Datenschutzerklärung / Privacy Policy

1. Controller

The controllers for the processing of your personal data are Abhishek Jha and Shubhradip Sar, students at the University of Siegen, Germany, operating Sprich as an independent student project at sprich.pexilim.com. Sprich is not operated or endorsed by the University. Contact: sprich@pexilim.com.

2. Our principles

Data minimisation: we collect only what is needed to run your practice interviews.
Purpose limitation: your data is used to deliver and improve your practice. It is never sold, never used to advertise to you, and never used to train third-party AI models.
Candidate-side only: Sprich helps you prepare. It is not a hiring or selection tool; we do not share your results with employers or rank you for them. See our Data Ethics & Acceptable Use page.

3. What we process

Account: your name and email address, via Google sign-in.
Résumé: if you upload one, we extract and store the text content to personalise your questions. We do not keep the original file.
Interview data: the role and field you practice for, the transcript of your interview, and the feedback report, scores and competency profile we generate.
Voice: during an interview your microphone audio is sent for transcription and then discarded. We do not store audio recordings. We do not perform any facial, video or personality analysis. Sprich uses your words only.
Payment: handled by Stripe. We store only a customer reference and your plan status, never card details.
Usage & security: minimal technical logs to keep the service working and prevent abuse.

4. Legal bases

Performance of our contract with you (Art. 6(1)(b) GDPR) for running your account and interviews; your consent (Art. 6(1)(a) GDPR) for processing your microphone audio for transcription, which you give before each interview and may withdraw at any time; and our legitimate interest (Art. 6(1)(f) GDPR) in keeping the service secure and working.

5. Automated processing

Sprich generates your feedback and scores automatically. These are practice feedback only. They produce no legal or similarly significant effect on you (Art. 22 GDPR): no hiring decision is made, and no result is shared with any employer. Scoring is based on a transparent, published rubric and recognised frameworks (ESCO competencies, CEFR), and every score is tied to your own words so you can see why it was given.

6. Processors we use

We share data only with providers that help us run Sprich:

Supabase (database, authentication; EU-hosted) · Stripe (payments) · Google (sign-in, AI language models, speech) · Groq (speech-to-text and AI) · OpenRouter (AI language models) · Microsoft (speech synthesis) · Resend (transactional email) · Vercel (hosting). Each acts under a data processing agreement, and none is permitted to use your data to train its models.

7. International transfers

Some processors are located outside the EU/EEA (for example in the United States). Where data leaves the EU/EEA, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses used by these providers.

8. Security

Data is encrypted in transit (HTTPS) and at rest by our EU-hosted database, access is restricted with row-level security so you can only reach your own records, and API access is authenticated and rate-limited.

9. Retention

Account, interview and competency data is kept until you delete it or close your account. You can delete your interview history at any time from your profile, and delete your whole account (with an emailed confirmation step) from there too. Voice audio is never retained beyond transcription.

10. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing. You may withdraw consent at any time. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise any right, email sprich@pexilim.com or use the export/delete tools in your profile.

11. Cookies

We use only essential cookies to keep you signed in and remember your choices. We do not use advertising or third-party tracking cookies.

Last updated September 2026. We may update this policy as the product evolves; material changes will be reflected here.