Privacy Policy
Last updated: 7 November 2026
In short
- We collect only what we need to run your account, the tools you use and the products you buy.
- We use AI providers to generate resume and cover letter text and to run voice interview practice.
- We do not sell your personal data.
- You can access, correct or delete your data at any time. Write to main@engineernow.org.
1. Who we are
EngineerNow (the "Service") is operated by Martin Grey LLP, a limited liability partnership registered in England and Wales under number OC457668, registered office: First Floor, Office 3, Hornton Place, London W8 4LZ, United Kingdom ("we", "us").
We are the controller of your personal data under the UK GDPR and, where it applies, the EU GDPR. We are registered with the UK Information Commissioner's Office (ICO) as a data protection fee payer, registration reference ZC047721.
Privacy contact: main@engineernow.org.
This policy covers engineernow.org and its subdomains (Resume Builder, Cover Letter Builder, InterviewNow). It does not cover the Russian-language version of the Service, which has its own policy at https://engineernow.org/ru/privacy-policy.
2. What we collect and why
| Purpose | Data | Legal basis |
|---|---|---|
| Your account | name, email address, password (stored hashed) or Google sign-in details | contract (Art. 6(1)(b)) |
| Resume, cover letter, resume scanner and achievements analyzer | the information you enter: work history, education, skills, contact details, job descriptions | contract |
| InterviewNow (AI interview practice) | your voice during a session (streamed in real time for transcription), interview questions, your answers as text, feedback and scores | contract |
| Payments | name, email, purchase history; card details are handled by Stripe and never reach us | contract; legal obligation for accounting records (Art. 6(1)(c)) |
| Support and feedback | email address, your message, rating | legitimate interests (Art. 6(1)(f)): answering you and improving the Service |
| Product analytics | pages visited, clicks, device and browser type, approximate location from IP address, session recordings with all form fields masked | consent (Art. 6(1)(a)), given in the cookie banner |
| Service emails (account, purchases) | email address | contract |
| Security and fraud prevention | IP address, logs | legitimate interests |
We do not use your voice to identify you, and we do not process special-category data.
3. AI processing
When you use AI features, the content you provide is sent to the AI provider to produce a result:
- resume and cover letter text;
- the questions and answers of an interview session, together with your voice.
We use OpenAI (directly and via OpenRouter). Under their API terms, data sent through the API is not used to train their models. The AI provides suggestions and practice feedback only. It does not make decisions with legal or similarly significant effects about you.
4. Who we share data with
We use the following processors, each bound by a data processing agreement:
| Processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Convex | database and backend | USA | Standard Contractual Clauses (SCCs) / UK Addendum |
| Vercel | website hosting | USA | EU-US Data Privacy Framework / SCCs |
| OpenAI, OpenRouter | AI text generation, speech transcription, interview feedback | USA | Data Privacy Framework / SCCs |
| Stripe | payments | USA / EU | Data Privacy Framework / SCCs |
| PostHog | product analytics (with consent) | EU | — |
| Brevo | service emails | EU (France) | — |
| sign-in with Google (if you choose it) | USA | Data Privacy Framework | |
| Calendly | booking consultations | USA | Data Privacy Framework / SCCs |
| Vimeo, YouTube | embedded course and lesson videos | USA | Data Privacy Framework |
We may also disclose data if required by law. We do not sell or rent personal data and do not share it for cross-context behavioural advertising.
5. How long we keep data
| Data | How long |
|---|---|
| Account data and your documents | while your account exists; deleted within 30 days after you delete the account |
| InterviewNow audio | not stored; streamed only for real-time transcription |
| InterviewNow transcripts and scores | while your account exists |
| Payment and accounting records | 6 years, as UK tax law requires |
| Support messages | 2 years |
| Analytics | up to 12 months |
6. Cookies
We use:
- strictly necessary cookies for sign-in, security and payments;
- analytics cookies from PostHog.
Analytics cookies are set only after you click "Accept" in the cookie banner. You can change your choice at any time through the cookie settings link at the bottom of the site, or in your browser settings.
7. Your rights
Under the UK and EU GDPR you can:
- access your data;
- correct it;
- erase it;
- restrict or object to processing;
- receive a copy of your data (portability);
- withdraw consent at any time.
You can delete your account yourself in Profile. To exercise any right, write to main@engineernow.org. We reply within one month.
You can also complain to the ICO (ico.org.uk) or to the data protection authority in your EU country.
US residents. We do not sell or share personal information as defined by US state privacy laws. You may ask us to access or delete your personal information at main@engineernow.org.
8. Age
The Service is intended for users aged 18 and over. We do not knowingly collect data from children.
9. Security
We protect your data:
- connections are encrypted (HTTPS);
- passwords are stored only in hashed form;
- access to data is limited to those who need it to run the Service.
10. Changes
When the Service or the law changes, we update this policy and change the date above. If the changes are significant, we will tell you by email or on the site.