Privacy policy. What we collect, and why.

ProofDive Ltd (“ProofDive”, “we”, “us”) is a company registered in England and Wales. We run the ProofDive website and app, where people turn their real experience into evidence for interviews, guided by our AI Consultant.

For the personal data described in this policy, we are the controller. That means we decide why and how it is used, and we are responsible for looking after it.

You can reach our data protection lead at privacy@proofdive.com.

What you give us

• Account details: your name, email address and password.
• Your background: your current role, the job you are preparing for, and a CV or job description if you upload one.
• Your answers: the stories you write in MyStoryBoard and what you say or type to the Consultant, including recordings in Mock Studios if you choose to record.
• Messages: anything you send us, such as a question for our support team.

What we collect automatically

• Device and log data: your browser, the pages you visit, and the time and length of a session.
• Cookies and similar technologies: described in section 11.

What we receive from others

If your university or employer invites you, they share your name, email address and the programme or role they are inviting you to. Section 6 explains what happens next.

• To create and run your account.
• To give you the Consultant’s questions and feedback, built from your own experience and the role you are aiming for.
• To show your progress, your Evidence Reports and your stories back to you.
• To keep the service secure and to prevent misuse.
• To improve ProofDive, using data that has been aggregated or de-identified wherever we can.
• To contact you about your account and, if you agree, about new features.

We do not sell your personal data, and we do not use it for advertising.

Where we rely on your consent, you can withdraw it at any time, from your settings or by writing to us.

The Consultant uses AI models to read what you share, ask follow-up questions and suggest how your evidence maps to the competencies a role asks for. Its feedback is guidance for your preparation, not a judgement of you.

ProofDive does not make hiring decisions, and no decision with a legal or similarly significant effect on you is made by automated means alone. If a university or employer uses ProofDive, they make their own decisions, with people involved.

You can ask a person at ProofDive to review any feedback, and tell us if you think it is wrong.

We do not use your recordings or answers to train other companies’ AI models. Where our AI providers process your data, they do so only on our instructions and under contract.

Some people use ProofDive through a university careers service or an employer. In that case, the organisation decides why it offers ProofDive and what it can see, and it may be a controller of some of your data too.

• A university may see whether you have taken part and your overall progress, so it can support you.
• An employer may see the Evidence Report for the role you were invited to, never your practice sessions.
• Neither sees your private notes or drafts unless you choose to share them.

Their own privacy notice explains how they use what they receive. If you are not sure what is shared, write to us and we will tell you.

• Hosting and storage providers.
• AI model providers, which process your answers to produce the Consultant’s questions and feedback.
• Payment processors, which handle card details. We never see your full card number.
• Email and support tools.
• Professional advisers, and public authorities where the law requires it.

Each processor acts only on our instructions and must keep your data secure. If ProofDive is ever sold or merged, your data would pass to the new owner under this policy.

Where we transfer personal data outside the UK, we rely on UK adequacy regulations, or on the International Data Transfer Agreement or Addendum approved by the ICO, together with any further measures needed to protect it.

• Your stories, answers and reports: while your account is open. You can delete any of them yourself at any time.
• Mock Studios recordings: 90 days after the session, unless you save them.
• Account details: until you close your account, then up to 30 days to remove them from our backups.
• Payment records: six years, as UK tax law requires.

Under UK data protection law, you have the right to:

• access the personal data we hold about you;
• have it corrected if it is wrong;
• have it deleted;
• restrict or object to how we use it;
• receive it in a format you can take elsewhere;
• withdraw your consent where we rely on it;
• ask a person to review any decision made about you by automated means.

You can do most of this yourself from your account settings. For anything else, write to privacy@proofdive.com. We reply within one month.

Strictly necessary cookies keep you signed in and keep the service secure, so they cannot be switched off. Analytics cookies tell us which pages are useful; we set them only with your consent.

You can change your choice at any time in your browser settings, or by writing to us.

ProofDive is not designed for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.

We encrypt data in transit and at rest, give access only to the people who need it, and review our security regularly. No service can promise perfect security, so if we ever discover a breach that puts you at risk, we will tell you and the ICO, as the law requires.

When this policy changes, we update the date at the top of this page, and we tell you by email or in the app if the change is significant.

If you are unhappy with how we have handled your data, please write to privacy@proofdive.com and we will respond within 30 days. You also have the right to complain to the Information Commissioner’s Office (ICO), at ico.org.uk (opens in a new tab) or on 0303 123 1113.