Who touches your data
These are the third-party services CredentialPrep uses to run the site. That's the entire list, nobody else sees your data beyond what's described for each one below.
Your transcript is sent to Anthropic's API to generate your evaluation report. Under Anthropic's commercial terms, they don't train their AI on customer inputs or outputs. See their terms→
Your account, transcripts, evaluations, and practice history are stored in a Supabase database. Encrypted at rest.
Your email address and name go to Loops so we can send account emails (signup confirmation, account changes) and product updates.
When your evaluation finishes, we email you the report through Resend. That email includes quotes from your session, the same ones shown in your report. Resend keeps a copy of that email, including its content, for 30 days while our account with them stays active. They restrict staff access to people with a business need and sign a standard data-processing agreement limiting how they can use it, but their published policy doesn't promise nobody there ever reads it. See their retention policy→
If you're on a paid plan, Stripe handles your card and billing info. We never see or store your card number.
The site runs on Netlify. They see request logs (IP, page visited, etc.) but not your transcript or evaluation content.
We delete your data from our servers one week after your evaluation is scored. The raw transcript you pasted or uploaded is gone after that week. Your finished report stays, since that's how you keep and revisit your own evaluations. One exception: the copy of your report email that Resend (see above) keeps on their own servers follows their 30-day window, not ours.
We never read your transcripts. That's a promise about how I run this business, not a claim that it's technically impossible. If I ever needed to look at your data to help with a specific issue, I'd ask you first.