Privacy Policy

Assessmentr ("Assessmentr", "we", "us") provides a voice-first diagnostic that helps software engineers find gaps in their own understanding. This policy explains what personal data we collect when you use Assessmentr, why we collect it, who we share it with, and the rights you have over it.

Assessmentr is a self-directed learning tool. It is not used by employers to screen or evaluate candidates, and no third party receives your results unless you explicitly create and share a link to them.

1. Data we collect

• Account data. Email address and authentication identifiers, handled by our authentication provider, Supabase. If you sign up with Google, Supabase receives the identifiers Google shares as part of that sign-in.
• Voice and transcript data. When you run a voice diagnostic, your microphone audio is streamed to our voice infrastructure (LiveKit) and converted to text (Deepgram). We store the resulting transcript and the evidence and gap-map data derived from it against your account. We do not retain a persistent audio recording beyond what is needed to produce the transcript for that session.
• Diagnostic and evidence data. Your answers, the concepts they relate to, and the evidence-backed gap map generated from them.
• Billing data. If you subscribe to a paid plan, payment card details are collected and processed directly by our payment processor, Stripe. We do not store your full card number.
• Usage and device data. Session identifiers, connection health, and product-usage events (for example, whether a diagnostic connected successfully). Instrumentation events never contain your raw answer content or audio unless you have separately opted into debug diagnostics.

2. Why we process your data

• To create and operate your account, and to run the diagnostic you request.
• To generate your evidence-backed gap map and keep it attached to your account across sessions.
• To process payment for paid plans and to prevent abuse of free diagnostic credit.
• To maintain and improve the reliability of the voice and diagnostic pipeline.
• To communicate with you about your account, billing, and material changes to the product or this policy.

3. Sub-processors

We share the minimum data necessary with the following processors to operate Assessmentr:

• Supabase — account authentication and database hosting.
• LiveKit — real-time voice transport during a diagnostic session.
• Deepgram — speech-to-text transcription of your diagnostic answers.
• Cartesia — text-to-speech for the diagnostic's spoken questions.
• Google Cloud (Vertex AI / Gemini) — language-model evaluation of your transcribed answers to produce evidence and gap-map output.
• Stripe — payment processing for paid plans.
• Google Cloud Run — application hosting.

Each of these providers processes data under their own privacy terms and only for the purpose of providing their service to Assessmentr.

4. Data retention

We keep account, transcript, evidence, and gap-map data for as long as your account is active, so your diagnostic history and gap map remain available to you across sessions. You can delete your account yourself at any time from Settings (see Section 6). Doing so signs you out immediately, removes your sign-in account, and erases your diagnostic data.

Three categories are not erased by that action:

• Payment, subscription, and coupon records are retained with your identity removed from them, because we are required to keep transaction records for tax and accounting purposes.
• Payment-processor records held by Stripe remain subject to Stripe's own retention obligations.
• Encrypted database backups and server logs age out on their own retention schedules, typically within 30 days, and are not queried in normal operation.

5. International data transfers

Assessmentr and its sub-processors operate infrastructure in the United States. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with data-transfer restrictions, your data is transferred to and processed in the United States on the basis of Standard Contractual Clauses or an equivalent lawful transfer mechanism offered by each processor listed in Section 3.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Export your data in a portable format.
• Delete your account and associated personal data ("right to erasure").
• Object to, or request that we restrict, certain processing.
• If you are a California resident, opt out of the sale or sharing of personal information — Assessmentr does not sell personal information, and voice data is treated as sensitive personal information under the CCPA/CPRA and is never used for advertising.

You can exercise the right to erasure yourself, without contacting us. Go to Settings, choose "Delete my account", and confirm by typing your own email address. Your sign-in account is removed immediately and you are signed out; the rest of your data — every diagnostic session and transcript, your answers, evidence, gap map, goal, self-reports, share links, and usage history — is erased shortly afterwards. This is permanent, there is no recovery, and there is no export step afterwards, so export anything you want to keep first. Section 4 lists the three categories that are not erased.

For any other right — access, correction, export, restriction, or objection — email support@assessmentr.com from the email address on your account. We will confirm the request and complete it within 30 days.

7. Children's privacy

Assessmentr is not directed to, and is not intended for use by, anyone under 16 years of age. We do not knowingly collect personal data from children under 16.

8. AI-generated output

Your gap map, evidence, and follow-up questions are produced with the assistance of large-language-model evaluation of your transcribed answers (see Section 3). This output is diagnostic in nature — it identifies possible gaps in your understanding — and is not a certification, score, or employment decision, and is never shared with a third party (such as an employer) without your explicit action to create a share link.

9. Security

We rely on our infrastructure providers' security controls (encryption in transit, access controls, and audited hosting) and restrict internal access to personal data to what is necessary to operate the product. No system is completely secure, and we cannot guarantee absolute security of information transmitted to us.

10. Changes to this policy

We will update the "Last updated" date above when this policy changes, and will notify you by email of any change that materially affects your rights.

11. Contact

Questions about this policy or how your data is handled: support@assessmentr.com.