Privacy Policy

The short version: your video and audio never leave your device — recording and speech-to-text both run inside your browser, and there is no upload endpoint for them. The only data that reaches a server is text (the job description you paste and your answer transcripts) plus standard payment details handled by our payment provider. No accounts, no user database.

1. Who we are

OneWayPrep (onewayprep.app) is an interview practice tool operated by an independent solo developer. Contact for anything in this policy: lio222832@gmail.com.

2. What we process, and where it goes

• Video and audio: never uploaded.Recording happens via your browser's camera API and playback stays local. Transcription runs on your device (Whisper in the browser). We could not receive your recordings even if we wanted to — the site has no endpoint for them.
• Text you submit: the job description you paste and the text transcripts of your answers are sent to our API to generate questions and feedback. They are forwarded to third-party AI providers (via OpenRouter, to providers such as Google, OpenAI, or DeepSeek) for processing. We do not store them — our API is stateless and keeps no database.
• Payment data: purchases are processed by our Merchant of Record, Waffo Pancake (Waffo.com Limited). They collect your email and payment details under their own privacy policy; we never receive your card number. We receive only order metadata (order reference, status) needed to unlock your Deep Review.
• Browser storage:your practice session (questions, transcripts, order reference) is kept in your browser's sessionStorage so it survives a page reload. It never syncs anywhere and is deleted when you close the tab or click "Practice again".
• Analytics, session replay, and logs: we use Google Analytics to understand aggregate site usage and Microsoft Clarity to understand page interactions, navigation, and where the experience breaks down. The interview simulator is explicitly masked from Clarity: job descriptions, questions, transcripts, feedback, and video content are not collected in readable form. Input fields are also masked by Clarity. Clarity may use cookies where permitted by its consent settings; our hosting provider (Cloudflare) keeps standard technical logs. We do not sell analytics data or use it to build advertising profiles.

3. Legal bases (GDPR)

Where GDPR applies: we process the text you submit to perform the service you request (contract); payment data is processed by the Merchant of Record to complete your purchase (contract); analytics rest on legitimate interest in keeping the site working and improving it.

4. Retention

We keep no user database. Submitted text is processed transiently and not stored by us; AI providers and the payment provider retain data per their own policies. Order records are retained by the Merchant of Record as required for tax and accounting law.

5. Your rights

Depending on where you live (GDPR, CCPA, and similar), you may have rights to access, correct, delete, or port your data, and to object to processing. Since we store essentially nothing about you, most requests concern the Merchant of Record or AI providers — but email us at lio222832@gmail.com and we will help route and resolve your request. You can also complain to your local data-protection authority.

6. Children

This service is intended for adult job seekers and is not directed at anyone under 18.

7. Changes

We may update this policy; the version and effective date above will change when we do. Material changes will be noted on this page.