Privacy Policy

Last updated: February 10, 2026

Alston Analytics, doing business as MockMic (“we,” “our,” or “us”), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our interview practice platform at mindcast.fm (the “Service”).

1. Information We Collect

1.1 Account Information

When you sign in with Google OAuth, we receive and store:

• Full name and email address
• Profile picture URL (optional, provided by Google)
• Google account identifier (used solely for authentication)

We do not receive or store your Google password. Authentication is handled entirely through Google’s OAuth 2.0 protocol.

1.2 Practice Content

When you use the Service, you may create or provide:

• Your answers — the text of the answers you give to interview questions. If you answer by speaking, your browser’s built-in speech recognition converts your speech to text and we receive only that text. We do not record or store audio of your voice.
• Job descriptions — any job posting or role description you paste in so questions can be tailored to it
• Session details — the role and company you are practising for, and an optional interview date
• Generated feedback — the scores, written feedback, detected filler words and rewritten answers the AI produces for each answer you give

1.3 Practice Analytics

We collect data about your practice activity, including:

• Number of questions answered and sessions completed
• Scores over time across structure, specificity, confidence and conciseness
• Answer duration and whether an answer was spoken or typed
• Practice streaks and achievement progress

1.4 Technical and Usage Data

We automatically collect:

• IP address (for security, rate limiting, and fraud prevention)
• Browser type and version
• Device type and operating system
• Referring URL and pages visited
• Timestamps of requests

1.5 Payment Information

Payment processing is handled entirely by Stripe. We never receive or store your full credit card number. From Stripe we receive:

• Stripe customer identifier
• Subscription status and plan tier
• Last four digits of your payment method (for display only)

2. How We Use Your Information

We process your information for the following purposes:

• Service delivery: Generating interview questions and follow-ups, scoring your answers, and showing your practice history
• Personalization: Tailoring content recommendations, knowledge graphs, and learning paths to your interests
• Account management: Authenticating your identity, managing subscriptions, and enforcing usage limits
• Analytics and improvement: Understanding aggregate usage patterns to improve content quality and platform features
• Communication: Sending essential service updates, security alerts, and subscription-related notices
• Safety and compliance: Preventing fraud, enforcing our Terms of Service, and complying with legal obligations

3. AI Processing Disclosure

MockMic uses artificial intelligence to generate interview questions, ask follow-up questions and score your answers. When you practise, the following occurs:

• The text of your answer is sent to large-language-model (LLM) APIs so that follow-up questions and scored feedback can be generated. This is the core function of the Service and cannot be switched off while still using it.
• Any job description you paste in is also sent to those APIs so questions can be tailored to the role.
• Interview questions are read aloud using a text-to-speech service. If you answer by speaking, transcription is performed by your browser’s built-in speech recognition — in most browsers this means your speech is sent to the browser vendor (for example Google in Chrome) under their privacy policy, not ours.
• We use multiple AI providers (see Section 5). Each processes data according to its own privacy and data-use policies.

What we do not send to AI providers: your name, email address or payment information. Answers are transmitted without your account identity attached. Do not include information in an answer that you would not want processed by a third-party AI provider, and do not paste material confidential to a current or former employer.

4. Data Storage and Security

4.1 Where Your Data Lives

• Database: Your account data, practice sessions, answers and feedback are stored in a PostgreSQL database accessed through Prisma Accelerate, hosted in the United States.
• Application hosting: The web application runs on Vercel’s edge network, with serverless functions executing in US regions.

4.2 Security Measures

We implement the following security safeguards:

• All data in transit is encrypted via TLS/HTTPS
• Database connections are encrypted and access-controlled
• Authentication is handled via OAuth 2.0 (no passwords stored)
• Session tokens are HTTP-only, secure, and scoped
• API routes enforce authentication and rate limiting
• Administrative access is restricted and audited

No system is 100% secure. If you discover a security vulnerability, please report it to info@alstonanalytics.com.

5. Third-Party Services

We rely on the following third-party services to operate MockMic. Each processes data under its own privacy policy:

We do not sell, rent, or trade your personal data to any third party for marketing or advertising purposes.

6. Your Answers and Feedback

Your answers are the most sensitive thing the Service holds. To be exact about how they are handled:

• Your answers and feedback are private to your accountand are not shown to other users.
• The text of your answers is sent to our AI providersin order to generate follow-up questions and scored feedback. This is how the Service works and cannot be disabled while using it. See Section 3.
• We do not use your answers to train our own models, and we do not sell them or share them with employers, recruiters or advertisers.
• We do not record or store audio of your voice. Spoken answers are converted to text by your browser before they reach us.
• You may delete any session, and all of its answers and feedback, at any time from your account.

7. Visibility of Your Practice Data

• Your practice sessions, answers and feedback are private by default and visible only to you.
• Nothing you write or say is published, listed publicly, or indexed by search engines.
• If you generate a score card image to share, it contains only the scores and summary shown on it — never your answer text — and it is created only when you ask for it.

8. Cross-Session Memory

We store conversation context across sessions to provide continuity in your learning experience. This means the platform can recall topics you’ve explored, insights you’ve generated, and questions you’ve asked in previous sessions. Plus and Pro users receive deeper memory, including longer context windows and richer session summaries.

You can delete all conversation data at any time from your account settings. Deleting conversation data permanently removes your session history, insights, and cross-session context.

9. AI Model Providers

Interview questions, follow-up questions and scored feedback are generated using AI language models from multiple providers, including Anthropic, OpenAI and Google. Your answer text and any job description you paste are sent to these providers for processing. Each provider operates under its own data processing agreements (see Section 5 for the full list).

We do not use your data to train AI models. Our agreements with AI providers explicitly prohibit the use of your inputs and outputs for model training. Your prompts are processed solely to generate your requested content and are not retained by providers beyond the duration needed to fulfill the request.

10. Voice Recording

If you use voice input (e.g., the “Talk It Through” feature), audio is processed in real-time and is not stored after transcription. Voice data is transmitted to a speech-to-text service, converted to text, and then discarded. The resulting text transcript is treated the same as typed input and is subject to the same privacy protections described in this policy.

We do not create voice profiles, store voice recordings, or use your voice data for any purpose other than real-time transcription.

11. Generated Feedback

Scores, written feedback, rewritten answers, detected filler words and progress summaries are generated from your practice sessions. These are stored in your account and are visible only to you unless you explicitly choose to share a score card.

Artifact generation is subject to daily limits based on your subscription tier. Artifacts are derived from content you have already provided or consumed within the platform. You may delete individual artifacts or all artifact data from your account at any time.

12. Cookies and Local Storage

MockMic uses a minimal set of cookies and browser storage:

• Authentication session cookie (essential) — maintains your signed-in state. HTTP-only, secure, and scoped to our domain.
• Locale preference cookie (functional) — stores your language preference (e.g., English or Spanish).
• Theme preference (localStorage) — remembers your light/dark mode setting.
• Knowledge-graph layout cache (localStorage) — saves your graph visualization layout for performance.

We do not use third-party tracking cookies, advertising cookies, or fingerprinting technologies. You can clear cookies and local storage at any time through your browser settings.

13. Your Rights

Regardless of your location, we provide the following rights in alignment with GDPR, CCPA, and other data-protection frameworks:

• Right of access: Request a copy of all personal data we hold about you.
• Right to rectification: Correct inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your account and all associated data.
• Right to data portability: Export your data (practice sessions, answers, feedback and analytics) in a machine-readable format.
• Right to restrict processing: Limit how we process your data in certain circumstances.
• Right to object: Opt out of specific data processing activities.
• Right to withdraw consent: Revoke consent at any time where processing is based on consent.

To exercise any of these rights, email us at info@alstonanalytics.com. We will respond within 30 days. You may also delete individual practice sessions and their answers directly from your account at any time.

14. Data Retention

• Active accounts: We retain your data for as long as your account is active and you use the Service.
• Account deletion: Upon account deletion, we remove your personal data, practice sessions, answers, generated feedback and practice analytics within 30 days. Anonymised, aggregate analytics may be retained for product improvement.
• Legal requirements: We may retain certain records where required by law (e.g., billing records for tax compliance).

15. Data Sharing

We share your data only in the following limited circumstances:

• Infrastructure providers: Companies that host and operate the Service (Vercel, Prisma, cloud providers) in their capacity as data processors.
• AI providers: Topic/prompt text only (no personal data) for content generation.
• Payment processor: Stripe, for subscription management and billing.
• Legal compliance: When required by law, subpoena, or court order, or to protect the safety and rights of our users.

We do not sell your personal data. We do not share your data with advertisers. We do not engage in data brokering.

16. International Data Transfers

Your data may be processed in the United States or in other jurisdictions where our service providers operate. When data is transferred outside of your jurisdiction, we ensure appropriate safeguards are in place, including standard contractual clauses where applicable.

17. Children's Privacy

MockMic is not intended for users under 13 years of age (or 16 in jurisdictions where that threshold applies). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@alstonanalytics.com and we will promptly delete the data.

18. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or an in-app notification and update the “Last updated” date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

19. Contact Us

For any privacy-related questions, data requests, or concerns, please contact us:

Alston Analytics (d/b/a MockMic)
Email: info@alstonanalytics.com