Privacy

Privacy notice

What we collect when you use Deeplink Interview, why, how long we keep it, and what you can ask us to do.

Last updated 29 September 2026 · version P11-2026-09

Who we are

Deeplink Interview (interview.deeplink.uk) is run by the company below. We are responsible for your personal information (the “controller”).

  • Company: Deeplink [to be added], a company registered in England and Wales (company number [to be added]), whose registered office is at [to be added]
  • Registration number with the Information Commissioner’s Office (ICO): [to be added]
  • Contact us about your information: coaching@deeplink.uk

The short version

  • Your video never leaves your device. It’s recorded and kept in your own browser, and only you can watch it.
  • Your voice is transcribed, then the audio is deleted. We keep the written transcript and your feedback so you can see your progress.
  • Camera feedback is worked out on your device. Only totals (for example, “eye contact 72% of the time”) are sent to us, never images. We never use your face to identify you or to guess your emotions.
  • The AI services we use don’t train on your answers. We never sell your information or share it with employers.
  • Only you see your reports, unless you make a private link to share one (with your coach, say). You can switch a link off at any time.
  • You’re in control. You can download your information, or delete your account and everything in it, from your Account page at any time.

What we collect, and why

You need to give us an email address to have an account. Everything else below comes from using Deeplink Interview.

WhatWhy we use it, and our lawful basisHow long we keep it
Your account: your email address, a display name, your plan, your settings, when you confirmed your email address, when you created your account and when you last used itTo create your account, sign you in and provide your plan. Contract.Until you delete your account, or 12 months after you last use Deeplink Interview
What you agreed to: which version of the Terms you accepted and when, when you confirmed you’re 18 or over, and, for the optional consent for sensitive details, when you gave it, which wording you agreed to, and when you last withdrew itTo show what you agreed to, and to keep the service for adults. Legitimate interests. For the sensitive-details consent, also to show we have it (legal obligation)As for your account
Sign-in codes and links. We store them only in scrambled form, with a scrambled form of your email and network address, and a scrambled form of the random value in the sign-in cookie set in the browser that asked (see “Cookies”). While a code is valid, we also hold the email address it was sent toTo sign you in without a password, and to stop anyone else doing so. Contract and legitimate interests (security).Codes expire after 10 minutes. The one-click link expires with its code, except in the last sign-in email we send an address in a day, where it works for 24 hours. The email address is removed within about an hour after the link expires (or as soon as it’s used). The rest is deleted after 1 day
Your signed-in sessions: a scrambled form of your sign-in cookie, and when the session started, was last used and endsTo keep you signed in, and to let you sign out everywhere. Contract.30 days after you last use it, and never more than 90 days. Deleted sooner when you sign out
The audio of your answersTo turn your speech into a transcript. Contract.Not kept by us. It passes through our server to the transcription service and is discarded as soon as the transcript comes back
Your practice sessions: the questions, your transcripts and word timings, delivery measures (pace, filler words, pauses, time used; with delivery feedback off, only time used and how many words), scores, written feedback and which AI model marked each answer. For live interviews, also what the interviewer said and your replies, spoken or typedTo run your sessions and live interviews, and show you your feedback and progress. Contract.Until you delete the session or your account, or 12 months after you last use Deeplink Interview. A session you started but never answered anything in is deleted after 7 days
Your STAR examples: the examples you write on the STAR examples page (a title, the competencies you choose, and your notes on the situation, task, action and result)To let you prepare, keep and reuse your examples. Contract. They’re only stored for you: never sent to an AI service or anyone elseUntil you delete them or your account, or 12 months after you last use Deeplink Interview
Links you make to share a report: when you made each link, when it expires, how many times the report was opened with it and when it was last opened. We keep only a scrambled form of the link itselfTo show that report to the people you choose, and to show you when it’s been opened. Contract. See “Sharing a report” belowUntil the link expires (after 7, 14 or 30 days, as you choose) or you switch it off, then deleted within a day. Links also go when you delete the session or your account, or withdraw your consent for sensitive details
Camera totals: the share of time your face was in view, well framed and well lit, and your eye contact (only if eye-contact feedback is on)To give you feedback on how you come across on camera. Contract.As for your practice sessions
Plan counts: how many video sessions and live interviews you’ve used in a day or month. Kept against a scrambled form of your email address (see below), apart from your accountTo apply your plan’s limits (contract), and to stop the Free plan being reset by deleting and re-creating an account (legitimate interests: preventing fraud).Up to two months after the month or day they count. Kept for that time even if you delete your account
Deeplink students: your Deeplink Learn account reference, email address, name and role (student or coach), sent by Deeplink Learn when you press Practise interviewsTo create or link your account and give you the student access you asked for. Steps you asked us to take (you pressed Practise interviews), then contract once you accept our Terms.Your Learn reference and name: as for your account. If you never accept our Terms, we delete the account when your student access ends. See “If you come from Deeplink Learn” below for the link itself
Payment details (once paid plans are on sale)Stripe collects your card details; we never see them. We receive a customer reference, what you bought, your subscription’s status, and a record of what you agreed to at checkout. Contract, legal obligation (accounting and tax records) and legitimate interests (showing what you agreed to).In your account: as for your account (but not deleted while a Pro subscription is running). Payment records: 6 years after the end of the financial year they relate to, as UK tax law requires
Daily usage counters linked to your account: how many recordings, minutes of audio, live-interview replies and interviewer voice lines you’ve used today, how much of your daily AI allowance you’ve used, how many times your progress has been worked out, how many changes you’ve saved to your STAR examples, how many links you’ve made to share a report, and how many times you’ve downloaded your informationTo apply the daily limits in the Terms and stop overuse. Contract and legitimate interests (keeping the service available to everyone)Within 2 days
Your network (IP) address. Cloudflare uses it to deliver the site, protect it from attacks and run the spam check. We keep only a scrambled form of the network part of itTo limit how often forms can be used and stop abuse. Legitimate interests (security).Our scrambled records: within 2 days
A record of each email we send: a scrambled form of the address, the type of email, the time, and whether it was deliveredTo spot and stop misuse of the sign-in form. Legitimate interests (security).90 days
Messages you send usTo reply, and to deal with complaints and requests. Legitimate interests, and legal obligation for requests about your data.As long as we need to deal with your message, and then only if we need it for a legal claim

We also keep daily totals of how much we use our AI services, with no content and nothing that links them to you, for 400 days.

How deletion works. An automatic clean-up runs about once an hour while the site is in use, and deletes records when their time is up, so a record can last up to about an hour longer than the times above. Our own staff accounts are not deleted after 12 months.

Emails we send. Sign-in codes and links, and messages we need to send about your account. Once paid plans are on sale, also order confirmations, receipts, and notices the law requires (for example, reminders before a subscription renews). We don’t send marketing emails.

Plan counts, and your scrambled email address

To stop the Free plan being reset by deleting an account and making a new one, we count sessions against a scrambled form of your email address (a “keyed hash”), not against your account. Before scrambling it, we tidy the address so that different forms of the same mailbox count once: we remove anything after a “+” and, for Gmail addresses, ignore dots. We can’t turn the scrambled form back into your address. It still counts as personal information, though: anyone who had both our secret key and your address could check whether the two match, so we guard the key like a password.

These counts are kept in a table that isn’t linked to your account, for up to two months after the month or day they count. They’re included when you download your data. You can object to this use; see “Your rights”.

Your camera and microphone

Your camera and microphone switch on only when you turn them on in the set-up screen before a session (in video practice, with the Turn on camera and microphone button), and your browser asks your permission first. Face tracking starts then, so the set-up screen can check your camera.

The camera check (eye contact, framing and light) uses a face-tracking model (MediaPipe) that runs entirely inside your browser. It works out where your face and eyes are in each moment, and then throws that away. Only the totals are sent to us. Nothing about your face leaves your device, it isn’t stored, and it isn’t used to recognise who you are.

Coding challenges. The SQL and Python you write on a coding challenge page run inside your own browser, in copies of SQLite and Python that your browser downloads from our site. Your code and its results aren’t sent to us, and you don’t need an account. Your draft answers, and which challenges you’ve solved, are kept in your browser (see “Settings on this device” below).

  • Eye-contact feedback can be switched off in your Account. Then eye contact isn’t measured at all.
  • Delivery feedback can be switched off too, for example if you stammer. Then we don’t keep, score or show your pace, filler words and pauses, and switching it off also removes them from your past sessions. We keep only how long you spoke and how many words you said, which the marking needs. We also stop asking the transcription service to write down filler words such as “um”. Your transcript keeps the time of each word, so you can play your recording from any word.

We don’t assess your accent, appearance, age, gender, ethnicity or emotions, and your feedback isn’t based on them.

Live interviews

In a live interview, an AI interviewer asks questions from our question bank and may ask follow-up questions about what you said. Your spoken replies are transcribed in the same way as video answers. If you type a reply, we receive the text. Captions show every line the interviewer says.

The interviewer’s voice. We use your device’s own built-in speech voice. We only use voices your browser reports as built into your device, not ones it says come from an online service. If your device has no built-in English voice, we send the interviewer’s line (which may repeat something you said) to Cloudflare Workers AI, which turns it into speech and sends it back as audio. It isn’t kept, and your browser isn’t allowed to store it either. You can also switch the voice off and read the interviewer’s lines instead.

The recording. If your camera is on, the whole live interview is recorded on your device (what your camera and microphone pick up, not the interviewer’s voice), in the same way as practice answers. It’s kept only on your device. With the microphone only, the interview isn’t recorded.

Automated feedback

Your scores and written feedback are produced automatically, by software and AI. The AI reads the transcript of your answer and marks it against what a strong answer to that type of question includes. Your delivery measures come from the timings in your transcript, and your camera totals from your device.

This is practice feedback. It isn’t a decision about you that has a legal or similarly significant effect, we don’t use it to make decisions about you, and it isn’t shared with employers. AI can make mistakes. If you think a piece of feedback is wrong, please tell us.

Sharing a report

Nobody sees your reports unless you choose to share one. On a finished session’s report you can make a private link to it, for your coach or someone else you trust.

  • What they see: the questions, what you said (in a live interview, the whole conversation), your scores, the written feedback, and the notes on your delivery (such as pace and filler words) and on camera (such as eye contact and lighting), apart from any you’ve switched off in your Account. Never your recordings, which don’t leave your device, and not your name or email address, unless you said them in an answer.
  • Who can open it: anyone who has the link, until it expires (after 7, 14 or 30 days, as you choose) or you switch it off on the report page. Send it only to people you trust: what they do with it after that is up to them.
  • What we record: how many times the report was opened with the link, and when it was last opened, so you can see this on the report page. We don’t record who opened it.
  • Sensitive details: if your answers mention sensitive details about you, the link shares them too. Read the report before you share it.

Sensitive details in your answers

Some interview questions (for example, about a setback, or about yourself) can lead people to mention sensitive details, such as their health, a disability, their religion, their ethnicity or their sexuality. The law calls these “special category” information. We don’t ask for them, and you don’t need to mention them to practise.

  • With your consent. When you sign up, or later in your Account, you can tick a separate, optional box: “If I mention sensitive details about myself in my answers (such as my health, a disability, my religion, ethnicity or sexuality), I explicitly consent to Deeplink Interview transcribing, storing and marking them with the rest of my answer, using the AI services named in the Privacy notice (some are in the US), only to give me feedback. I can withdraw this at any time in my Account.” Our lawful basis is then your explicit consent (UK GDPR Article 9(2)(a)). It covers details about you, not other people. It’s entirely optional: you can practise either way.
  • Your STAR examples are kept only so you can reuse them, and aren’t covered by this consent. Please leave sensitive details out of them.
  • Sharing a report with a link is your choice each time, and shares whatever the report contains (see “Sharing a report” above).
  • Without it, please leave such details out of your answers. We remind you before each session. If something slips out, you can delete that session.
  • Changing your mind. You can withdraw your consent at any time in your Account (Sensitive details in my answers). It stops applying from then on, and any links you’ve made to share a report stop working. We also offer straight away to delete all your past sessions. If you choose to keep them, we keep them only until you delete them or your account. Withdrawing doesn’t affect what we did before.
  • Our record. We keep when you gave the consent, which wording you agreed to, and when you last withdrew it, so we can show what you agreed to.

The AI services we use

  • Transcription. The audio of your answer (never the video) goes to Groq first, or to Cloudflare Workers AI if Groq is busy. Both turn it into text and send it back, and we then discard the audio.
  • Marking and the live interviewer. These use open-weight AI models run by Cloudflare Workers AI: Qwen3-30B for the interviewer and standard marking, and a larger model for detailed marking when it’s available (OpenAI’s gpt-oss-120b, or Moonshot AI’s Kimi K2.6). The models run on Cloudflare’s systems; nothing is sent to the companies that made them.
  • No training. Neither Groq nor Cloudflare uses what we send to train AI models.
  • No keeping. Cloudflare Workers AI doesn’t store what we send. Groq doesn’t normally keep it either, except that its standard policy lets it keep data for up to 30 days to investigate faults or suspected abuse. Groq offers a “Zero Data Retention” setting that turns this off, and we only send audio to Groq with that setting switched on.

Who else is involved

We use these companies to run Deeplink Interview. Unless we say otherwise, they act only on our instructions (“processors”), under contracts that protect your information.

CompanyWhat it doesWhere, and how transfers are protected
CloudflareHosts the website and our database, runs Cloudflare Workers AI (backup transcription, marking, the live interviewer and the backup interviewer voice) and the Turnstile spam checkA worldwide network, including the US. Cloudflare is certified under the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”); its contract with us also includes the UK Addendum to the EU Standard Contractual Clauses
GroqTranscribes the audio of your answersMainly the US (anything Groq keeps is held on Google Cloud in the US). Protected by the UK Addendum to the EU Standard Contractual Clauses, in Groq’s data processing contract
ResendSends our emailsThe US. Resend is certified under the UK–US data bridge; its contract with us also includes the UK Addendum to the EU Standard Contractual Clauses
Stripe (once paid plans are on sale)Takes paymentsWorldwide, including the US. Stripe’s US company is certified under the UK–US data bridge, and Stripe’s contract with us also includes the UK Addendum. Stripe also uses some payment information for its own purposes, such as preventing fraud and meeting legal duties. For that it is a separate controller: see Stripe’s privacy notice

You can ask us for a copy of the transfer safeguards at coaching@deeplink.uk.

We may also share information if the law requires it, or with our professional advisers (for example, lawyers) when we need their advice.

The Practise interviews button in Deeplink Learn sends you here with a signed, single-use link that lasts about 90 seconds. It carries your Learn account reference, email address, name and role. It sits in the part of the web address that browsers don’t send to servers, so it doesn’t end up in web logs.

  • The first time a browser comes here from your Learn account, we ask “Continue as …?” with your email address before signing you in, so a link made from someone else’s Learn account can’t sign you in to theirs. Once you’ve said yes, that browser remembers it (see “Cookies”).
  • If your email address is new here, we create an account linked to your Learn account.
  • If you already have an account here, we email you a code first, and link the accounts once you type it in. If you open the emailed link in a different browser, we ask whether to link your Deeplink Learn account before doing so. Your Learn reference and name are kept with the code, and deleted with it (within 1 day) if you don’t. Your browser also holds your email address in that tab until you type the code or close the tab.
  • If you never accept our Terms after Deeplink Learn created your account, we delete that account when your student access ends.
  • If someone else is signed in on that browser, we ask before switching accounts.
  • You can unlink Deeplink Learn at any time in your Account. Your Learn account then can’t sign you in here, and you’re signed out on your other devices. Student access you already have runs to its end date.

We keep a record that each link has been used (a random reference, no personal details), and delete it shortly after the link expires. We tell Deeplink Learn nothing about your practice. Your coach sees a report only if you share it with them yourself (see “Sharing a report”).

Your device

Your recordings. The video of your answers, and a separate audio copy, are saved only in your browser’s storage (IndexedDB), on the device you used, so you can watch them back. We can’t see them. They’re tagged with your account, so someone else who signs in on the same browser doesn’t see them. This isn’t encryption, though: someone who can use your browser and knows how could still reach them.

  • Delete them at any time from your Account page. We also offer to delete them when you sign out.
  • If you use a shared computer, delete them when you finish.
  • Browsers can clear this storage on their own. Safari, for example, can remove it after 7 days without use. We can’t get deleted recordings back.

Cookies. Our site sets these cookies. They’re strictly necessary to sign you in and keep your account secure, so we don’t need to ask for your consent:

NameWhat it’s forHow long
__Host-dli_sessionKeeps you signed in30 days after you last use the site (never more than 90), or until you sign out
__Host-dli_reqA random value set when you ask for a sign-in code, so a sign-in link opened in a different browser asks you to confirm first30 minutes, or until you sign in
__Host-dli_kdMarks this browser as one you’ve signed in on, so someone else asking for lots of codes for your address can’t stop your own sign-in emails6 months, or until you delete your account
__Host-dli_lhMarks this browser as one you’ve come to from your Deeplink Learn account, so we don’t ask “Continue as …?” every time6 months, or until you unlink Deeplink Learn or delete your account

On the sign-in page and when you start a session, Cloudflare’s Turnstile check, and Cloudflare’s own security protection, may also store or read information on your device to tell people from bots. This is strictly necessary for security. We don’t use analytics, advertising or tracking cookies or scripts.

Settings on this device. When you change certain settings, work on a coding challenge or follow a study plan, we save them in your browser’s local storage so the site remembers them next time. They’re never sent to us. Apart from the interview countdown and your coding-challenge drafts, which hold what you type, they contain no personal details. We save them only when you change them, and you can remove them at any time with Forget my settings on this device on your Account page:

NameWhat it remembersHow long
dli-stillThat you pressed “Pause animations”Until you switch animations back on, remove it, or clear your browser’s data
dli-live-prefsYour live-interview settings: whether the interviewer’s voice is on, which voice and speed, and when to end your answerUntil you remove it or clear your browser’s data
dli-planYour interview countdown on the practice page: the date of your interview, any short note you add about it, and when you added it. It’s tagged with your account, so someone else who signs in on the same browser doesn’t see itUntil you remove it, sign out, delete your account or clear your browser’s data
dli-code: and the challenge’s nameYour draft answer to a coding challenge, so it’s still there when you come backUntil you press “Start again” on the challenge, remove it, or clear your browser’s data
dli-challengesWhich coding challenges you’ve solved in this browser, and whenUntil you remove it or clear your browser’s data
dli-studyThe study plan you’re following, its name and the day you started it, and the steps you’ve ticked off by hand in each plan, and whenUntil you stop following the plan and untick the steps, remove it, or clear your browser’s data
dli-practiceYour practice plan on the practice page (the days and time you chose to practise, and when you chose them), which first steps you’ve done in this browser (the camera check, reading a report) and when, and what you’ve hidden (the first steps, or the note about Deeplink Coaching on reports) and when. It’s tagged with your account, so someone else who signs in on the same browser doesn’t see itUntil you remove it, sign out, delete your account or clear your browser’s data

We rely on the exception for storage that remembers how you want the site to look or work, which doesn’t need consent as long as we tell you and you can remove it easily. The countdown is only saved when you add a date yourself, and the practice plan when you save one. The calendar file you can save for your practice plan is made on your device, and any reminder in it comes from your own calendar: we don’t send reminder emails.

Your rights

You have the right to:

  • get a copy of your information;
  • have it corrected;
  • have it deleted;
  • restrict how we use it;
  • object to how we use it where we rely on legitimate interests;
  • receive it in a format you can take elsewhere.

Download and delete in your Account. Your download is a file (JSON) with your account details, settings (including the optional sensitive-details consent), signed-in sessions, plan counts, practice sessions, transcripts and feedback. It doesn’t include short-lived, scrambled security records (sign-in codes, the email log and rate-limit counters); email us if you want those. Recordings aren’t in it, because we don’t keep them: they stay on your device. You can also delete your account, and everything in it, straight away. If you have a Pro subscription that’s still running, you’ll need to cancel it first.

For anything else, email coaching@deeplink.uk. We’ll reply within one month. If your request is complex we may need up to two more months, and we’ll tell you if so. We may need to check it’s you first.

Complaints

If you’re unhappy with how we’ve handled your information, please tell us at coaching@deeplink.uk. We’ll acknowledge your complaint within 30 days, look into it, and tell you what we’ve done.

You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Keeping your information safe

Everything is sent over encrypted connections (HTTPS). We store sign-in codes, session tokens, and network and email addresses used for limits only in scrambled form. We limit who can reach our systems, and admin access is only by email sign-in. Our code doesn’t write the content of your answers or your email address to our logs.

Age

Deeplink Interview is for people aged 18 and over. We ask everyone to confirm this before their first session. If you’re under 18, please don’t use it. If we learn that an account belongs to someone under 18, we’ll delete it.

Changes to this notice

If we change this notice, we’ll update the date and version at the top. If the change matters to you, we’ll tell you in the app or by email.