Privacy Policy

VivaWork is a personal brand operated by an independent sole operator, not a company or a registered legal entity. References to "VivaWork", "we", "our", or "us" in this Privacy Policy refer to the individual operator, who is the data controller for the information collected through vivawork.shop and related services (collectively, the "Service").

For any question about this policy or a data request, contact the operator at [email protected].

We collect the following categories of information:

• Account information. Name, email address, password hash, and optional profile details you choose to provide when you create an account.
• Billing information. When you purchase a subscription or credit top-up, our payment processor Stripe collects and processes your payment method details. VivaWork receives only a limited billing record (transaction ID, last four digits of the card, billing country, amount) for accounting and customer support purposes.
• Usage data. Information about how you use the Service, including interview packs you run, session timestamps, feature interactions, and aggregate performance metrics.
• Session content. The text or voice responses you submit during mock interviews and the feedback generated by our AI. This content is treated as private to your account.
• Device data. Standard log data including IP address, browser type, operating system, referrer, and pages visited, collected automatically when you use the Service.
• Support communications. Messages you send to our support email or contact form, and our replies.

We use the information described above to:

• provide, operate, and maintain the Service;
• generate interview questions, evaluate responses, and produce feedback within your sessions;
• process payments, manage subscriptions, and maintain transaction records;
• communicate with you about your account, service updates, and support requests;
• detect, investigate, and prevent fraud, abuse, or security incidents;
• measure aggregate usage to improve the Service and our product roadmap;
• comply with applicable laws, regulations, and legal requests.

We do not sell personal information. We do not use your session content to train public AI models, and we do not share your transcripts with other customers.

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases to process your personal information:

• Contract. Processing necessary to provide the Service you requested and manage your account.
• Legitimate interests. Improving the Service, preventing fraud, and maintaining security and reliability.
• Legal obligation. Processing required to comply with accounting, tax, and other legal obligations.
• Consent. Where we rely on consent (for example, optional analytics cookies), you may withdraw consent at any time.

We share personal information only with the following categories of recipients, and only to the extent necessary:

• Payment processing. Stripe, Inc. processes all payments on our behalf under its own privacy policy.
• Cloud hosting and infrastructure. Reputable hosting and content-delivery providers that store and deliver the Service on our behalf, under contractual data protection obligations.
• AI model providers. Service providers whose models generate interview questions and feedback. Session content is transmitted to these providers only to produce your results and is not used by them to train public models, per our data processing agreements.
• Analytics. Privacy-respecting analytics services that help us understand aggregate Service usage.
• Legal and safety. Law enforcement or regulators where disclosure is required by law or necessary to protect rights, property, or safety.
• Business transfers. In the event of a merger, acquisition, or asset sale, personal information may be transferred as part of that transaction, subject to the protections described in this policy.

VivaWork operates internationally. Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and equivalent mechanisms to protect your information during cross-border transfers.

We retain personal information for as long as your account is active and as needed to provide the Service. Session content is retained until you delete it or close your account. Billing and transaction records are retained for the period required by tax and accounting laws, typically seven years. Support correspondence is retained for up to three years for quality and auditing purposes.

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including transport encryption (TLS), encryption at rest for sensitive data, access controls, and regular security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights including the right to access, correct, delete, or export your personal information, the right to object to or restrict certain processing, and the right to withdraw consent. California residents have additional rights under the CCPA/CPRA.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.

VivaWork is not directed to children under the age of 16 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We use a small number of essential cookies to operate the Service and optional analytics cookies to understand aggregate usage. You control optional cookies through the consent banner on your first visit. For more information see our Cookie Policy.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice through the Service or by email.

For privacy questions or data requests, contact the operator at:

• Email: [email protected]
• Postal address: available on request for verified legal or regulatory inquiries.