Privacy Policy

Last updated: July 7, 2026

PrepEdge ("we", "us") provides AI-powered interview and resume preparation for enterprise technology sales and pre-sales professionals. This policy explains what personal data we collect, why, who we share it with, and your rights.

1. Who we are

PrepEdge is operated by Nicolai Imset, based in Norway. Contact: hello@prepedge.io.

2. What data we collect

• Account data — name, email address, hashed password, plan and credit balance.
• Content you submit — your CV/resume, job descriptions you paste or link, typed interview answers, roleplay transcripts, cover letters, and notes entered into role briefs, checklists, and debriefs.
• AI-generated output — role briefs, tailored resumes, cue cards, scorecards, and coaching feedback generated from the above.
• Usage and billing data — pages visited (via PostHog, cookieless — see §10), feature usage, AI cost/token logs, and credit-pack purchase records (via Stripe).

3. Why we process your data

We process your data to provide the core service (generate briefs, tailor your resume, run roleplay sessions), to process payments for credit packs, to improve and secure the service and detect abuse, and to send you account, billing, and security emails. Where GDPR applies, our legal basis is performance of a contract for the core service and payments, and legitimate interest for security, abuse detection, and service improvement.

4. Artificial intelligence processing

To generate role briefs, resume tailoring, cover letters, and roleplay scoring, the content you submit — your CV text, job descriptions, and typed interview answers — is sent to the Anthropic Claude API (Anthropic PBC, San Francisco, USA), which acts as our sub-processor. Under Anthropic's commercial API terms, they do not use data submitted via the API to train their models, and API data is not retained beyond processing each request.

AI-generated outputs (briefs, tailored bullets, scores, coaching) are probabilistic and may be inaccurate or incomplete. You are responsible for reviewing any output before relying on it or sharing it with a third party, such as a recruiter or interviewer.

5. Who we share data with

We use a small number of sub-processors to run PrepEdge. None of them use your data for their own purposes beyond providing their service to us.

• Anthropic (Claude API) — AI generation. Receives CV text, job descriptions, and typed answers.
• Neon — database hosting. Receives all account and content data.
• Railway — backend application hosting. Receives all account and content data, in transit and at rest.
• Vercel — frontend hosting. Receives no content data — static assets and browser-side requests only.
• Stripe — payment processing for credit packs. We never see or store your card details.
• Resend — transactional email (password reset, account emails). Receives your email address and name.
• PostHog — product usage analytics, configured without cookies.

6. International data transfers

Some of our sub-processors, including Anthropic, are based in the United States. Transfers outside the EEA are made under an appropriate safeguard, such as an adequacy decision, standard contractual clauses, or a certified data-transfer framework.

7. How long we keep your data

We retain your account, uploaded content, and AI-generated outputs for 24 months from your last login, or until you request deletion — whichever is earlier.

Financial records — transaction records (credit purchases, Stripe payment data) are retained for 5 years as required by Norwegian accounting law (bokføringsloven). After account deletion, these records are anonymised: your name and contact details are removed, but transaction amounts and dates are retained for legal compliance.

Usage and cost logs — retained for up to 24 months for billing accuracy and abuse detection, then deleted or anonymised.

8. Your rights

Under GDPR and similar laws, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate data. Most account and profile fields are editable directly in Account settings.
• Erasure — delete your account and all associated content. Available directly at Account → Delete account, effective immediately (except the anonymised financial records described in §7).
• Data portability — request an export of your data in a machine-readable format.
• Object or restrict — object to processing based on legitimate interest, or ask us to restrict processing in certain circumstances.

To exercise any of these rights, use the in-product tools where available, or contact us at hello@prepedge.io. We aim to respond within 30 days.

9. Sensitive information in your CV

Your CV may include information you've chosen to disclose that qualifies as special-category data — for example, details revealing health conditions, disability, religion, or similar. We do not ask for this information and do not analyse or extract it specifically; we process only what you choose to include. We recommend you do not include information in your CV that isn't necessary for the roles you're applying to.

10. Cookies

PrepEdge uses PostHog for product analytics, configured to run without cookies — it uses local storage rather than a persistent cross-session identifier stored in a cookie.

11. Changes to this policy

We will post any material changes to this policy on this page and, where the change is significant, notify you by email.

12. Contact

Questions about this policy or your data: hello@prepedge.io.