How we handle your data
Interview practice involves sensitive material: your CV, your voice, your performance. This page explains plainly where that data goes, who processes it, and what control you keep. Questions your security team can't answer here, we'll answer directly: support@workzoai.com.
Where your data lives
Account data, interview history, and parsed CV profiles are stored in Supabase (PostgreSQL) with row-level security, so each user can only access their own records. Payments are handled entirely by Stripe, we never see or store card numbers.
Voice and interview data
Voice interviews are processed in real time to power the conversation. Transcripts are stored with your interview history so you can review feedback. CV files you upload are parsed into a structured profile; the profile drives your interviews and can be replaced by uploading a new CV at any time.
AI processing
Interview questions and feedback are generated by AI models via the subprocessors listed below. CV and interview content is sent to these providers only to run your sessions, we do not sell data, and we do not use your CV to train our own models.
Deletion and your rights
You can request deletion of your account and all associated data at any time via the Delete My Data page or by emailing support@workzoai.com. Under GDPR you also have the right to access, correct, and export your data.
Access control
Production access is limited to the founder. Administrative endpoints are authenticated, partner analytics use scoped, signed access keys, and internal tooling is not exposed in production.
For institutions
We are a young company and honest about our maturity: we do not yet hold SOC 2 or ISO 27001 certification. We are happy to complete your security questionnaire, sign a data processing agreement (DPA/AVV), and walk your DPO through our data flows before any pilot.
Who processes data on our behalf
Each provider receives only the data required for its purpose. This list is kept current; if it changes, this page changes.
Need a signed data processing agreement (DPA/AVV), a subprocessor notification commitment, or a completed security questionnaire for procurement? Email support@workzoai.com , turnaround is a few business days, not weeks.