Who we share your data with
These are the third-party services CredentialPrep uses to run the site. That's the entire list, nobody else sees your data beyond what's described for each one below.
Your transcript is sent to Anthropic's API to generate your evaluation report. Under Anthropic's commercial terms, they don't train their AI on customer inputs or outputs. See their terms→
If you upload a recording, a temporary link to the audio file is sent to AssemblyAI so it can turn the audio into a transcript. Audio is deleted from our storage within 24 hours. See their privacy policy→
Your account, transcripts, evaluations, and practice history are stored in a Supabase database. Encrypted at rest.
Your email address and name go to Loops so we can send account emails (signup confirmation, account changes) and product updates.
When your evaluation finishes, we email you the report through Resend. That email includes quotes from your session, the same ones shown in your report. Resend keeps a copy of that email, including its content, for 30 days while our account with them stays active. They restrict staff access to people with a business need and sign a standard data-processing agreement limiting how they can use it, but their published policy doesn't promise nobody there ever reads it. See their retention policy→
If you're on a paid plan, Stripe handles your card and billing info. We never see or store your card number.
In the United States, Google Analytics sees which pages you visit, and Google Ads sees whether a visit came from one of our ads and whether it led to a purchase, until you press Opt out. Everywhere else they load only if you press Accept on the cookie banner. If you opt out or press Decline, neither loads. See Google's privacy policy→
In the United States, Clarity shows us how people move around the site, including screen recordings of sessions, until you press Opt out. Everywhere else it loads only if you press Accept. If you opt out or press Decline, it does not load. See Microsoft's privacy statement→
In the United States, PostHog records which features you click, with your user ID and email attached if you are signed in, until you press Opt out. Everywhere else it loads only if you press Accept. It does not record keystrokes or the content of your sessions. If you opt out or press Decline, it does not load. See PostHog's privacy policy→
When something breaks, error details go to Sentry so we can fix it. On a small sample of sessions it also records a screen replay. This is not tied to the cookie banner. See Sentry's privacy policy→
The site runs on Netlify. They see request logs (IP, page visited, etc.) but not your transcript or evaluation content.
We delete your data from our servers one week after your evaluation is scored. The raw transcript you pasted or uploaded is gone after that week, unless you chose at upload to keep it. If you did, we store the full transcript until you delete it yourself, which you can do any time from your evaluation. Your client's permission for the evaluation does not cover that longer storage, so it is your own choice. Your report and scores are not affected either way. Your finished report stays, since that's how you keep and revisit your own evaluations. One exception: the copy of your report email that Resend (see above) keeps on their own servers follows their 30-day window, not ours.
We never read your transcripts. That's a promise about how I run this business, not a claim that it's technically impossible. If I ever needed to look at your data to help with a specific issue, I'd ask you first.