Last updated: 21/1/2026
This Privacy Policy explains how Innovation 13 Limited trading as Interviewa (we, us, our) collects and uses personal data when we operate Interviewa.com and when we provide our interview platform and services.
Company Details
Legal name: Innovation 13 Limited
Registered in: England and Wales
Company number: 16606645
Registered office: 86-90 Paul Street, London, England, EC2A 4NE
Email: [email protected]
Support: [email protected]
1. Key Definitions
Customer an organisation or person that creates an account and uses the Services to run interviews.
Participant a person invited by a Customer to complete an interview.
Customer Data personal data processed by us on behalf of a Customer, usually Participant data and related outputs.
Outputs transcripts, summaries, scores, analytics, and similar results produced from interview responses.
2. Our Roles Under UK Data Protection Law
When we are a controller
We are a controller for personal data relating to:
- Website visitors and enquiries.
- Customer account owners and authorised users.
- Billing, payments, and account administration.
- Security monitoring, fraud prevention, and abuse prevention for our website and Services.
- Service communications such as platform notices and security alerts.
- Product improvement data that is aggregated or not specific to a Customer's instructions.
When we are a processor
We are typically a processor for Customer Data processed through the Services, including Participant recordings, transcripts, and outputs. In that case, the Customer is usually the controller and decides the purposes and lawful bases for processing.
3. Personal Data We Collect
A. Website visitors and enquiries
We may collect:
- Name, email, phone number, company name, and role.
- Message content in contact forms or emails.
- IP address, device and browser details, pages viewed, and basic usage information.
- Cookie preferences where applicable.
B. Customer account users
We may collect:
- Name, work email, phone number, job title, and company name.
- Account credentials and authentication data.
- Security and audit logs such as IP address, login time, and key platform actions.
- Support requests and communications.
- Billing information and payment status. We do not store full card details because these are handled by our payment provider.
C. Participants and interview data
When a Customer invites a Participant, we may process:
- Identity and contact details provided by the Customer such as name, email, and a candidate reference.
- Video and audio captured during the interview.
- Written answers and any documents the Participant uploads.
- Transcripts and outputs created from the interview.
- Technical information needed to deliver the interview such as IP address, device type, browser, timestamps, and session identifiers.
4. Camera On Requirement and Acceptance Before Interview Start
Participants are required to keep their camera on during the interview unless the Customer has explicitly enabled an accessibility exception or an alternative interview method.
Before an interview can start, the Participant must tick a box confirming they agree to our Terms and acknowledge this Privacy Policy. We record this acceptance for platform integrity, security, and audit purposes.
We do not perform facial recognition or automated identity verification unless we clearly state that feature is in use for a specific interview.
5. How We Use Personal Data and Our Lawful Bases
When we are a controller
We use personal data for:
- To operate our website and respond to enquiries (legitimate interests, and consent where required).
- To provide the Services to Customers (performance of a contract).
- To manage billing, payments, and accounts (performance of a contract and legal obligations).
- To secure our website and Services and prevent misuse (legitimate interests and legal obligations where applicable).
- To send service communications (performance of a contract and legitimate interests).
- To improve the Services using feedback and aggregated usage insights (legitimate interests).
- To market to business contacts where permitted, with an unsubscribe option (legitimate interests or consent where required).
When we are a processor
Where we process Customer Data on behalf of a Customer, we process it only on the Customer's documented instructions, as set out in our Data Processing Addendum.
6. AI Outputs and Human Decisions
Interviewa generates outputs using automated systems. Outputs may contain errors or omissions. Customers are responsible for reviewing outputs and making decisions. Interviewa does not make final admissions, hiring, or selection decisions.
7. Sharing Personal Data
We may share personal data with:
- Service providers that help us run the website and Services, such as hosting, email delivery, customer support tools, and payments.
- Professional advisers such as solicitors, auditors, and insurers.
- Authorities where required by law or to protect rights and safety.
- The Customer who invited the Participant, because the Customer controls the interview process and results.
We do not sell personal data.
8. International Transfers
Our suppliers may process data outside the United Kingdom. Where this happens, we use appropriate safeguards under UK law, such as the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another lawful transfer mechanism.
9. Data Retention
We keep personal data only for as long as needed for the purposes described in this policy.
Typical retention examples include:
- Enquiries: up to 12 to 24 months.
- Customer account and billing records: for the subscription term and then up to 6 years for tax and audit needs.
- Customer Data in the Services: retained according to the Customer's settings and contract, then deleted or returned after the service ends, subject to agreed retention windows and legal requirements.
- Security logs: typically 90 to 180 days unless needed for investigation.
10. Security
We use reasonable technical and organisational measures to protect personal data, including access controls, encryption in transit, monitoring, and backups. No system is completely secure, and we cannot guarantee absolute security.
11. Rights
Where we are a controller, individuals may have rights including access, rectification, erasure, restriction, objection, and data portability. If processing is based on consent, individuals can withdraw consent.
Where we process data on behalf of a Customer, Participants should direct rights requests to the Customer. If a Participant contacts us, we may redirect them to the Customer and support the Customer where appropriate.
12. Complaints
Individuals can complain to the UK Information Commissioner's Office. We encourage contacting us first so we can try to resolve concerns.
13. Children
Interviewa may be used for education admissions. Customers are responsible for ensuring they have a lawful basis to invite Participants who are minors and for providing appropriate privacy information to them.
14. Changes
We may update this Privacy Policy. We will post the latest version on our website and update the effective date.