Privacy Policy

Provia Career("Provia", "we", "us", "our") provides an interview-practice platform that lets users practice text, voice, and video interviews and receive feedback. The data controller for this service is [Legal company name to be confirmed by the business owner], [Registered company address to be confirmed by the business owner]. You can contact us at privacy@proviacareer.com for any privacy question or request.

This Policy applies to the Provia Career website, waitlist, and web application, and describes how we handle personal data of visitors, waitlist applicants, and registered users.

• Account data: your email address and authentication identifiers, created and managed through Supabase Auth (including magic-link sign-in).
• Profile and onboarding data: name, career goals, target role/level, and other answers you provide during onboarding or in Settings.
• Interview content: text transcripts, and, for voice and video practice, audio and video recordings and derived transcripts, along with AI-generated feedback, scores, and progress history.
• Uploaded documents: your CV/resume file and related metadata (file name, size, upload date), stored in a private storage location tied to your account.
• Consent and preference records: marketing, product-research, and optional AI data-use preferences you set in Data & Privacy Settings, and acknowledgements of legal documents.
• Waitlist data: email address and name submitted through the waitlist form, verified through a confirmation email before being added to the waitlist.
• Usage and device data: pages visited, interactions, approximate location (from IP address), browser/device type, and session identifiers, collected through analytics tools described in our Cookie Policy.

• To create and secure your account, authenticate you, and maintain your session.
• To operate the interview-practice service: running text/voice/video sessions, generating AI feedback, and saving your progress and history.
• To personalize interview questions and feedback based on your CV, onboarding answers, and target role.
• To maintain and improve the product, including troubleshooting, security monitoring, and understanding feature usage through analytics.
• To communicate with you about your account, service updates, and — only where you have opted in — marketing or research communications.
• To comply with legal obligations and enforce our Terms of Service.

Where applicable data-protection law requires a legal basis, we rely on: performance of a contract (providing the service you sign up for), our legitimate interests (securing and improving the product), your consent (for optional preferences such as marketing emails, product research, and optional AI data-use, which you can withdraw at any time in Data & Privacy Settings), and compliance with legal obligations.

We use essential cookies for authentication and, for analytics and product-improvement purposes, Google Analytics and PostHog (which may include usage analytics and session-replay features). See our Cookie Policy for full details and how to manage these preferences.

We do not sell your personal data. We share personal data only with:

• Service providers who process data on our behalf under contract, including Supabase (authentication, database, and file storage) and our analytics providers (Google Analytics, PostHog).
• Professional advisors, auditors, or authorities where required to comply with law, regulation, legal process, or enforceable government request.
• A successor entity in the event of a merger, acquisition, or sale of assets, subject to this Policy or a comparable one.

Our service providers may process and store data outside your country of residence, including outside Turkey and the European Economic Area. Where this occurs, we work with providers that offer appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) for that transfer. Provider and transfer details should be confirmed and kept current by the business owner.

• Authenticated application routes are protected by server-side middleware that validates the Supabase session.
• Database tables are protected by Row Level Security policies scoped to the authenticated user, so users can only access their own records.
• Uploaded CV files are stored in a private storage bucket under user-specific paths and are only ever accessed through short-lived signed URLs.
• Sensitive operations, such as account deletion, are performed only through server-side, service-role API routes, never directly from the browser.

We keep your account, profile, and interview data for as long as your account is active, so that you can access your history and progress. If you delete specific data (such as your CV or interview history) or delete your account from Data & Privacy Settings, that data is removed from our production systems, subject to any residual copies retained temporarily in backups or as required by law. Final retention periods for backups and logs should be defined and documented by the business owner.

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing. In this application you can, at any time from Data & Privacy Settings:

• Download a copy of your profile, settings, onboarding answers, interviews, messages, progress, and consent history.
• Delete your uploaded CV and its metadata.
• Delete your interview history, messages, and progress snapshots.
• Withdraw optional consents for marketing emails, product research, and optional AI data-use at any time.
• Sign out of all active sessions on all devices.
• Request full deletion of your account and associated data.

To exercise rights not covered by these in-app tools, contact us at privacy@proviacareer.com.

Provia Career is intended for individuals who are at least 16 years old (or the minimum age of digital consent in your jurisdiction, if higher). We do not knowingly collect personal data from children below that age. If you believe a child has provided us with personal data, please contact us so we can delete it.

We may update this Policy from time to time. Material changes will be reflected by an updated "Last updated" date, and, where required, we will seek renewed acknowledgement or consent.

Questions about this Policy or your personal data can be sent to privacy@proviacareer.com.