Privacy Policy

Last updated: 27/10/2026

This Privacy Policy explains how Innovation 13 Limited trading as Interviewa (we, us, our) collects and uses personal data when we operate Interviewa.com and when we provide our interview platform and services.

Company Details

Legal name: Innovation 13 Limited

Registered in: England and Wales

Company number: 16606645

Registered office: First Floor, 35 Livery Street, Birmingham, B3 2PB

Email: [email protected]

Support: [email protected]

1. Key Definitions

Customer an organisation or person that creates an account and uses the Services to run interviews.

Participant a person invited by a Customer to complete an interview.

Customer Data personal data processed by us on behalf of a Customer, usually Participant data and related outputs.

Outputs transcripts, summaries, scores, analytics, and similar results produced from interview responses.

2. Our Roles Under UK Data Protection Law

When we are a controller

We are a controller for personal data relating to:

Website visitors and enquiries.
Customer account owners and authorised users.
Billing, payments, and account administration.
Security monitoring, fraud prevention, and abuse prevention for our website and Services.
Service communications such as platform notices and security alerts.
Product improvement data that is aggregated or not specific to a Customer's instructions.

When we are a processor

We are typically a processor for Customer Data processed through the Services, including Participant recordings, transcripts, and outputs. In that case, the Customer is usually the controller and decides the purposes and lawful bases for processing.

3. Personal Data We Collect

A. Website visitors and enquiries

We may collect:

Name, email, phone number, company name, and role.
Message content in contact forms or emails.
IP address, device and browser details, pages viewed, and basic usage information.
Cookie preferences where applicable.

B. Customer account users

We may collect:

Name, work email, phone number, job title, and company name.
Account credentials and authentication data.
Security and audit logs such as IP address, login time, and key platform actions.
Support requests and communications.
Billing information and payment status. We do not store full card details because these are handled by our payment provider.

C. Participants and interview data

When a Customer invites a Participant, we may process:

Identity and contact details provided by the Customer such as name, email, and a candidate reference.
Video and audio captured during the interview.
Written answers and any documents the Participant uploads.
Transcripts and outputs created from the interview.
Technical information needed to deliver the interview such as IP address, device type, browser, timestamps, and session identifiers.

4. Camera On Requirement and Acceptance Before Interview Start

Participants are required to keep their camera on during the interview unless the Customer has explicitly enabled an accessibility exception or an alternative interview method.

Before an interview can start, the Participant must tick a box confirming they agree to our Terms and acknowledge this Privacy Policy. We record this acceptance for platform integrity, security, and audit purposes.

We do not perform facial recognition or automated identity verification unless we clearly state that feature is in use for a specific interview.

5. How We Use Personal Data and Our Lawful Bases

When we are a controller

We use personal data for:

To operate our website and respond to enquiries (legitimate interests, and consent where required).
To provide the Services to Customers (performance of a contract).
To manage billing, payments, and accounts (performance of a contract and legal obligations).
To secure our website and Services and prevent misuse (legitimate interests and legal obligations where applicable).
To send service communications (performance of a contract and legitimate interests).
To improve the Services using feedback and aggregated usage insights (legitimate interests).
To market to business contacts where permitted, with an unsubscribe option (legitimate interests or consent where required).

When we are a processor

Where we process Customer Data on behalf of a Customer, we process it only on the Customer's documented instructions, as set out in our Data Processing Addendum.

6. AI Outputs and Human Decisions

Interviewa generates outputs using automated systems. Outputs may contain errors or omissions. Customers are responsible for reviewing outputs and making decisions. Interviewa does not make final admissions, hiring, or selection decisions.

7. Sharing Personal Data

We may share personal data with:

Service providers that help us run the website and Services, such as hosting, email delivery, customer support tools, and payments.
Professional advisers such as solicitors, auditors, and insurers.
Authorities where required by law or to protect rights and safety.
The Customer who invited the Participant, because the Customer controls the interview process and results.
OpenAI, when you connect ChatGPT to your account and ask it to work with your data (see section 8).

We do not sell personal data.

8. Connecting ChatGPT

Admins, staff and students can connect their Interviewa account to ChatGPT, an AI assistant provided by OpenAI. You sign in on Interviewa and approve the connection before ChatGPT can access anything. ChatGPT then acts as you, with your own permissions: staff see only their organisation's data, and students see only their own.

What is shared and why

When you ask ChatGPT to, Interviewa returns the data needed to answer you, which may include campaigns, candidate and student details, CV text, pipelines, interview results, transcripts and performance insights. ChatGPT can also create or update campaigns, groups and practice interviews, and send invites, after you confirm. The data is shared to carry out your request (performance of a contract, or the Customer's instructions where we are a processor).

Who receives it

Data returned to ChatGPT is received by OpenAI and handled under OpenAI's own terms and privacy policy, which apply to your use of ChatGPT. Where the data is Customer Data, the authorised user who connects ChatGPT directs us to share it on the Customer's behalf.

What we keep

Our connector does not store the data it passes on or your access tokens. Interviewa records each request (who made it, what was called, when and the result) and which assistant made any change, for security, rate limiting and audit. These records are kept as described under Data Retention.

Your controls

You can disconnect at any time in ChatGPT's app settings, or in Interviewa: students and trainers under Account Settings, Connected Apps, and hiring admins and staff under Organisation Settings, Integrations. You can contact [email protected] for help removing access, and exercise the rights described in this policy.

9. International Transfers

Our suppliers may process data outside the United Kingdom. Where this happens, we use appropriate safeguards under UK law, such as the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another lawful transfer mechanism.

10. Data Retention

We keep personal data only for as long as needed for the purposes described in this policy.

Typical retention examples include:

Enquiries: up to 12 to 24 months.
Customer account and billing records: for the subscription term and then up to 6 years for tax and audit needs.
Customer Data in the Services: retained according to the Customer's settings and contract, then deleted or returned after the service ends, subject to agreed retention windows and legal requirements.
Security logs: typically 90 to 180 days unless needed for investigation.

11. Security

We use reasonable technical and organisational measures to protect personal data, including access controls, encryption in transit, monitoring, and backups. No system is completely secure, and we cannot guarantee absolute security.

12. Rights

Where we are a controller, individuals may have rights including access, rectification, erasure, restriction, objection, and data portability. If processing is based on consent, individuals can withdraw consent.

Where we process data on behalf of a Customer, Participants should direct rights requests to the Customer. If a Participant contacts us, we may redirect them to the Customer and support the Customer where appropriate.

13. Complaints

Individuals can complain to the UK Information Commissioner's Office. We encourage contacting us first so we can try to resolve concerns.

14. Children

Interviewa may be used for education admissions. Customers are responsible for ensuring they have a lawful basis to invite Participants who are minors and for providing appropriate privacy information to them.

15. Changes

We may update this Privacy Policy. We will post the latest version on our website and update the effective date.

16. Contact

Email: [email protected]

Address: First Floor, 35 Livery Street, Birmingham, B3 2PB

Loading Privacy Policy...

Privacy Policy

Last updated: 27/10/2026

Company Details

Legal name: Innovation 13 Limited

Registered in: England and Wales

Company number: 16606645

Registered office: First Floor, 35 Livery Street, Birmingham, B3 2PB

Email: [email protected]

Support: [email protected]

1. Key Definitions

Customer an organisation or person that creates an account and uses the Services to run interviews.

Participant a person invited by a Customer to complete an interview.

Customer Data personal data processed by us on behalf of a Customer, usually Participant data and related outputs.

Outputs transcripts, summaries, scores, analytics, and similar results produced from interview responses.

2. Our Roles Under UK Data Protection Law

When we are a controller

We are a controller for personal data relating to:

Website visitors and enquiries.
Customer account owners and authorised users.
Billing, payments, and account administration.
Security monitoring, fraud prevention, and abuse prevention for our website and Services.
Service communications such as platform notices and security alerts.
Product improvement data that is aggregated or not specific to a Customer's instructions.

When we are a processor

3. Personal Data We Collect

A. Website visitors and enquiries

We may collect:

Name, email, phone number, company name, and role.
Message content in contact forms or emails.
IP address, device and browser details, pages viewed, and basic usage information.
Cookie preferences where applicable.

B. Customer account users

We may collect:

Name, work email, phone number, job title, and company name.
Account credentials and authentication data.
Security and audit logs such as IP address, login time, and key platform actions.
Support requests and communications.
Billing information and payment status. We do not store full card details because these are handled by our payment provider.

C. Participants and interview data

When a Customer invites a Participant, we may process:

Identity and contact details provided by the Customer such as name, email, and a candidate reference.
Video and audio captured during the interview.
Written answers and any documents the Participant uploads.
Transcripts and outputs created from the interview.
Technical information needed to deliver the interview such as IP address, device type, browser, timestamps, and session identifiers.

4. Camera On Requirement and Acceptance Before Interview Start

Participants are required to keep their camera on during the interview unless the Customer has explicitly enabled an accessibility exception or an alternative interview method.

We do not perform facial recognition or automated identity verification unless we clearly state that feature is in use for a specific interview.

5. How We Use Personal Data and Our Lawful Bases

When we are a controller

We use personal data for:

To operate our website and respond to enquiries (legitimate interests, and consent where required).
To provide the Services to Customers (performance of a contract).
To manage billing, payments, and accounts (performance of a contract and legal obligations).
To secure our website and Services and prevent misuse (legitimate interests and legal obligations where applicable).
To send service communications (performance of a contract and legitimate interests).
To improve the Services using feedback and aggregated usage insights (legitimate interests).
To market to business contacts where permitted, with an unsubscribe option (legitimate interests or consent where required).

When we are a processor

Where we process Customer Data on behalf of a Customer, we process it only on the Customer's documented instructions, as set out in our Data Processing Addendum.

6. AI Outputs and Human Decisions

7. Sharing Personal Data

We may share personal data with:

Service providers that help us run the website and Services, such as hosting, email delivery, customer support tools, and payments.
Professional advisers such as solicitors, auditors, and insurers.
Authorities where required by law or to protect rights and safety.
The Customer who invited the Participant, because the Customer controls the interview process and results.
OpenAI, when you connect ChatGPT to your account and ask it to work with your data (see section 8).

We do not sell personal data.

8. Connecting ChatGPT

What is shared and why

Who receives it

What we keep

Your controls

9. International Transfers

10. Data Retention

We keep personal data only for as long as needed for the purposes described in this policy.

Typical retention examples include:

Enquiries: up to 12 to 24 months.
Customer account and billing records: for the subscription term and then up to 6 years for tax and audit needs.
Customer Data in the Services: retained according to the Customer's settings and contract, then deleted or returned after the service ends, subject to agreed retention windows and legal requirements.
Security logs: typically 90 to 180 days unless needed for investigation.

11. Security

12. Rights

13. Complaints

Individuals can complain to the UK Information Commissioner's Office. We encourage contacting us first so we can try to resolve concerns.

14. Children

15. Changes

We may update this Privacy Policy. We will post the latest version on our website and update the effective date.

16. Contact

Email: [email protected]

Address: First Floor, 35 Livery Street, Birmingham, B3 2PB