Back to homepage

Legal

Privacy Policy

Last updated: August 2026

1. Who we are

Greenroom ("we", "us", "our") is a finance interview preparation platform. Our registered address and data controller details are available on request at privacy@greenroomprep.live.

2. Data we collect

We collect: • Account data: email address, name, university, graduation year, target bank and role (provided during onboarding) • CV data: text extracted from CV uploads (stored securely, used only to generate your readiness score) • Usage data: session history, scores, XP, streak, answers to practice questions, interview feedback • Profile preferences: daily commitment time, interview dates, notification settings • Technical data: IP address, browser type, device type (via Supabase Auth and hosting infrastructure) We do not collect payment data directly — payments are handled by Stripe.

3. How we use your data

Your data is used to: • Provide and personalise the Greenroom service • Generate AI-powered interview feedback using the Anthropic Claude API • Calculate your readiness score and track progress over time • Send product updates and session reminders (you can unsubscribe at any time) • Improve the quality of our question bank and AI feedback We do not sell your personal data to third parties. We do not use your data to train AI models without explicit consent.

4. Third-party services

We use the following sub-processors: • Supabase (database and authentication) — hosted in the EU • Vercel (application hosting) — global edge network • Anthropic (AI API for interview questions, follow-ups and feedback) — your answers are sent to Anthropic's API to generate the interview and feedback, and are not used by Anthropic to train its models • ElevenLabs (voice interview mode, where used) — audio is processed to generate speech and transcripts for that session • Stripe (payment processing, once paid plans are live) — we never see or store your card details • Resend (transactional email) — account, confirmation and reminder emails only • Formspree (waitlist form) — email collection only • PostHog (product analytics) — see Section 8, Cookies & analytics, for what this covers • NewsAPI / RSS2JSON (news feed) — no personal data shared Some of these processors (Anthropic, ElevenLabs, Stripe) are US-based. Where personal data leaves the EU/EEA/UK, the transfer is covered by Standard Contractual Clauses or an equivalent safeguard under that processor's own data processing agreement.

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, all personal data is deleted within 30 days. Session transcripts and scores are retained for the lifetime of your account to support your learning progress. Anonymous sessions (started via "Enter Greenroom" without creating an account) are deleted automatically after 30 days of inactivity.

6. Your rights (GDPR)

If you are based in the EU/EEA/UK, you have the right to: • Access the personal data we hold about you • Correct inaccurate data • Delete your account and associated data • Export your data in machine-readable format • Object to processing or withdraw consent • Lodge a complaint with your local data protection authority To exercise any of these rights, email privacy@greenroomprep.live. We will respond within 30 days.

7. AI system use and the EU AI Act

Greenroom's interview questions, follow-ups and feedback are generated by an AI system (see Section 4). In line with the EU AI Act's transparency requirement for AI systems that interact with people (Article 50), we tell you plainly here and inside the product that you are interacting with an AI interviewer, not a human one. No decision made by Greenroom's AI has any legal or similarly significant effect on you within the meaning of GDPR Article 22: your readiness score and feedback are a self-training tool you use to prepare, and Greenroom does not make, and is not used by any bank or employer to make, a hiring or admission decision about you. We do not classify Greenroom as a "high-risk" AI system under Annex III of the AI Act, because it is not deployed to evaluate or screen real candidates on behalf of an employer. If this ever changes — for example, if an employer partner were to use Greenroom output as part of an actual hiring decision — we will update this policy and the relevant AI Act obligations (risk management, human oversight, logging) before that use goes live, not after.

8. Sharing with your university career service

If your university runs Greenroom as a career-service partner, you can choose to share your readiness with their career team. This sharing is strictly opt-in: it is off by default, and you enable it yourself from your profile. When enabled, your career service sees only: • Your name • Your readiness score and level, and the four sub-scores (behavioral, markets, core technicals, sector technicals) • Your path progress and last-active date • Your target role and bank They never see your CV text, interview transcripts, written feedback, email address, or any other personal data. You can withdraw consent at any time from the same profile toggle, which immediately removes you from their view. We record the time you gave consent for audit purposes.

9. Cookies & analytics

We use essential cookies for session authentication, set by Supabase Auth — these cannot be disabled without preventing you from logging in. We also use PostHog, a product analytics tool, to understand how the app and marketing site are used (e.g. which pages and features get clicked). This is not advertising and we do not sell or share this data with ad networks or use it to build advertising profiles. PostHog may set a non-essential identifier in your browser to distinguish sessions; we are working on a cookie-consent option for EU/EEA/UK visitors, and until it ships you can opt out by enabling "Do Not Track" or blocking analytics scripts in your browser.

10. Security

All data is encrypted in transit (HTTPS/TLS 1.3). Data at rest is encrypted by Supabase. Access to production data is restricted to authorised personnel. We use Row Level Security (RLS) policies to ensure users can only access their own data.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice. Continued use of Greenroom after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or requests: privacy@greenroomprep.live