Last Updated: December 20, 2025

Your privacy is important to us

How we protect and handle your data

This Privacy Policy explains how Laxmock collects, uses, protects, and manages your personal information. By using our service, you agree to the practices described in this policy.

Information We Collect

Account Information: Name, email address, and authentication credentials when you register.

Interview Data: Your responses, answers, recordings (for video interviews), and practice session data.

Usage Data: Information about how you interact with our service, including pages visited, features used, and time spent.

Payment Information: Billing details processed securely through Razorpay (we do not store complete card details).

Technical Information: IP address, browser type, device information, and cookies for service operation and security.

AI Interaction Data: Prompts, questions, and responses exchanged with our AI systems to provide and improve the service.

How We Use Your Information

Service Delivery: To provide mock interviews, generate AI feedback, and deliver personalized coaching.

Account Management: To create and maintain your account, process payments, and manage subscriptions.

Service Improvement: To analyze usage patterns, improve AI models, and enhance user experience.

Communication: To send important service updates, billing notifications, and (with your consent) product announcements.

Security & Fraud Prevention: To protect our service, detect abuse, and maintain system security.

Legal Compliance: To comply with applicable laws, regulations, and legal processes.

Data Storage & Security

We store your data on secure cloud infrastructure with industry-standard encryption.

Data is encrypted in transit using TLS/SSL and at rest using AES-256 encryption.

Access to personal data is restricted to authorized personnel on a need-to-know basis.

We implement regular security audits, monitoring, and updates to protect against unauthorized access.

We retain your data for as long as your account is active or as needed to provide services.

After account deletion, personal data is removed within 90 days, except where required by law.

Data Sharing & Third Parties

AI Service Providers: We use OpenAI and other AI providers to generate interview questions and feedback. Your interview data is processed according to their privacy policies.

Payment Processors: Razorpay processes payment information. We do not store complete payment card details.

Cloud Infrastructure: We use secure hosting providers (Vercel, cloud databases) to store and process data.

Analytics Services: We may use analytics tools to understand service usage and improve user experience.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We may disclose information when required by law, to protect our rights, or in connection with a business transfer.

Your Rights & Choices

Access & Portability: You can access your personal data and request a copy in a portable format.

Correction: You can update or correct your account information at any time.

Deletion: You can request deletion of your account and personal data (subject to legal retention requirements).

Opt-Out: You can unsubscribe from marketing communications while continuing to receive essential service emails.

Data Processing Objection: You can object to certain data processing activities where legally permitted.

Cookie Preferences: You can manage cookie preferences through your browser settings.

AI-Generated Content

AI responses are generated based on your inputs and may not always be accurate or complete.

You retain ownership of your prompts, questions, and responses you provide.

We may use anonymized and aggregated data to improve AI models and service quality.

Do not share sensitive personal information, confidential data, or proprietary information in your interview responses.

AI-generated feedback is for practice purposes only and should not be considered professional career advice.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence.

We ensure appropriate safeguards are in place for international data transfers.

By using our service, you consent to the transfer of your information to our facilities and service providers.

Children's Privacy

Our service is not intended for children under 18 years of age.

We do not knowingly collect personal information from children under 18.

If you believe we have collected information from a child, please contact us immediately.

Cookies & Tracking

We use essential cookies for authentication, security, and service functionality.

Session cookies remember your login state and preferences.

We may use analytics cookies to understand how users interact with our service.

You can disable cookies through your browser settings, but this may affect service functionality.

Data Retention

Active accounts: Data is retained while your account is active and for a reasonable period after.

Deleted accounts: Personal data is deleted within 90 days of account deletion.

Legal requirements: Some data may be retained longer to comply with legal, accounting, or regulatory requirements.

Backups: Data may persist in backup systems for up to 90 days after deletion from active systems.

Changes to Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements.

Material changes will be communicated via email or prominent notice on our website.

The 'Last Updated' date at the top of this policy indicates when it was last modified.

Continued use of our service after updates constitutes acceptance of the revised policy.

Contact & Data Protection

For privacy questions, data access requests, or to exercise your rights, contact us through our support channels.

For data protection inquiries, please include 'Privacy Request' in the subject line.

We will respond to legitimate requests within 30 days in accordance with applicable laws.

Your Data Protection Rights

Depending on your location, you may have specific rights under data protection laws (such as GDPR, CCPA, or similar regulations):

Right to Access: Request information about what personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data (subject to legal exceptions)
Right to Restrict Processing: Request limitation of how we process your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing of your data for direct marketing or other purposes
Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us through our support channels. We will respond to your request within the timeframe required by applicable law.