1. Introduction

Welcome to ZOBHE ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our PM interview preparation tool.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign in with Google OAuth, we collect your email address, name, and profile picture.
• Interview Questions: Questions you submit to generate practice answers (collected for both authenticated and anonymous users).
• Company Selection: The companies you select for interview preparation (collected for both authenticated and anonymous users).

2.2 Automatically Collected Information

• Usage Data: Timestamps of when you create questions and generate answers (collected for both authenticated and anonymous users).
• Session Information: Authentication session data to keep you logged in (only for authenticated users).
• Device Information: Browser type, device type, and IP address (through our hosting provider).

2.3 Anonymous Usage Data

We collect questions, answers, and company selections from both authenticated and anonymous users to understand how our service is being used and to improve the user experience. Anonymous usage data is not linked to any personally identifiable information. If you later create an account, your previous anonymous questions will not be automatically associated with your account.

3. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Generate AI-powered interview answers using OpenAI's GPT-4 model
• Store your question history for future reference (authenticated users only)
• Screen submitted questions for harmful content using automated moderation
• Collect anonymous usage statistics to understand how the service is being used
• Authenticate your account and manage sessions (authenticated users only)
• Improve our service and user experience
• Communicate with you about service updates or issues (authenticated users only)

4. Third-Party Services

4.1 Google OAuth

We use Google OAuth for authentication. When you sign in with Google, you are also subject to Google's Privacy Policy.

4.2 OpenAI

Your questions and our generated answers are processed using OpenAI's GPT-4 API. OpenAI's data usage policy applies to this processing. As of our last update, OpenAI does not use data submitted via their API to train their models. Please refer to OpenAI's Privacy Policy for more information.

4.3 Content Moderation

To maintain a safe and respectful environment, we use OpenAI's Moderation API to automatically screen questions for harmful content including profanity, hate speech, violence, harassment, self-harm content, and sexually explicit material. Questions flagged by the moderation system are blocked and not processed. We may log moderation violations (without personally identifiable information for anonymous users) to identify abuse patterns and improve our service.

4.4 Vercel (Hosting & Database)

Our application and database are hosted on Vercel's infrastructure. Vercel may collect certain technical information as part of hosting our service. See Vercel's Privacy Policy.

5. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Vercel's servers. We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted connections (HTTPS)
• Secure authentication with NextAuth.js
• Database access controls
• Regular security updates

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Your Rights and Choices

You have the right to:

• Access: Request access to your personal data
• Delete: Delete individual questions from your history or request complete account deletion
• Correct: Update your profile information through your Google account
• Export: Request a copy of your data in a portable format
• Withdraw Consent: Sign out and stop using the service at any time

To exercise these rights, please contact us at the email address provided in the Contact section.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. You may delete individual questions at any time through the interface. If you wish to delete your entire account and all associated data, please contact us.

8. Children's Privacy

Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using our service, you consent to such transfers.

10. Cookies and Tracking

We use essential cookies to maintain your login session. These cookies are necessary for the service to function and cannot be disabled. We do not use tracking or advertising cookies.

The cookies we use include:

• Session Cookies: To keep you authenticated (NextAuth.js)
• CSRF Tokens: To protect against cross-site request forgery

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. Your continued use of the service after any modifications indicates your acceptance of the updated Privacy Policy.

12. AI-Generated Content Disclaimer

All interview answers generated by our service are created using artificial intelligence and are for educational purposes only. The AI may produce inaccurate, incomplete, or inappropriate responses. We recommend that you:

• Review and verify all AI-generated content
• Use the answers as a starting point for your own preparation
• Not rely solely on AI-generated answers for actual interviews

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our Contact page.