, hashed password (or OAuth identifier), profile picture.
Billing data: subscription plan, invoice history, and the last four digits of your payment method (full card details are handled by our payment processor, Stripe, and never stored on our servers).
Usage data: which interview roles you practice, session duration, number of sessions, minutes used, and coaching scores.
Voice & transcript data: your voice is processed by our voice AI provider (Vapi) to create a transcript and generate feedback. Audio is not stored after processing. Transcripts and coaching reports may be saved in your account history when interview history is enabled.
Optional AI-improvement data: if you separately consent, Lenviva may use de-identified interview transcripts to evaluate and improve its AI systems. This consent is optional and not required to use the service.
Technical data: IP address, browser type, device information, and pages visited (see our Cookie Policy).

2. Why we collect it

To provide the practice interview and coaching features you request.
To generate personalized coaching reports using AI.
To bill you for paid plans and prevent fraud.
To improve product quality, evaluate AI performance, and fix bugs.
To use de-identified transcripts for AI improvement only when you have opted in.
To comply with legal obligations.

3. Legal basis

We process your data under contract (to deliver the service you signed up for), legitimate interest (to improve reliability and prevent abuse), consent (for optional analytics cookies and optional AI-improvement use), and legal obligation (for tax and accounting records).

4. Data sharing

We share data only with sub-processors strictly necessary to run the service:

Supabase — authentication, database, and file hosting.
Vapi — real-time voice AI for the practice interviews.
OpenAI / Anthropic / Google (via Lovable AI Gateway) — language model calls used to generate coaching reports.
Stripe — payments and subscription billing.
Cloudflare — hosting and content delivery.
Google Analytics — optional, consent-based aggregate website analytics. Google Signals and advertising personalization are disabled in Lenviva's configuration.

We do not sell your personal data.

5. Data retention

Account data: kept while your account is active and for 90 days after deletion (for backups and legal disputes).
Transcripts and coaching reports: kept until you delete them, turn off future history saving, or close your account.
Calls started after you turn off interview history are not shown in Report Archive.
Billing records: kept for the period required by tax law (typically 5–10 years).

6. Your GDPR rights

Right to access your data.
Right to correct inaccurate data.
Right to erasure ("right to be forgotten").
Right to data portability.
Right to object to processing.
Right to withdraw consent at any time.

You can download your data, delete interview history, and manage consent in Settings → Privacy. To request account deletion or exercise any other privacy right, email privacy@lenviva.app. You also have the right to complain to your local data protection authority.

7. International transfers

Some sub-processors are located outside the EEA. Where required, we rely on Standard Contractual Clauses approved by the European Commission to protect your data.

8. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Access to production systems is limited to authorized personnel and requires multi-factor authentication.

9. Changes

We may update this policy from time to time. Material changes will be announced in-app or by email at least 14 days before they take effect.

10. Contact

Questions? Email privacy@lenviva.app.

This document is a template provided for convenience. It is not legal advice. Please have a qualified attorney in your jurisdiction review and adapt it to your specific business before relying on it.