LEGAL · PRIVACY POLICY
What we don't store.
What we collect, why we collect it, and how interview transcripts are protected — plus how to get it all deleted.
EFFECTIVE MAY 12, 2026 · LAST UPDATED MAY 12, 2026 · 2 MIN READ
This Privacy Policy explains how PlsFixThx.ai collects, uses, shares, and protects your personal data when you use our AI-powered mock interview platform. Please read it carefully — it covers your rights and our obligations as data controller under the EU General Data Protection Regulation (GDPR) and Singapore's Personal Data Protection Act (PDPA).
01 · Who We Are
The data controller responsible for your personal data is PFT Ventures Pte. Ltd., a private company incorporated in Singapore.
For all privacy-related inquiries, contact us at support@plsfixthx.ai.
02 · Personal Data We Collect
We collect only the data strictly necessary to provide our service:
- Account data: email address, first name, account creation date, login timestamps
- Authentication data: encrypted session tokens (essential cookies, see Section 9)
- Payment data: handled directly by Stripe; we receive only confirmation, amount, and SKU purchased. We never see or store your card details
- Interview session data: audio recordings of your interview answers (stored by Vapi), AI-generated transcripts, AI-generated grading and feedback (tear sheets), session timestamps, question metadata
- Webcam stream: see Section 6 (we do NOT record or store this)
- Technical logs: IP address, browser type, device type, request timestamps, error logs — retained 90 days for security and debugging
- Support correspondence: any messages you send to our support email
We do not collect special-category data (race, health, religious belief, etc.) and do not knowingly collect data from anyone under 18 years old.
03 · How We Use Your Data and Legal Basis
We process your data only for the following purposes, each with a legal basis under GDPR Article 6:
| Purpose | Legal basis |
|---|---|
| Provide the interview service you purchased | Performance of a contract |
| Generate your AI grading, feedback, and tear sheet | Performance of a contract |
| Process payments | Performance of a contract |
| Send transactional emails (receipts, account notices) | Performance of a contract |
| Respond to your support inquiries | Legitimate interest |
| Detect fraud, abuse, and security threats | Legitimate interest |
| Maintain financial records | Legal obligation (applicable Singapore tax and accounting law) |
We do not process your data for marketing, advertising, or profiling without your explicit consent.
04 · Automated Decision-Making
Your interview answers are graded automatically by third-party AI models without human intervention. This is automated decision-making within the meaning of GDPR Article 22.
The grading produces a numerical band score (0-10), category-specific feedback, and a written tear sheet. This grading is for educational and self-development purposes only. It has no legal, financial, or employment consequences whatsoever, does not affect your eligibility for any service, and is not shared with third parties.
You have the right to request human review of any AI-generated grading — contact us at support@plsfixthx.ai and we will manually review and explain your tear sheet.
05 · Third-Party Processors (Sub-processors)
To deliver our service we share specific data with the following processors. Each operates under standard data processing agreements and security commitments:
| Processor | Purpose | Data shared | Location |
|---|---|---|---|
| Voice AI orchestration provider | Voice routing during interviews; audio recording storage | Audio stream, transcripts | United States |
| Large language model provider (dialogue) | AI persona dialogue generation | Transcripts | United States |
| Large language model provider (grading) | AI grading and tear sheet generation | Transcripts, session metadata | United States |
| Text-to-speech provider | Conversion of AI verdict text to spoken audio | Verdict text | United States |
| Speech-to-text provider | Transcription of your spoken answers | Audio stream | United States |
| Cloud database and authentication provider | Database, authentication, email infrastructure | All account and session data (excluding audio recordings) | United States |
| Application hosting provider | Frontend rendering and application hosting | Account data for UI display | United States |
| Content delivery network provider | Web traffic routing, edge caching, DDoS protection | IP address, request metadata | Global edge network |
| Transactional email provider | Delivery of account and receipt emails | Email address, name | United States |
| Payment processor | Payment processing and billing | Email, purchase metadata | United States / Ireland |
| Banking and treasury services provider | Company payouts (no candidate data shared) | None of your personal data | Singapore / United States |
If you would like the full list of specific sub-processors with whom we maintain data processing agreements, contact us at support@plsfixthx.ai and we will revert back within 30 days.
We do not sell, rent, or share your personal data with third parties for marketing or advertising under any circumstances.
06 · Webcam Disclosure
During interviews, your webcam is on and displayed in a small picture-in-picture box on your own screen to simulate the pressure of a real video interview. This stream is local to your browser only. It is never uploaded, recorded, transmitted to us, or stored anywhere outside your own device. When you close the interview window, the stream ends.
You can disable webcam access at any time through your browser settings, though we recommend leaving it enabled for the most realistic preparation experience.
07 · International Data Transfers
Most of our processors are located in the United States. When we transfer your personal data outside the European Economic Area, United Kingdom, or Singapore, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and/or equivalent safeguards under Singapore PDPA Section 26, in combination with our processors' own commitments to data protection.
08 · Data Retention
| Data type | Retention period |
|---|---|
| Account data (email, name) | Until you delete your account |
| Session transcripts and tear sheets | Until you delete your account |
| Payment records | As required by applicable Singapore tax and accounting law (typically 5-7 years) |
| Support correspondence | Until your issue is resolved plus 2 years for dispute resolution and tax compliance |
| Technical logs | 90 days |
| Soft-deleted accounts | 30 days from deletion request, then permanently erased (see Section 10) |
Voice recordings are hosted by our voice AI infrastructure provider (Vapi) and are automatically deleted per their retention policy — typically within 14 days of each session. PlsFixThx.ai does not download, retain, or process copies of the audio recordings. Session transcripts are stored on our servers and are deleted along with your account within 30 days of account closure, per your right to erasure under GDPR and CCPA.
When required retention periods expire, we delete or fully anonymize the data.
09 · Cookies
We use only essential cookies required for the platform to function:
- Supabase authentication session tokens (so you stay logged in)
- Stripe payment processing session tokens (so checkout completes correctly)
These cookies are exempt from consent requirements under GDPR Recital 30. We do not currently use analytics, tracking, or marketing cookies. If we add analytics in the future, we will update this policy and add a cookie consent banner before any such cookies are set.
10 · Your Rights
Under GDPR and Singapore PDPA, you have the following rights regarding your personal data:
- Right of access: request a copy of all personal data we hold about you
- Right to rectification: correct any inaccurate or incomplete data
- Right to erasure ("right to be forgotten"): delete your account and all associated data
- Right to data portability: receive your data in a structured, machine-readable JSON format
- Right to restriction of processing: ask us to pause processing your data
- Right to object: object to processing based on legitimate interests
- Right to withdraw consent: where processing is based on consent, withdraw it at any time
- Right not to be subject to solely automated decisions: request human review of AI grading (Section 4)
- Right to lodge a complaint: complain to your local supervisory authority
To exercise any of these rights, email support@plsfixthx.ai with your request. We respond within 30 days as required by law.
If you delete your account, we will soft-delete it immediately (data hidden, you are signed out). After 30 days, we permanently erase all personal data including session transcripts and tear sheets; only minimal financial records are retained, anonymized, for accounting compliance.
11 · Where to Complain
If you believe we have not handled your data correctly, you can lodge a complaint:
- In Singapore: Personal Data Protection Commission (PDPC) — pdpc.gov.sg
- In the European Union: your national data protection authority (list at edpb.europa.eu/about-edpb/about-edpb/members_en)
- In the United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
You may also pursue judicial remedies. We hope you contact us first so we can address your concern directly.
12 · Data Security
We protect your data with industry-standard security measures including:
- Encryption at rest (Supabase Postgres AES-256) and in transit (TLS 1.2 or higher)
- Row-level security on all database tables
- Vetted sub-processors operating under standard data processing agreements
In the event of a data breach involving your personal data, we will notify you and the relevant supervisory authority within 72 hours where required by law.
13 · Children
PlsFixThx.ai is intended for users aged 18 or older. We do not knowingly collect or process data from anyone under 18. If you believe a child has provided us their data, please contact us immediately and we will delete it.
14 · Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. For material changes, we will notify you by email or via the platform at least 30 days before the change takes effect.
15 · Contact
Questions about this Privacy Policy or our data practices?
PFT Ventures Pte. Ltd.
Email: support@plsfixthx.ai
Singapore
QUESTIONS? LEGAL@PLSFIXTHX.AI