Privacy Policy

1.1Introduction. Prepl Incorporated ("Prepl," "we," "our," and/or "us") values the privacy of individuals who use our website, mobile applications, and software-as-a-service recruiting platforms available at www.prepl.me (the "Services"). This Privacy Policy describes how we collect, use, process, and share personal data collected through your interactions with our Services. By accessing or using our Services, you indicate that you have read, understood, and agree to the data collection and processing methodologies described in this Privacy Policy.

1.2Prepl's Role as Processor (B2B). This Privacy Policy does not apply to the extent that we process personal data in the capacity of a data processor or service provider on behalf of our B2B customers (such as employers, startup founders, accelerator cohorts, or technical recruiters utilizing our Autonomous Recruiting Engine). In those contexts, our processing of job applicant data is governed entirely by the enterprise agreements and data processing addenda (DPAs) executed with our B2B customers. The respective employer is the data controller, and their individual privacy policies apply to the processing of your personal data. We are not responsible for the privacy or security practices of our customers.

1.3Prepl's Role as Controller (B2C). Prepl acts as the data controller for personal data collected from individual candidates utilizing our "Practice Warmup Mode" or candidate growth tiers, website visitors, blog subscribers, and customers who purchase subscription seats directly on our platform.

2.1Candidate Profiles & Resume Ingestion. We collect information you submit during onboarding or profile setup. This includes your name, email address, physical address, phone number, employment history, education, LinkedIn profile URL, GitHub handle, and portfolios. If you upload documents (resumes, cover letters, transcripts, or portfolios), we ingest and parse the raw text, file metadata, and code structures contained therein.

2.2Audio & Video Recording Streams. When you engage in a live mock interview or official corporate screening, our platform captures and processes real-time audio and video feeds. We record your spoken replies, speech patterns, verbal cadences, and video frames to deliver speech transcription and behavioral telemetry.

2.3Vision Analytics & Biometric Telemetry. Our Vision Analytics engine (powered by local client-side MediaPipe) tracks facial posture, visual focus coordinates, and micro-expression composure signals. This mathematical tracking is executed locally in your browser. While we do not store raw biometric facial templates or execute identity-verification facial recognition, the parsed telemetry metrics (e.g., visual focus percentage, composure score, posture transitions) are transmitted to our servers to compile your Performance Dossier.

2.4Sandbox Challenge Logs. For technical tracks, we initialize isolated sandboxed coding environments. We collect all code input, keystroke timings, syntax corrections, compile logs, sandbox errors, and execution outputs generated during code challenges.

2.5Billing & Transactions. If you subscribe to our Candidate Premium or B2B Workspace tiers, we collect financial transaction metadata. Payments are processed securely via our third-party payment processor (Stripe). Prepl does not store or process raw credit card numbers or bank credentials directly; all billing operations comply with PCI-DSS guidelines.

3.1Device & Log Metadata. We automatically collect diagnostic telemetry when you access the Services. This includes your Internet Protocol (IP) address, geographic region, device model, operating system, web browser type and version, browser language, screen resolution, session durations, referring URLs, and system error log metrics.

3.2Cookies & Storage Technologies. We and our analytics partners utilize cookies, local storage tokens, and web beacons. These technologies manage persistent session authentications, track analytics parameters, and retain configuration states (e.g., custom interview track preferences). You may configure your web browser to disable or restrict cookies, but doing so may limit access to authenticated features.

5.1No Model Training on Private Data. Prepl enforces a strict data safety policy: We do not utilize your private interview recordings, audio files, transcribed text, resumes, parsed GitHub code portfolios, or sandboxed coding inputs to train or fine-tune our custom AI models or the foundational models of our third-party provider APIs (including Google Cloud Gemini API).

5.2Transient Inference Processing. Our multimodal recruiting features utilize Google Antigravity and Google Gemini APIs (including Gemini 3.5 Flash) for low-latency audio/video inference and text evaluations. Data transmitted to these API endpoints is processed transiently under enterprise confidentiality guidelines. Google Cloud does not retain or utilize these inputs to train its underlying public models.

6.1Corporate Employer Workspaces. If you submit an application or complete an interview screening via an employer's branded Prepl application link, all associated transcripts, video files, MediaPipe telemetry scores, and technical sandboxing grades are shared directly with the corporate workspace owners. These employers operate as independent data controllers.

6.2Service Providers & Sub-processors. We share information with trusted third-party sub-processors assisting with cloud infrastructure (Google Cloud Platform), database maintenance, authentication operations, billing (Stripe), and product performance analytics (PostHog).

6.3Corporate Transactions. We may disclose personal data to advisors, negotiators, or acquiring entities in connection with a merger, consolidation, acquisition, asset sale, or restructuring of Prepl INC.

6.4Legal Mandates & Safety. We may access, preserve, and disclose your personal data if required to do so under applicable law, regulation, judicial warrant, or governmental subpoena, or to protect the safety, properties, and fundamental rights of Prepl, our users, or the general public.

7.1Security Safeguards. We deploy industry-standard technical, organizational, and physical security measures. Video files and audio recordings are encrypted in transit using TLS 1.3 and at rest using AES-256 protocols. Keystroke logs, transcription indices, and user databases are isolated under strict access-control vectors.

7.2Retention Schedules. For candidate-controlled warmup accounts (B2C), we retain interview recordings and behavioral dossiers for up to twelve (12) months. Inactive recordings are automatically purged. If you delete your candidate profile or request closure of your account, all associated resumes, records, and telemetry will be purged from our active systems within thirty (30) days, except where retention is legally mandated.

8.1GDPR Compliance (EU & UK). If you reside in the European Economic Area (EEA) or United Kingdom, you have the right to: access your personal data; request rectification of inaccuracies; request deletion; restrict processing; object to processing; and request data portability. Our lawful bases for processing your data include contract execution, legitimate interests (improving platform security and services), and your explicit consent.

8.2CCPA & CPRA Compliance (California). If you are a California resident, you have the right to: know what personal data we collect, disclose, and sell; opt out of the sale or sharing of your personal data; request erasure; and be free from discrimination for exercising your rights. Prepl does not sell or share personal data to third parties for cross-context behavioral advertising.

8.3Canadian Privacy Law (PIPEDA & Provinces). We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. We obtain consent for data collections, limit processing to identified purposes, and appoint a Privacy Officer to handle compliance issues.

8.4How to Exercise These Rights. We do not yet offer automated in-app tools for data access, export, or deletion requests. To exercise any of the rights described above, please contact our Privacy Officer directly using the details in Section 9.3, and we will process your request manually within the timeframe required by applicable law.

9.1Third-Party Integrations. Our Services may contain links to external sites, platforms, or systems (such as corporate applicant tracking portals). We are not responsible for the privacy configurations or safety standards of third-party platforms.

9.2Changes to this Policy. We may amend this Privacy Policy from time to time. When amendments are finalized, we will update the "Last Updated" date, notify you via your registered email address, or display a prominent system notice within your dashboard.

9.3Contact Information. For questions, compliance requests, or inquiries regarding your data safety, please contact our Privacy Officer: support@prepl.me | Winnipeg, Manitoba, Canada.

9.4Effective Date. Effective Date: 12th day of July, 2026.