Privacy Policy

At DarkInterview, operated by Fluey AI, Inc. ("we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using DarkInterview, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

When you create an account through Google OAuth, we collect:

• Email address: Used for account identification and communication
• Name: Displayed in your account profile
• Profile picture: Retrieved from your Google account
• Google account ID: Used to link your Google account to our Service

Note: We do not store your passwords. Authentication is handled entirely through Google OAuth, and we never have access to your Google password.

1.2 Payment Information

When you subscribe to our Service, we collect and store:

• Subscription status: Active, expired, or cancelled
• Subscription dates: Start and end dates of your subscription
• Payment transaction ID: Reference ID from Stripe for your payment
• Amount paid: The subscription amount you paid

Important: We do not store your credit card information, billing address, or other payment details. All payment processing is handled securely by Stripe, our third-party payment processor.

1.3 Authentication Tokens

To maintain your logged-in session and provide seamless access, we store:

• Session tokens: Temporary tokens that keep you logged in
• OAuth tokens: Access and refresh tokens from Google for authentication
• Token expiration data: When your session tokens expire

1.4 Usage Information

We automatically collect certain information when you use our Service:

• IP address: Your device's internet protocol address (hashed using SHA-256 before storage)
• Browser type and version: The web browser you use to access our Service (user agent string)
• Device information: Type of device, operating system, and screen resolution
• Access times: When you access our Service
• Pages viewed: Basic pageview and performance metrics collected in aggregate via Vercel Analytics
• Referral tracking: Visitor IDs (UUID generated per unique visitor), referral sources from URL parameters (ref, utm_source, source) or HTTP Referer header, and linking of visitor IDs to user accounts upon signup
• Rate limiting data: User ID and execution counters stored in Redis for code execution rate limiting

1.5 User-Submitted Content

We collect and store various types of content you create or submit:

• Interview questions: Questions and experiences you report from actual interviews, along with metadata such as submission date and your user ID
• Code practice submissions: Code you write while practicing coding questions, stored per question and per programming language (JavaScript, Python, Java, C++, Go, TypeScript, C#, Ruby, Rust, Swift) for your personal practice and progress tracking
• System design drawings: Diagrams you create using our Excalidraw integration, including shapes, connections, text, embedded files/images, and canvas state (zoom, pan, selected tools), stored in JSONB format
• Company requests: Requests for us to add coverage for specific companies, including company name, reason (optional, max 1000 characters), and priority level
• Question reports: Reports of missing questions, including company ID/name, question title/details, and admin notes

Important: Code practice submissions and system design drawings are stored solely for your personal use. We do not use, publish, or share this content with anyone. These are treated as private data accessible only to you.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide Our Service

• Create and manage your account
• Authenticate your identity and maintain your login session
• Process your subscription payments
• Provide access to premium content based on your subscription status
• Display your profile information (name, profile picture)

2.2 To Improve Our Service

• Analyze usage patterns to understand how users interact with our Service
• Identify and fix technical issues
• Develop new features and improve existing functionality
• Monitor and analyze trends, usage, and activities

2.3 To Communicate With You

• Send you important updates about your account or subscription
• Notify you of changes to our Terms of Service or Privacy Policy
• Respond to your inquiries and support requests
• Send you subscription renewal reminders (if applicable)

2.4 For Security and Legal Compliance

• Detect, prevent, and address fraud, security issues, or technical problems
• Enforce our Terms of Service
• Comply with legal obligations and respond to legal requests
• Protect the rights, property, or safety of DarkInterview and Fluey AI, Inc., our users, or others

3. Cookies and Tracking Technologies

3.1 What Are Cookies

Cookies are small data files stored on your device when you visit our Service. We use cookies and similar tracking technologies (including localStorage) to track activity on our Service, store certain information, and improve your experience. When you first visit our website, we present you with a cookie consent banner that informs you about our use of cookies and tracking technologies.

3.2 Cookie Consent Banner

We respect your right to privacy and control over your data. When you first visit DarkInterview, you will see a cookie consent banner with information about our use of cookies.

Important Note: Our analytics cookies provided by Vercel (Analytics and Speed Insights) are currently active by default as we consider them necessary for fraud prevention, security, and service operation. By continuing to use our Service, you consent to this limited analytics tracking as described in this Privacy Policy.

Your cookie acknowledgment is stored in your browser's localStorage and will be remembered for future visits. You will not see the banner again unless you clear your browser data. You may opt out of analytics tracking by:

• Using browser settings to block third-party cookies
• Contacting us at contact@fluey.ai to request exclusion from analytics

3.3 Types of Cookies We Use

We categorize cookies into three types based on their purpose and necessity:

3.4 Managing Your Cookie Preferences

You have full control over which cookies we use. Here's how to manage your preferences:

3.5 localStorage and Data Storage

In addition to cookies, we use your browser's localStorage to store preferences and practice data:

• Cookie notice acknowledgment: Records that you have seen the cookie notice (stored as "cookie-notice-acknowledged")
• WebView warning dismissal: Remembers if you closed the in-app browser warning (stored as "webview-warning-dismissed")
• Code practice submissions: Your practice code stored locally with keys like "code_{questionId}_{languageId}" for instant access and auto-save functionality
• System design drawings: Your Excalidraw drawings stored locally with keys like "system_design_{questionId}" for instant loading and auto-save
• Announcement dismissals: Records which announcements you've dismissed (stored as "announcement-dismissed-{id}")

localStorage data remains on your device until you clear it manually or we programmatically remove it. This data is only accessible by our website and cannot be read by other websites. Code and drawing data stored in localStorage is also synced to our database when you're logged in, so you can access your practice work across devices.

3.6 Third-Party Analytics Services

We rely solely on Vercel Analytics and Vercel Speed Insights to understand aggregated product usage and performance. These services collect anonymous or pseudonymous metrics on our behalf so we can monitor site reliability and improve DarkInterview.

For details on how Vercel processes analytics data, please review Vercel's Privacy Policy. You can opt out by blocking analytics cookies or contacting us at contact@fluey.ai.

3.7 Code Execution Service

Our code practice feature uses Judge0 (via RapidAPI) to execute your code submissions. When you run code:

• Data sent to Judge0: Your source code, selected programming language, and execution parameters
• Processing: Judge0 compiles and executes your code in a secure, isolated environment
• Data returned: Execution results (output, errors, runtime, memory usage)
• Data retention by Judge0: We do not control Judge0's data retention; please see their privacy policy
• Rate limiting: We track your user ID in Redis (Upstash) to enforce rate limits (5 executions per minute; 50 per day for free users, unlimited for subscribers)

For more information about Judge0's data practices, please review their privacy policy at judge0.com.

3.8 Third-Party Cookies

Our third-party service providers may also set cookies when you use our Service:

• Google OAuth: Sets cookies for authentication purposes (subject to Google's Cookie Policy)
• Stripe: May set cookies during payment processing (subject to Stripe's Cookie Policy)
• Vercel: May set cookies for hosting and performance optimization

We do not have control over these third-party cookies. Please refer to their respective privacy policies for more information.

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Google: For authentication via Google OAuth (subject to Google's Privacy Policy)
• Stripe: For payment processing (subject to Stripe's Privacy Policy)
• Vercel: For hosting, infrastructure services, analytics (Vercel Analytics), and performance monitoring (Vercel Speed Insights)
• Judge0 / RapidAPI: For code execution in our code practice feature (subject to Judge0's Privacy Policy and RapidAPI's Privacy Policy)
• Upstash Redis: For rate limiting data storage via Vercel KV (subject to Upstash's Privacy Policy)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify. Vercel Analytics and Speed Insights process pageview and performance data to help us understand how users interact with our Service. Judge0 receives and executes your code submissions when you use the code practice feature.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users or the public
• Protect against legal liability

4.3 Business Transfers

If DarkInterview or Fluey AI, Inc. is involved in a merger, acquisition, or sale of assets, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

4.4 Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you. For example, we may share statistics about Service usage or demographic information with partners or for research purposes.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: Data is encrypted in transit using SSL/TLS
• Secure authentication: OAuth 2.0 protocol for secure login
• Access controls: Limited employee access to personal information
• Regular security audits: Periodic review of security practices
• Secure infrastructure: Hosted on secure cloud infrastructure (Vercel)

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

6.1 Active Accounts

While your account is active, we retain all information associated with your account to provide you with our Service.

6.2 Account Deletion

If you delete your account, we will delete or anonymize your personal information within 30 days, except for:

• Transaction records required for financial and legal compliance (retained for 7 years)
• Information necessary to resolve disputes or enforce our agreements
• Information we are legally required to retain
• Anonymized or aggregated data that cannot identify you

What gets deleted: Your code practice submissions, system design drawings, personal account information (name, email, profile picture), authentication tokens, and session data will be permanently deleted.

What may be retained: Company requests and question reports you submitted may be retained in anonymized form (with your user ID removed but the content preserved) to help us improve our question coverage. If you want these completely removed, please contact us at contact@fluey.ai before deleting your account.

6.3 Analytics Data

Analytics information is collected and stored by Vercel Analytics and Vercel Speed Insights. We do not copy this raw data into our systems; instead, we access the aggregated dashboards that Vercel provides.

• Dashboard availability: Vercel surfaces up to 24 months of historical reports.
• Aggregated summaries: We may export anonymized trends (e.g., total visits per month) for long-term business planning.

Because this data remains aggregated and pseudonymous, it cannot be tied back to your DarkInterview account. You can limit analytics collection at any time by blocking analytics cookies or contacting us.

6.4 Backup Data

Backup copies of your data may persist in our systems for up to 90 days after deletion for disaster recovery purposes.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You have the right to request access to the personal information we hold about you and receive a copy of that information in a portable format.

7.2 Correction

You have the right to request correction of inaccurate or incomplete personal information. You can update most of your information directly through your account settings.

7.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions (such as when we need to retain information for legal compliance).

7.4 Objection and Restriction

You have the right to object to or request restriction of certain processing of your personal information.

7.5 Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

7.6 How to Exercise Your Rights

To exercise any of these rights, please contact us at contact@fluey.ai. We will respond to your request within 30 days. You will not have to pay a fee to access your personal information or exercise any other rights. However, we may charge a reasonable fee or refuse to comply with your request if it is clearly unfounded, repetitive, or excessive.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

8.1 Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected about you, as well as the categories of sources, purposes for collection, and third parties with whom we share information.

8.2 Right to Delete

You have the right to request deletion of personal information we collected from you, subject to certain exceptions.

8.3 Right to Opt-Out of Sale

We do not sell your personal information. We have not sold personal information in the past 12 months and do not have plans to sell personal information.

8.4 Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising your CCPA rights.

9. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

9.1 Legal Basis for Processing

We process your personal information based on:

• Contractual necessity: To provide the Service you subscribed to
• Legitimate interests: To improve our Service and prevent fraud
• Consent: Where you have given explicit consent
• Legal obligations: To comply with applicable laws

9.2 International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers in compliance with GDPR.

9.3 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your country if you believe we have not complied with data protection laws.

10. Children's Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

11. Third-Party Links and Services

Our Service may contain links to third-party websites, applications, or services that are not operated by us. This includes:

• Google (for authentication)
• Stripe (for payment processing)
• Judge0 (for code execution)
• Upstash (for rate limiting via Vercel KV)
• Links to company websites referenced in interview questions

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of every site you visit.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this Privacy Policy
• Sending you an email notification for significant changes (to the email address associated with your account)

Changes become effective immediately upon posting, unless otherwise stated. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically for any changes.

13. Do Not Track Signals

Some web browsers incorporate a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Our Service does not currently respond to DNT signals or similar mechanisms.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Company: Fluey AI, Inc.
Email: contact@fluey.ai
Website: https://darkinterview.com

We will respond to all requests, inquiries, or concerns within 30 days.

15. Data Protection Officer

For users in the European Economic Area, we have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. If you wish to contact our DPO, please use the contact information above and reference "Data Protection Officer" in your inquiry.