Privacy Policy

Overview

MockMate provides AI-powered preparation tools for interviews, meetings, assessments, academic exams, certification practice, resume-based practice, live transcription, screenshots, inspected window text, reports, credits, subscriptions, and the MockMate Windows app.

This Privacy Policy explains what personal data we collect, why we use it, how we protect it, when we share it, and how you can exercise privacy rights.

Who This Policy Applies To

This policy applies to:

• Visitors using mock-mate.com and related public pages
• Registered users of MockMate web app
• Users of the MockMate Windows/native app
• Admin users and support operators
• People who receive MockMate emails, OTPs, reports, receipts, or campaign messages

Information We Collect

We collect information you provide directly:

• Account details such as name, email address, password hash, OTP verification status, profile details, and login metadata
• Resume and document uploads, extracted text, parsed skills, education, experience, projects, certifications, and context documents
• Session setup details such as role, company, job description, interview type, meeting agenda, exam type, difficulty, duration, selected resume, and selected context document
• Practice answers, Live-session questions, AI responses, scores, reports, notes, screenshots, inspected window text, and transcription text where you use those features
• Payment details needed to process credit packages, subscriptions, promo codes, receipts, refunds, disputes, and billing support
• Support messages, chatbot conversations, feedback, uploaded app diagnostics, and communication preferences

We also collect information automatically:

• Device, browser, operating system, app version, IP address, approximate location, language, timezone, crash or error events, and security logs
• Desktop app diagnostics from the MockMate Windows app: anonymous, content-free crash and hang reports, app performance (CPU and memory use), connection, speech-service and audio-device health, and feature timings such as how long an answer takes to appear. These never include what you say, see or type, your screen, transcripts, answers, file names, window titles, or the apps you run.
• Usage events such as pages visited, buttons used, session starts, session completion, download events, credit usage, and admin actions
• AI provider usage metadata such as provider, model, token counts, audio seconds, latency, status, and estimated cost

Sensitive Content

MockMate may process sensitive or confidential content if you upload it or enable a feature that captures it. This can include resumes, identity-like contact details, interview content, business meeting content, screenshots, window text, voice transcription, or exam preparation material.

Only upload or capture content that you have the right to use with MockMate. Avoid uploading government IDs, payment card numbers, health records, highly confidential employer data, or other sensitive information unless it is necessary for your session and you understand the risks.

How We Use Information

We use data to:

• Create, secure, and verify your account
• Provide resume parsing, document context, Live sessions, Practice sessions, reports, downloads, and AI assistance
• Generate session-specific questions, answers, scoring, feedback, and reports using your selected resume, context documents, transcription, screenshots, and session details
• Process payments, credits, subscriptions, promo codes, invoices, refunds, and billing emails
• Send OTPs, verification emails, password reset emails, service notifications, campaign emails where permitted, and support replies
• Improve reliability, transcription quality, AI quality, fraud prevention, product analytics, and security
• Detect abuse, unauthorized access, payment fraud, spam, automated scraping, policy violations, and service misuse
• Comply with applicable legal, tax, accounting, payment, and regulatory requirements

AI Processing

MockMate uses AI providers and transcription providers to power responses and analysis. Depending on configuration and selected features, session content may be sent to providers such as OpenAI, DeepSeek, Deepgram, or similar infrastructure providers.

AI inputs may include:

• Resume and context document text selected for the session
• Session title, company, role, job description, difficulty, mode, agenda, exam style, and other session fields
• Live transcription text
• Screenshot images and inspected window text
• User prompts and previous Q&A history
• For the shared question bank, the screened text of questions interviewers asked in your Live sessions (see "Shared Question Bank")
• For Headshots, the photo you choose to upload (see "Headshots")

AI outputs may be inaccurate or incomplete. You are responsible for reviewing outputs before relying on them in interviews, meetings, exams, work, or other important settings.

Google User Data and Limited Use

MockMate offers optional Google features that you choose to enable: signing in with Google, a Gmail Add-on that turns an interview email you open into an editable session draft, and, only if you explicitly connect it, automatic import of interview emails.

What Google user data we access, and only when you use these features:

• Google Sign-In: your Google account's basic profile and verified email address, used to identify your MockMate account.
• Gmail Add-on: only the single email message you explicitly import — its subject, sender, date, body, and supported job-description attachments (PDF, DOCX, TXT). We do not read the rest of your mailbox; only the message you press "Create session" on is sent to MockMate.
• Gmail auto-import (only if you connect it): read-only access to your Gmail used solely to detect incoming interview emails and pre-fill session drafts.

How we use it: Google user data is used only to pre-fill an editable interview-session draft that you review. Auto-import creates drafts only and never starts a session on its own. If you choose to create a session from a draft, the session content you keep (which may include text from that email) is processed to generate your interview preparation as described in "AI Processing" above.

MockMate's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not sell Google user data; we do not use it for advertising; we do not use it to develop, improve, or train generalized or foundation AI/ML models; we do not allow humans to read it except with your consent, for security, to comply with applicable law, or when the data has been aggregated and anonymized; and we transfer it only to provide or improve these user-facing features for you, to comply with law, or in connection with a merger or acquisition. You can disconnect automatic Gmail import from your MockMate account or revoke Google access from your Google account's security settings, as explained below.

Gmail storage, disconnecting and deletion

When you import an email, MockMate stores an editable session draft linked to your account. The record can include Gmail message and thread identifiers, subject, sender, message date, a source excerpt, extracted session details, attachment names and extracted attachment text used in the draft. Message identifiers help recognise existing imports and avoid duplicate drafts.

If you separately enable automatic Gmail import, MockMate stores an encrypted refresh token and metadata needed to maintain the watch. Disconnecting removes MockMate's stored refresh token and marks the connection inactive. It does not delete drafts already imported. You can also remove MockMate's permission through your Google account's connected-app controls; disconnecting inside MockMate does not itself establish that Google's remote authorization was revoked.

Marking a draft dismissed changes its status; it does not erase its stored data. Imported drafts and session material have separate lifecycles. Contact admin@mock-mate.com to request removal of imported Gmail data. The current product does not apply a dedicated automatic expiry to imported Gmail drafts.

Shared Question Bank

MockMate keeps a shared bank of practice questions built from real interviews. From Live sessions created on or after 2026-10-13, the questions an interviewer asked you can contribute to it. This is on by default and you can turn it off at any time.

What is used: only the questions the interviewer asked in a completed Live session. Your answers, your own speech, screenshots, window text, your resume and context documents, notes and reports are never added to the bank. Practice sessions and test accounts are not used.

How it is processed: each question is first screened automatically to remove personal and company details (names of people, the company and employers involved, schools, projects, e-mail addresses, links, phone numbers, amounts and ID-like numbers, using the details of your own account, session, job description and resume to find them). The screened question is then rewritten by an AI provider (OpenAI) into a general practice question, and the rewrite is screened again. A question that still contains any of those details is discarded, not stored.

What is shared: only the rewritten, screened question text, broad labels (category, role family and seniority level) and a count of how many members were asked it. The shared bank never contains your name, account, session, company, answers or transcripts, and it does not show who contributed a question. To count members and to honour opt-outs, MockMate keeps a separate, restricted record of which account contributed which bank question; it is never shown in the bank.

Who can see it: members with the Question Bank add-on see questions that at least two different members were asked. A public list, if MockMate publishes one, shows only questions at least three different members were asked. MockMate may also use bank questions as starting points for practice sessions. MockMate staff can hide or remove any bank question.

Limits: automated screening and rewriting reduce identifying detail but cannot guarantee that every identifying detail is detected. Only share interview questions you are allowed to share. If you see a bank question that identifies someone, write to privacy@mock-mate.com and we will remove it.

Your choice: turn it off in your MockMate account under Profile > Privacy ("Add the questions you were asked to the shared question bank"). Turning it off stops future contributions and immediately removes your past contributions from the bank; a question that other members were also asked may remain, counted without you. Turning it back on applies only to sessions created afterwards. "Delete stored data" in the same place removes your contributions without changing the setting, and requesting account deletion removes them immediately and turns contribution off.

Where GDPR-style laws apply, the legal basis is MockMate's legitimate interest in providing realistic practice material; you can object at any time by turning it off.

Headshots

Headshots is an optional Prepare tool that creates a professional portrait from a photo you upload. It runs only when you upload a photo, confirm that you are an adult and that it is your own photo, and agree to send it to OpenAI.

What is processed: the photo you upload and the portrait style you choose. Before anything is stored or sent, MockMate removes the photo's metadata (such as location, camera and device details), keeping only its orientation. The photo is sent to OpenAI's image generation service, which returns the generated portrait. OpenAI processes the photo and the portrait under its API terms and data-usage policies, which may include keeping them for a limited period for abuse monitoring; deleting them in MockMate does not change OpenAI's retention.

Retention: MockMate stores your photo and the generated portrait encrypted. The uploaded photo is deleted from MockMate when it is sent for generation, and in any case within 24 hours. The generated portrait can be downloaded until 24 hours after you submitted the photo and is then deleted automatically. The job record, which holds no images (only its status, style and times), is deleted after 90 days. You can delete a photo and its result at any time from the Headshots page.

MockMate does not use your photos or portraits to train models or to identify you, and does not share them with third parties other than the AI provider that generates the portrait and the infrastructure providers that store them encrypted.

Voice Practice

Voice practice is an optional practice feature. When you turn it on, you can hear the practice question spoken aloud and answer out loud instead of typing. It runs only in practice sessions you start yourself; it is never used in live sessions.

What is processed: to read a question aloud, the practice question's text is sent to our speech provider (OpenAI) to generate audio. To turn your spoken answer into text, your microphone audio is sent to our transcription provider (Deepgram or Soniox, depending on configuration). Your voice answer then becomes an ordinary practice answer, the same as if you had typed it.

Retention: your voice audio is processed only to produce the transcript and is not stored by MockMate; the generated question audio is likewise not retained beyond delivering it to you. Only the transcript is kept, as your practice answer, under the same retention as other session Q&A. Every spoken part also appears on screen, so you can use text instead of voice at any time.

Phone companion and browser notifications

Phone companion shows the latest saved questions and answers from a Live session on a second device signed in to the same MockMate account. You choose the session and create a one-use QR link. The link expires after two minutes. A confirmed reader expires after two hours and loses access when the session ends or you revoke it.

The reader receives the session title and up to eight recent saved question-and-answer pairs. The companion page does not capture microphone or screen content. It keeps displayed answers in page memory. Its service worker stores only the offline page and icon, not session answers. Normal session records remain subject to the session retention described below.

Optional browser notifications use the push service supplied by your browser, such as Google, Mozilla, or Apple. If you enable alerts and grant browser permission, MockMate stores the subscription endpoint and encryption keys with the paired reader. MockMate sends only a generic notice that a new answer is ready. It does not put the question, answer, session title, or session identifier in that push payload. Opening the notice returns you to MockMate, where account and reader checks apply again.

Disconnecting or revoking phone access, or creating a replacement QR code, removes the paired reader's stored push subscription. Ending the session or reaching the reader's expiry stops access and future notifications, but does not itself delete a stored subscription. You can revoke browser notification permission through your browser or device settings.

Optional product analytics and error reporting

If optional analytics are enabled and you consent, MockMate can send a limited set of product events and performance measurements to its PostHog EU project. These contain an event name, a random browser identifier represented as a hash, an event identifier, and a numeric measurement when relevant. The optional integration does not send account identifiers, email addresses, raw page URLs, session content, or document content. It does not enable PostHog session replay.

Optional browser error reporting uses MockMate's GlitchTip service over HTTPS. It sends only a fixed error category and a content-free fingerprint through the server integration. The outgoing event does not include a browser stack trace, page URL, account identifier, question, answer, transcript, or screenshot.

These optional integrations respect the analytics consent choice and supported Do Not Track and Global Privacy Control signals. They do not run on phone-companion or Live browser-session routes. Withdrawing consent stops future optional events. Events already accepted by a processor are not recalled by changing that setting. Contact privacy@mock-mate.com for a request about data already sent.

The website still processes the authentication, security, billing, and service records needed to run MockMate, as described elsewhere in this policy.

Referrals and campus practice plans

If you use referrals, MockMate records referral codes, attribution between accounts, eligibility and review status, qualifying purchase references, and credit-ledger records for approved rewards. These records support reward administration, duplicate prevention, billing review, and abuse checks. Referral participants do not receive each other's payment details through the referral summary.

To prevent repeat rewards, MockMate keeps a SHA-256 hash of the referred email address after normalizing equivalent email forms. This hash remains after account deletion while direct account links are removed. It currently has no dedicated automatic expiry. Contact privacy@mock-mate.com about retained referral records.

If your institution provides a campus practice plan, MockMate records the institution, plan dates and seat limit, membership, and the managers authorized to administer that plan. Campus managers can administer their own institution's practice seats. A campus practice seat does not itself grant a personal Live-session credit balance.

Referral and campus records follow account, billing, security, and audit retention as applicable. This policy does not set reward amounts or guarantee that a referral or campus offer is available.

Payments

Payments are processed through configured third-party payment providers such as Dodo Payments, Cashfree, or other enabled providers. MockMate does not store full card numbers, CVV, UPI PINs, or net banking passwords. Payment providers may process payment method details, fraud signals, dispute data, and transaction records under their own terms and privacy notices.

Cookies And Similar Technologies

We use cookies, localStorage, sessionStorage, pixels, and similar technologies for authentication, preferences, security, analytics, and product functionality. See our Cookie Policy for details.

Sharing Information

We do not sell personal information. We may share information with:

• AI, transcription, hosting, database, analytics, email, logging, security, and payment service providers
• Support and operations personnel who need access to resolve issues or administer the service
• Professional advisors, auditors, accountants, banks, payment processors, and legal counsel
• Authorities, regulators, courts, or law enforcement where required by law or needed to protect rights, safety, security, or prevent fraud
• A successor entity if MockMate is involved in a merger, acquisition, restructuring, financing, or sale of assets

International Processing

Your information may be processed in India, the United States, the European Economic Area, or other locations where MockMate or its service providers operate. We use contractual, technical, and organizational safeguards appropriate to the nature of the data and the provider.

Data Retention

We keep data only as long as reasonably needed for the purposes described in this policy, including service operation, account management, security, legal compliance, tax/accounting, dispute handling, and audit needs.

Typical retention periods:

• Account profile and authentication records: while the account is active and for a reasonable period after closure
• Resume and document uploads: until deleted by the user/admin or account deletion, subject to backups and legal retention
• Session history, Q&A, screenshots, transcription, reports, and scores: until deleted or account closure, subject to product retention controls and legal obligations
• Payment, invoice, refund, credit, and subscription records: retained for tax, accounting, audit, dispute, and regulatory periods
• Security logs and abuse-prevention records: retained as needed for security, fraud prevention, and legal defense
• Desktop app diagnostics: up to 30 days; device hardware summaries: up to 180 days; app health events: up to 90 days
• Shared question bank: rewritten question text stays in the bank while at least one member's contribution remains; content-free processing records are kept for up to 90 days
• Headshots: the uploaded photo until it is sent for generation (at most 24 hours); the generated portrait until 24 hours after the photo was submitted; job records without images for 90 days
• Voice practice: voice audio is not stored (processed in memory to produce the transcript, then discarded); the transcript is kept as a practice answer under session Q&A retention
• Backups: retained on a rolling basis and deleted through normal backup lifecycle

Security

We use reasonable safeguards including encryption in transit, access controls, authentication, least-privilege admin access, audit logging, secure token handling, private screenshot storage, provider-side security controls, and monitoring. No system is perfectly secure, and you should keep your password, OTPs, and devices protected.

Your Choices And Rights

Depending on your location, you may have rights to:

• Access personal data we hold about you
• Correct inaccurate data
• Delete certain data
• Export or receive a copy of certain data
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Opt out of marketing emails
• Lodge a complaint with a relevant authority

You can turn off desktop app diagnostics at any time in the MockMate app under Settings → "Share anonymous diagnostics". When it is off, the app stops sending them and deletes any it has not sent yet.

You can turn off contribution to the shared question bank at any time under Profile > Privacy; turning it off removes your past contributions (see "Shared Question Bank").

To make a request, contact privacy@mock-mate.com. We may need to verify your identity before acting on a request.

India DPDP Notice

Where India's Digital Personal Data Protection framework applies, MockMate acts as a data fiduciary for account and service data it determines how to process. You may request access, correction, erasure, grievance redressal, and withdrawal of consent where applicable. Contact privacy@mock-mate.com or grievance@mock-mate.com.

EEA/UK Notice

Where GDPR-style laws apply, our legal bases may include contract performance, legitimate interests, consent, legal obligations, and establishment or defense of legal claims. You may contact privacy@mock-mate.com to exercise data protection rights.

California Notice

Where California privacy laws apply, we do not sell personal information or share it for cross-context behavioral advertising as those terms are commonly used under the CCPA/CPRA. You may request access, deletion, correction, and information about categories of data collected and disclosed.

Children's Privacy

MockMate is not intended for children under 13. Users under 18 may use MockMate only with appropriate parental, guardian, school, or institutional authorization where required by law.

Changes

We may update this policy as our product, providers, legal obligations, or business practices change. Material updates will be reflected by changing the version and effective date.

Version 2.5 (published 2026-10-19, effective 2026-10-19) adds phone companion, optional browser notifications, optional PostHog EU analytics, GlitchTip error reporting, referrals, and campus practice plans.

Contact

Privacy: privacy@mock-mate.com

Legal: legal@mock-mate.com

Grievance: grievance@mock-mate.com