Your data

What we store

Your account: your email address, a hashed password and, if you gave one, your name. Your runs: everything you type during a run (intake answers, messages in the scenario, reflection answers), the replies of the assistant, the interviewer and the stakeholder, and the report built from it. Your credit history and any pages you publish. An activity log of your account: signing up and signing in, pages you open and forms you send (not what you type), runs, publishing, purchases, refused actions and errors, each with its time and, for actions taken in your browser and failed attempts to sign in to your account, the IP address and browser they came from; failed sign-up attempts are logged without an IP address or browser details.

If you sign up but do not confirm your email address, the request (your email address, a hashed password and, if you gave one, your name) is deleted after 24 hours. A password reset request, stored as a one-way hash of the link we email you, is valid for one hour. We keep a log of the emails we send, with a masked address and a keyed hash of it, not the full address. For each call to an AI model made for your runs we keep the model, the number of tokens, the cost and how long it took, but not the text you sent or the reply. Like the activity log, it is linked to your account.

Who processes your answers

Your messages and answers are sent to third-party language models through OpenRouter, both to run the conversation and to analyse your run afterwards. Do not paste confidential material from your employer or clients into a scenario.

Who can see it

Your report is visible to you in your cabinet. The people who run the platform can read run records to support you and to improve scenarios. Nothing is shown to employers or anyone else unless you publish a page.

Public pages

A public page shows only what you choose to publish: the moments you pick, each a short description of what you did with a quote in your own words, the name you enter, the scenario title and its date. It has no scores. Search engines are told not to index it. You can revoke it at any time; after that the link stops working.

Usage statistics

We count visits and key steps, such as signing up or starting a run, with Umami, which runs on our own server. It sets no cookies, is not linked to your account, and sends nothing if your browser has Do Not Track turned on. If sign-up fails or credits run short, it records only the kind of problem, never what you typed. The Cookie Policy has the details and a button that switches it off for this browser.

Erasing your account

Open your cabinet and choose Delete account, then confirm with your password. The text of your runs and reports is wiped. What remains is a record with no name, email or text, plus a one-way marker of your email address so that a new account does not receive a second sign-up bonus. The activity log of your account, a record of what happened in it and when, stays too, but without your IP address or browser details. So do the log of AI calls made for your runs (model, tokens and cost, never any text) and the log of emails we sent, with the masked address removed. The one-way marker of your email address also lets us find the emails we sent. Erasure does not reach server logs, backup copies, or what model providers have already processed.

Contact

Questions about your data: support@shywai.com