Candidate privacy notice

You were invited to an AI screening interview by an employer that uses InterviewStack. This page explains, in plain terms, what happens to your information. The employer is the data controller; InterviewStack processes the data on their behalf.

Last updated 9 September 2026.

What we collect

• From the employer: your name and email address, so we can issue your personal interview link.
• During the interview: your spoken answers and their written transcript; typed answers, code and drawings if you use the editor or whiteboard; a recording of your screen and audio when the employer turns proctoring on; your camera video when it is on.
• Session events: when you switch tabs, leave the window, exit full screen, use the clipboard, stop answering, pause for a long time, or close or reload the page, with timestamps; how much of the interview the screen and camera recordings covered, including when the camera was turned off; whether your connection or browser changed during the interview, derived from a hashed form of your IP address and your browser type (the address itself is not stored). These are shown to the employer as context. They are never used to reject you automatically.
• Technical data: IP address, browser and device type, used for security, to keep the interview running, and to derive the connection and browser consistency signal above. The hashed form is deleted with the rest of your data.

Why

To run the interview, to produce a written assessment for the employer, to let the employer review the recording and transcript, and to detect misuse of the service. The AI interviewer conducts the conversation and writes an assessment; a person at the employer reads it and makes every decision. Nothing is decided automatically.

What the AI does and does not do

The assessment looks at how well your answers address the objectives set for the interview, whether they show the depth expected for the role's level, your technical proficiency or relevant experience depending on the interview type, and how clearly you reason and communicate. It does not analyse your face, expressions, tone of voice or emotions, does not infer characteristics such as age, ethnicity or health, and does not label answers as written by AI. The full statement of what is scored and how is in how the assessment works.

Who sees it

The recruiters at the employer who set up the interview, and anyone they share a read-only review link with (for example a hiring manager). Our service providers process the data only to provide the service; they are listed on the subprocessors page. We do not sell candidate data and do not use it to train AI models.

How long

The employer chooses a retention period, shown on your invitation page (180 days by default). When it ends, your name, email, recording, transcript and written assessment are removed automatically; the employer keeps the numeric score, its own decision and notes, and the session-event timeline, no longer linked to your name. Unused invitation links expire on the date shown on the invitation.

Your rights

• Deletion: ask the employer, or email privacy@interviewstack.io. Deletion is completed within 30 days of the request; copies in our providers' rolling backups expire on their own schedule afterwards.
• Access and correction: you may ask the employer for a copy of your recording, transcript and assessment, and to correct inaccurate personal data.
• Human review: a person at the employer already makes the decision; you may ask them to reconsider and to explain what was assessed.
• Accommodations: see accessibility and accommodations. Asking never counts against you.

If you are in the EU, UK or a jurisdiction with similar rights, the employer is responsible for handling your request as controller; we assist them and will act on deletion requests sent to us directly.

Where the data lives

On servers in North America operated by our providers: the application and database in the United States, and recordings in Cloudflare's Western North America storage region. The code editor's software files load from a public content delivery network (jsDelivr), which sees your IP address and browser type only. Transfers from the EU and UK rely on the EU-US Data Privacy Framework and standard contractual clauses, as set out in our data processing agreement.

Contact

Questions about this notice: privacy@interviewstack.io. Questions about the job or the process: the recruiter named on your invitation.