What we collect
- Account: name, email address (via Google OAuth or magic-link).
- Practice activity: scenario choices, scores, coaching messages.
- Voice recordings & transcripts of practice sessions (created via Vapi).
- Subscription & billing metadata (held by Stripe; we store a customer ID).
- Standard server logs (IP, user agent) for security and abuse prevention.
Voice recording storage
Voice recordings are produced and stored on Vapi's infrastructure under their Data Processing Addendum. We retrieve transcripts and recording URLs to display in your session history. See Vapi's privacy policy for their handling and retention practices.
Third parties we share data with
- Vapi — voice transport, transcription, and recording.
- OpenAI — scoring and coaching (transcripts are sent for analysis).
- Stripe — payment processing and subscription management.
- Resend — transactional email (magic-link sign-in).
- Google — optional OAuth sign-in.
- Neon — PostgreSQL hosting for your account data.
We do not sell your personal data. We share only what is necessary for each provider to perform its function.
Your rights
You can export or delete your data at any time from your Settings page. Deletion is immediate and irreversible.
Data retention
- Voice recordings: retained for ~30 days via Vapi (per their default retention).
- Account data, scores, transcripts: retained until you delete your account.
- Stripe billing records: retained per Stripe's policies for tax/compliance.
Contact
Questions or requests: jason@systmatik.com.