Privacy Policy

Last updated: June 2026

PraakTark Technologies ("PraakTark", "we", "us") respects your privacy. This single global policy explains what personal data we collect, how we use it, and the rights you have — whether you are in the European Economic Area (GDPR), the United Kingdom (UK GDPR), India (Digital Personal Data Protection Act 2023), the United States, or anywhere else. Region-specific rights are called out in their own sections below.

1. Who we are (Data Controller)

PraakTark Technologies is the data controller / data fiduciary for personal data processed through praaktark.com and related sub-domains. Contact: privacy@praaktark.com.

2. Data we collect

  • Account data: name, email, password hash, profile preferences.
  • Interview content: uploaded resumes, job descriptions, your spoken or typed answers, AI-generated feedback and scores.
  • Billing data: handled by Stripe; we store only customer IDs and subscription status, never card numbers.
  • Usage data: session timestamps, IP address, device, browser, pages viewed.
  • Device identifier: a random UUID stored in your browser's local storage (praak.deviceId) used exclusively to detect referral and credit abuse. It is not linked to your identity unless you sign in.
  • Signup IP address: your IP address at the time of account creation, used to detect and prevent duplicate account abuse. Stored permanently in your account record.
  • Cookies: see our Cookie Policy.

3. How we use your data

  • Provide and improve the interview prep and hiring services.
  • Generate AI feedback and candidate scores (processed via our AI gateway and OpenAI-class models).
  • Process payments (Stripe).
  • Send transactional emails (account, billing, security).
  • Detect fraud, abuse, and enforce our Terms.
  • Automated abuse prevention: we use your signup IP address and device identifier to automatically detect and hold credits on accounts suspected of multi-account abuse. You may contest this by emailing privacy@praaktark.com.
  • Comply with legal obligations.

4. Legal bases (GDPR / UK GDPR)

  • Contract: to deliver the service you signed up for.
  • Consent: non-essential cookies, marketing emails.
  • Legitimate interest: service security, fraud prevention, product analytics.
  • Legal obligation: tax, accounting, lawful requests.

5. Processors and sub-processors

We do not sell personal data. PraakTark relies on the following processors to run the Service. Where a processor in turn relies on its own sub-processors, we have noted this so the data chain is transparent.

Direct processors (we contract with these):

  • Lovable — application platform, hosting, managed backend (database, authentication, storage, edge functions), and AI gateway. Lovable in turn relies on the following sub-processors on our behalf: Supabase (database, auth, storage — EU/US regions), Cloudflare (hosting and CDN), and OpenAI / Anthropic / Google (AI inference for interview generation and scoring, accessed via the Lovable AI Gateway).
  • Stripe — payment processing.
  • Resend — transactional email delivery.

A current list of Lovable’s sub-processors is maintained by Lovable and available on request from privacy@praaktark.com. We are notified of material changes and will update this policy accordingly.

6. International transfers

Your data may be processed outside your country, including in the EU, UK, US, and India. For EU/UK transfers we rely on Standard Contractual Clauses. For transfers out of India we rely on the protections permitted under the DPDP Act 2023.

7. Data retention

  • Account data: kept while your account is active, deleted within 30 days of account closure.
  • Interview sessions and feedback: kept for as long as you keep them in your account.
  • Billing records: 7 years to comply with tax law.
  • Server logs: 90 days.

8. Security

Data in transit is encrypted with TLS. Database access is protected with Row-Level Security and least-privilege keys. Passwords are hashed. We follow standard industry practices but cannot guarantee absolute security.

9. Your rights — GDPR / UK GDPR (EEA & UK)

You have the right to access, rectify, erase, restrict, port, and object to processing. You may withdraw consent at any time and lodge a complaint with your supervisory authority. Email privacy@praaktark.com to exercise any right; we respond within 30 days.

10. Your rights — DPDP Act 2023 (India)

You have the right to access, correct, and erase your personal data, the right to nominate someone to exercise rights on your behalf, and the right to grievance redressal. Our Data Protection Officer can be reached at privacy@praaktark.com. If unresolved you may approach the Data Protection Board of India. We acknowledge all grievances within 72 hours and resolve them within 30 days, as required under the DPDP Act 2023.

11. Your rights — US (CCPA / CPRA and others)

California residents have the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information. We do not sell personal information. Submit requests to privacy@praaktark.com.

PraakTark does not sell or share personal information for cross-context behavioral advertising as defined under CCPA/CPRA. If this changes we will notify you and provide an opt-out mechanism. To submit a "Do Not Sell or Share" request regardless, email privacy@praaktark.com.

12. Children

PraakTark is not directed to children under 16 (EU) or 18 (India). We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

13. Changes to this policy

We will post material changes here and, where required, notify you by email. The "Last updated" date above always reflects the current version.

14. Contact

Privacy questions, requests, or complaints: privacy@praaktark.com.

15. Automated decisions

AI-conducted interviews (hiring use case).

When an employer uses PraakTark to interview you, our AI conducts the interview, transcribes it, and produces a structured summary with scores against the employer's rubric. These outputs are decision-support only. PraakTark does not shortlist, reject, or hire candidates automatically — the final decision is always made by a human recruiter or hiring manager employed by the company that invited you. You are told before the interview begins that you are speaking with an AI and that the session is recorded and transcribed.

You may request a copy of the transcript, scores, and summary generated about you, ask for a human review of any adverse decision, or contest the outcome by contacting the employer directly, or by writing to privacy@praaktark.com and we will route your request.

Abuse detection (credits).

When our systems detect possible multi-account abuse (based on IP address velocity), credits may be held automatically without human review. This decision may have a significant effect on your use of the service. You have the right to contest this decision by contacting privacy@praaktark.com, where a human will review and respond within 30 days.

For EU/EEA users: these rights are provided under GDPR Article 22, and PraakTark's use of AI in recruitment falls under the EU AI Act's high-risk system regime (Annex III), with transparency, human oversight, and record-keeping obligations honoured by design.

For India users: these rights are provided under DPDP Act 2023 Section 13.