1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This may include:

Email address and password (for traditional accounts)
Profile information from SSO providers (when using SSO)
Practice session recordings and analysis data
Video recordings stored securely in AWS S3
Usage data and preferences
Authentication tokens and session data

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process transactions and send related information
Send technical notices, updates, security alerts, and support messages
Respond to your comments, questions, and requests
Analyse usage patterns to improve user experience
Process video recordings using AWS Rekognition for facial analysis and emotion detection
Store and manage video data securely using AWS S3 cloud storage

3. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share your information in the following circumstances:

With your consent
To comply with legal obligations
To protect our rights and safety
In connection with a business transfer
With AWS services (S3 for storage, Rekognition for facial analysis) to provide our core functionality
To prevent account sharing and ensure membership compliance through usage pattern analysis

International Data Transfers: When we share data with AWS services, this may involve transfers outside Australia. We ensure such transfers comply with Australian Privacy Principle 8 (APP 8) and that appropriate safeguards are in place to protect your personal information.

4. Data Security

We implement appropriate security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes:

Encryption of all data in transit using industry-standard TLS/SSL protocols
Encryption of all data at rest using AES-256 encryption
Secure storage of video recordings and analysis data in AWS S3
Regular security updates and monitoring of our systems

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security of your information.

5. Your Rights

You have the right to:

Access and update your personal information
Delete your account and associated data (contact us to request account deletion)
Opt out of certain communications
Request a copy of your data

Account Deletion: If you wish to delete your account and all associated data including practice recordings, analysis data, and personal information, please contact us at support@deepmock.io. We will process your request within 30 days and confirm the deletion of your data.

Australian Privacy Law: This privacy policy complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and the Privacy and Data Protection Act 2014 (Vic). You have additional rights under Australian law, including the right to make a complaint to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached your privacy.

6. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Privacy Policy