Privacy Policy
Effective date: February 14, 2026
1. Information We Collect
CHAMBA collects the following categories of personal information:
- Contact information: email address and name (provided by your employer when inviting you)
- Employment context: job title, department, and role category
- Interview responses: your answers to interview questions, including free-text responses about your professional experience
- AI-generated data: extracted skills, skill categories, and a narrative summary generated by AI analysis of your responses
- Consent records: your consent decisions, timestamps, and any withdrawal of consent
- Technical data: IP address, browser user-agent, and timestamps (collected at the point of consent and authentication)
2. How We Use Your Information
We use your personal information for the following purposes:
- To conduct skills assessment interviews on behalf of your employer
- To process your responses using artificial intelligence to identify professional skills
- To generate a skills summary shared with the employer who invited you
- To send you interview-related communications (invitations, reminders, results)
- To maintain audit trails for legal compliance
3. AI Processing
Your interview responses are processed by artificial intelligence (Anthropic's Claude) to extract professional skills and generate a skills profile summary. The AI identifies skills mentioned in your answers, categorizes them, and produces a narrative summary. These results are shared with the employer who invited you. AI results are advisory — your employer makes all employment decisions independently.
4. Third-Party Service Providers
We share personal information with the following service providers:
- Anthropic: interview responses are sent for AI-powered skill extraction and summary generation
- Resend: email addresses and notification content for delivering interview invitations, reminders, and results
- Supabase: database hosting, authentication, and data storage
- Sentry: error monitoring (personal information is scrubbed from error reports)
- Inngest: task orchestration (receives session identifiers only, no personal information)
- Vercel Analytics: cookieless web analytics for page performance and usage metrics. Vercel does not track individual users across websites. IP addresses are hashed and not stored in identifiable form.
We do not sell or share your personal information with third parties for their own marketing purposes.
5. Data Retention
- Interview sessions expire after 30 days if not completed
- Completed interview data (responses, skills, summaries) is retained for up to 2 years, after which it is permanently deleted
- Consent records and audit logs are retained permanently as required for legal compliance
- Email suppression lists are retained permanently for CAN-SPAM compliance
6. Your Rights
You have the right to:
- Withdraw consent: you can withdraw any consent at any time during the interview process. Withdrawing a required consent will end your interview.
- Request access: you can request a copy of the personal information we hold about you.
- Request deletion: you can request that we permanently delete your personal information.
- Request correction: you can request correction of inaccurate personal information.
- Unsubscribe from emails: every email includes an unsubscribe link.
To exercise any of these rights, contact us at privacy@chamba.app.
7. Cookies and Tracking
CHAMBA uses only essential authentication cookies (session tokens) required for the platform to function. We do not use advertising cookies or third-party tracking technologies that follow you across websites. We use Vercel Analytics, a cookieless analytics service, to measure page performance and aggregate usage patterns. Vercel Analytics does not use cookies, does not track individual users, and hashes IP addresses so they cannot be used to identify you. We do not respond to Do Not Track browser signals because we do not track users across websites.
8. Security
We implement appropriate technical and organizational security measures to protect your personal information, including encryption in transit (TLS), row-level database security, content security policies, and PII scrubbing from error logs. Access to personal information is restricted to authorized personnel.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.
10. Contact
For questions about this privacy policy or your personal information, contact us at privacy@chamba.app.