Candidate privacy notice

You were invited to an AI screening interview by an employer that uses InterviewStack. This page explains, in plain terms, what happens to your information. The employer is the data controller; InterviewStack processes the data on their behalf.

Last updated 20 September 2026.

What we collect

• From the employer: your name and email address, so we can issue your personal interview link.
• During the interview: your spoken answers and their written transcript; typed answers, code and drawings if you use the editor or whiteboard; a recording of your screen and audio when the employer turns proctoring on; your camera video when it is on.
• Session events: when you switch tabs, leave the window, exit full screen, use the clipboard, stop answering, pause for a long time, or close or reload the page, with timestamps; how much of the interview the screen and camera recordings covered, including when the camera was turned off; whether your connection or browser changed during the interview, derived from a hashed form of your IP address and your browser type (the address itself is not stored). These are shown to the employer as context. They are never used to reject you automatically.
• Technical data: IP address, browser and device type, used for security, to keep the interview running, and to derive the connection and browser consistency signal above. The hashed form is deleted with the rest of your data.
• At the equipment check: when the employer records your screen, a test clip of your screen lasting a few seconds is uploaded to confirm that recording works. It is deleted as soon as it has been checked, and within a day at the latest. Nobody sees it, and it is never part of what the employer reviews. The camera preview on that page is not recorded, and no recording of your screen or camera is made during the practice run. What you say or type in the practice run is kept as text with your interview data until that is deleted; nobody reviews it.
• Kept in your browser: a session cookie that keeps your interview link signed in for 24 hours, and a few small settings the interview page needs to run, such as whether you chose to continue without your camera. They are used only to run your interview, never for advertising or tracking, and the camera setting is removed when you submit.

Why

To run the interview, to produce a written assessment for the employer, to let the employer review the recording and transcript, and to detect misuse of the service. The AI interviewer conducts the conversation and writes an assessment; a person at the employer reads it and makes every decision. Nothing is decided automatically.

What the AI does and does not do

The assessment looks at how well your answers address the objectives set for the interview, whether they show the depth expected for the role's level, your technical proficiency, relevant experience or analysis of a case, depending on the interview type, and how clearly you reason and communicate. It does not analyse your face, expressions, tone of voice or emotions, does not infer characteristics such as age, ethnicity or health, and does not label answers as written by AI. The full statement of what is scored and how is in how the assessment works.

Who sees it

The recruiters at the employer who set up the interview, and anyone they share a read-only review link with (for example a hiring manager). Our service providers process the data only to provide the service; they are listed on the subprocessors page. We do not sell candidate data and do not use it to train AI models.

How long

The employer chooses a retention period, shown on your invitation page (180 days by default). When it ends, your name, email, recording, transcript and written assessment are removed automatically; the employer keeps the numeric score, its own decision and notes, and the session-event timeline, no longer linked to your name. Unused invitation links expire on the date shown on the invitation.

Your rights

• Deletion: ask the employer, through the recruiter named on your invitation. Deletion is completed within 30 days of the request; copies in our providers' rolling backups expire on their own schedule afterwards.
• Access and correction: you may ask the employer for a copy of your recording, transcript and assessment, and to correct inaccurate personal data.
• Human review: a person at the employer already makes the decision; you may ask them to reconsider and to explain what was assessed.
• Accommodations: see accessibility and accommodations. Asking never counts against you.

If you are in the EU, UK or a jurisdiction with similar rights, the employer is responsible for handling your request as controller, and we carry it out on their instruction. Send every request to the employer.

Where the data lives

On servers in North America operated by our providers: the application and database in the United States, and recordings in Cloudflare's Western North America storage region. The code editor's software files load from a public content delivery network (jsDelivr), which sees your IP address and browser type only. Transfers from the EU and UK rely on the EU-US Data Privacy Framework and standard contractual clauses, as set out in our data processing agreement.

Contact

Questions about this notice, your data, the job or the process: the recruiter named on your invitation. Their address is on the invitation page and in the invitation email.