Privacy Policy

Intervues is operated by an independent developer based in India. For data protection purposes we are the controller for the data described below.

You can reach us at admin@intervues.club with any question, request, or complaint about your data.

Account data. Your GitHub username, display name, email address, avatar URL, and the GitHub access token we hold so we can act on your behalf. Tokens are stored encrypted.

Content you create. Discussion stances and arguments, design notes, problem posts and reviews, path progress, project join requests, and the scores and reputation derived from them.

Project and contribution data. Projects you join, tasks assigned to you, and the pull requests you open — including titles, descriptions, changed files, the code diffs themselves, and review comments.

Usage and diagnostics. Error reports, request identifiers, and records of background jobs, used to debug failures. These can include a route path, an error message, and a stack trace.

Analytics. Microsoft Clarity, which records how you interact with pages and can include mouse movement, clicks, scrolling and page content; Google Analytics; and Cloudflare Web Analytics. Vercel Analytics is cookieless and aggregate-only.

We want this to be impossible to miss, because it is the least obvious thing we do and it concerns your work.

When you open a pull request on a project you have joined, we send the files you changed — the actual source code diff — to Google's Gemini API so it can generate a review against the task's acceptance criteria. We do the same when generating contribution guidance for you, and when a mentor prepares a task study brief (which sends the task text and the assignee's recorded skill names).

This applies whether the project's repository is public or private.

Google processes this content under its own API terms. We do not use your code to train our models, and we do not authorise it to be used to train anyone else's.

If that is not acceptable to you, do not contribute to a project. There is currently no way to contribute while opting out of automated review.

GitHub — we read your profile and repository and pull request data through the GitHub API, and write checks, reviews and comments back to project repositories.

Supabase — our database and authentication provider, where account and content data is stored.

Vercel — our hosting provider, which processes request data in the ordinary course of serving the site.

Google — Gemini for the automated features described above, and Google Analytics.

Microsoft — Clarity session recording.

Cloudflare — aggregate web analytics.

Other members — anything you post in a discussion, design note, or review is visible to them by design.

We do not sell your data. We do not share it with advertisers or data brokers.

To operate the service you asked for: signing you in, showing you the daily prompts, storing and displaying what you post, and running projects and reviews. Our basis is performance of our agreement with you.

To keep the service working and secure: diagnosing errors, preventing abuse, and enforcing usage limits. Our basis is our legitimate interest in a functioning service.

To understand how the product is used, through the analytics tools named above.

To comply with law where we are required to.

Account and content data: while your account is open. If you delete your account, we delete your personal data within 30 days, except anything we must keep for legal or accounting reasons.

GitHub access tokens: until you disconnect GitHub or delete your account.

Background diagnostic records: 14 days.

Error reports: retained until resolved and then periodically cleared.

Analytics data is retained by Microsoft, Google and Cloudflare under their own schedules, which we do not control.

Note that posts you have made in shared spaces may remain visible in the flow of a discussion even after your account is deleted, in a de-identified form, so that other members' replies still make sense.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to our processing of your personal data, and to receive a copy in a portable form. If you are in the EU or UK these arise under the GDPR; if you are in India, under the Digital Personal Data Protection Act, 2023.

To exercise any of them, write to admin@intervues.club. We will respond within 30 days, at no charge, and we will not degrade your access for asking.

If you think we have handled your data badly you may complain to your local data protection authority. We would rather you told us first so we can fix it.

We are based in India and our providers operate globally, so your data will be processed outside your country, including in the United States and the European Union.

Where required, we rely on the transfer mechanisms our providers make available, such as standard contractual clauses.

We use encryption in transit, encrypted storage for access tokens, row-level access controls in our database, and least-privilege internal access.

No system is perfectly secure. If a breach affects your personal data and poses a real risk to you, we will tell you and the relevant authority as required by law.

The service is not intended for anyone under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy as the product changes. Material changes will be posted here with a revised date.

Questions, requests, or deletion: admin@intervues.club