Privacy Policy
Effective September 27, 2026
This Privacy Policy explains how SWE Insider (“we,” “us,” or “our”) handles personal information when you visit our website, create an account, purchase access, or use our interview preparation service. For privacy questions or requests, email support@sweinsider.io.
1. Information we collect
- Account information: your name, email address, account identifier, sign-in provider, email verification status, and security settings. Google sign-in supplies the account identity, name, and email you authorize it to share; it does not give us access to your Gmail messages or Google Drive files.
- Preparation information: questions you save, completion status, practice notes, and associated timestamps. These records are associated with your account and are not made public.
- Purchases: your Stripe customer identifier, chosen plan, subscription and payment status, invoice references, payment dates, amounts, and refunds or disputes. We may retrieve limited payment details, such as card brand or bank name and the last four digits, to show your receipt or help with billing.
- Contributions and communications: interview experiences you submit, their company and interview details, review status, support messages, and information you provide when making a privacy or content-rights request. If you previously requested product updates, we retain your email and the associated request.
- Technical information: our hosting, identity, and payment providers process IP addresses, browser and device information, request timestamps, and security or diagnostic events to deliver and protect the service. Our application logs record operational errors and event identifiers.
- Content-source information: licensed providers and publicly available interview reports may contain contributor or professional information. We retain source evidence privately for permission checks, editorial review, attribution records, and duplicate detection. We do not publish identifying contributor information merely because it appears in a source.
Please do not include other people's personal information, confidential employer information, government identifiers, or sensitive financial or health information in practice notes or submissions.
2. How we use information
We use information to create and secure accounts; verify paid access; provide saved questions, notes, and progress; process billing and cancellations; respond to support and privacy requests; review contributions and maintain the question bank; investigate abuse; correct errors; and meet legal, tax, and accounting obligations. Account and payment notices are service communications. We use an email supplied for optional product updates only for the updates requested, and you can withdraw that request by contacting us.
Where a privacy law requires a legal basis, we process information as necessary to perform our contract with you, comply with legal obligations, or pursue legitimate interests in security, service maintenance, and editorial administration, subject to your rights. We rely on consent where required for optional communications or processing. We do not make hiring or other legally significant decisions about you.
3. Who receives information
Authorized personnel and service providers receive information needed for their work. Amazon Web Services hosts the application, database, authentication, backups, and operational logs. Google handles Google sign-in when you select it. Stripe processes payments, invoices, subscriptions, fraud checks, and the billing portal.
Payment details are entered in Stripe's hosted checkout. Our application does not store complete card numbers, card security codes, or bank sign-in credentials. If bank payments are offered and you choose to connect a bank account, Stripe and its financial partners handle the connection and authorization. SWE Insider requests payment-method permission, not permission to read your balances or transaction history. Stripe and Google also process information for their own purposes under their respective Stripe Privacy Policy and Google Privacy Policy.
Email sign-in credentials are managed by AWS Cognito. Password-change requests pass through our authenticated API to Cognito; passwords are not saved in our application database or intentionally written to logs.
We may disclose information when legally required, to protect people or the service, or in connection with a merger, acquisition, or transfer of the business, subject to applicable confidentiality and privacy protections. Published contributions are accessible to members; private account records and practice notes are not part of those publications.
We do not sell personal information or share it for cross-context behavioral advertising. Our website does not include advertising pixels, third-party marketing analytics, or session-replay tools. Payment and identity providers may use their own security and service technologies on their pages.
4. Browser storage and cookies
We use browser session storage for authentication tokens and temporary sign-in, checkout, and return-navigation state. Local storage remembers your color-theme preference. Authentication and payment providers may set cookies on their own services. You can clear browser storage or block cookies through your browser, but doing so may sign you out or prevent sign-in and checkout from working. Saved preparation records are stored with your account, not only on your device.
We do not use browser activity for cross-site advertising. Because we do not sell or share information for that purpose, a Global Privacy Control signal does not need to change those practices. We do not otherwise change essential service processing in response to a browser's Do Not Track signal.
5. Retention and deletion
We retain account and preparation records while your account remains open, including when a monthly membership is inactive, so you can manage your records or resume preparation. You can export your account records and request deletion in Account → Your data. Profile and security settings let you correct account details. Contact us if you cannot sign in or need help exercising a right.
The self-service deletion flow requires an active monthly subscription to end first. Cancel renewal in Billing; once the paid subscription ends, complete account deletion. You may also contact us directly with a deletion request. A remaining subscription does not waive any deletion right you have under applicable law.
Completed account deletion removes your sign-in identity, profile details, notes, progress, and account-associated submission records from the active application. We retain a minimal deletion marker and may retain payment-reference mappings, security evidence, and records needed to meet legal obligations, resolve disputes, or prevent an erased account from being restored accidentally. Stripe may retain payment and invoice records under its own legal obligations and retention practices.
Application operational logs have a 14-day retention setting. Rolling database recovery copies can contain deleted records until they age out of the recovery window, which is up to 35 days. Records preserved separately for an actual security incident, legal obligation, or dispute are kept only as long as that purpose requires. A backup restore must preserve completed deletion requests.
Published editorial material may remain after an account is deleted when it no longer identifies you and we are entitled to retain it. Private source evidence and permission records are retained while needed to support the content's use or resolve rights claims. Support and privacy correspondence is retained for handling the request and any related legal or security need. You can ask us to remove identifying information from a contribution or source record.
6. Security and international processing
We use access controls, authenticated requests, encrypted transport, and encrypted cloud storage to protect information. Access to account records is restricted by account identity. No online service can guarantee absolute security; keep your sign-in credentials private and report suspected unauthorized access promptly.
Our application is hosted on AWS in the United States. Service providers may process information in other countries. When applicable law requires safeguards for an international transfer, we must use an appropriate lawful transfer mechanism; your use of the service does not waive those requirements. Contact us for information about safeguards relevant to your data.
7. Your privacy rights
Depending on your location and the law that applies, you may have rights to know about or access personal information, obtain a portable copy, correct inaccuracies, request deletion, restrict or object to processing, withdraw consent, or appeal a decision about a privacy request. You may also have rights concerning sale, advertising-related sharing, or certain uses of sensitive information; we do not sell information or use it for cross-context behavioral advertising. We do not use sensitive information to infer characteristics about you.
Use the account controls above or email support@sweinsider.io with your request. We will verify your identity using information reasonably needed for that request, respond within the period required by applicable law, and explain any permitted exception. An authorized agent may contact us where allowed; we may need evidence of authorization and identity verification. You do not need a paid membership to make a privacy request, and we will not unlawfully discriminate against you for doing so.
If a request is denied, you can ask us to reconsider by replying with “Privacy appeal.” You may also complain to the privacy regulator where you live, including your local data protection authority where applicable. This policy does not limit rights granted by law.
8. Age requirement
SWE Insider is intended for people aged 18 or older. We do not knowingly collect personal information from children under 13. If you believe a child has supplied information, contact us so we can investigate and take appropriate action.
9. Changes and contact
We will update the effective date when this policy changes. For material changes, we will provide an appropriate notice through the service or your account email and obtain consent when required. Changes do not authorize a materially different use of previously collected information where law requires a new choice or consent.
Privacy contact: SWE Insider. Email: support@sweinsider.io.