Privacy Policy

The data controller for myquantpartner.com is Edward Bauduin, a sole proprietor registered in France (the company details are listed on our Legal Notice page).

For any question, request, or complaint relating to your personal data, contact us at [email protected]. We respond within one month, as required by GDPR.

We only collect the data we need to provide the service. Concretely:

• Account information: email address, hashed password (we never see your password in plain text), optional first and last name, and an optional avatar URL if you sign in with a third- party identity provider.
• Practice and interview activity: the written answers you submit, the voice transcripts of mock interviews you record, the scores and feedback produced by our automated grading system, and session metadata (topic, difficulty, company filter, duration).
• Billing data: your subscription tier, billing period, and the identifier our payment processor associates with you. We never receive or store full payment card numbers. Those are handled entirely by our payment processor.
• Technical data: IP address, browser and device information visible from standard HTTP requests, and authentication cookies (described below). We use these to keep your account secure and the service reliable.

For each purpose below we identify the legal basis under Article 6 of the GDPR.

• To provide and maintain your account. Legal basis: performance of a contract (Art 6(1)(b)).
• To grade your practice and interview submissions and build your performance history. Legal basis: performance of a contract (Art 6(1)(b)).
• To process payments and manage subscriptions. Legal basis: performance of a contract (Art 6(1)(b)) and legal obligation for accounting records (Art 6(1)(c)).
• To keep the service secure and detect abuse. Legal basis: our legitimate interests in protecting the service and our users (Art 6(1)(f)).
• To send service-related emails (sign-in confirmation, password reset, billing receipts). Legal basis: performance of a contract (Art 6(1)(b)).

We do not currently use your personal data for advertising or marketing profiling. If that changes, we will ask for your explicit consent first and you will be free to refuse without losing access to the core service.

Our practice and mock interview features use automated systems (large language models) to score your answers and generate written feedback. Under Article 22 of the GDPR you have the right to know this is happening and to understand the general logic involved.

In plain terms: when you submit an answer, an AI model compares it against the canonical solution stored in our problem bank and produces a numeric score plus written feedback. Scores are an estimate of correctness and clarity and are not used to make any decision outside the platform (we do not share your scores with employers, schools, or third parties for hiring decisions).

We share the minimum amount of data needed with the categories of service providers that help us operate the platform. To preserve commercial confidentiality, we describe them by category rather than by name in this public policy. A current list of named processors is available on request to the contact email above.

• Cloud hosting and infrastructure providers who run the servers our application is deployed on.
• Database and authentication providers who store your account and activity data on our behalf.
• Payment processing providers who handle subscription billing and store payment card data on their own infrastructure.
• Voice transcription service providers who convert the audio of your mock interviews to text in real time.
• AI and large language model providers who grade your answers and generate the interviewer's spoken responses.
• Third-party identity providers such as Google, but only if you choose to sign in with them. If you sign in with email and password, no third-party identity provider receives your data.

All processors are bound by written agreements that include the protections required by Article 28 of the GDPR. We do not sell your personal data to anyone.

Some of the service providers listed above are based outside the European Economic Area, including in the United States. When personal data is transferred outside the EEA, the transfer is covered by the European Commission's Standard Contractual Clauses (SCCs), which require the recipient to apply protections equivalent to GDPR.

You can request a copy of the relevant SCCs by writing to the contact email above.

We retain your data only as long as needed for the purpose it was collected:

• Account, practice, and interview data: kept while your account is active. If you delete your account, this data is permanently erased within 30 days except where law requires longer retention.
• Billing and accounting records: retained for ten years from the end of the fiscal year they relate to, as required by French commercial and tax law. This applies even if you delete your account.
• Server logs: retained for up to twelve months for security and debugging purposes, after which they are deleted or anonymised.

Under the GDPR you have the right to:

• Access a copy of the personal data we hold about you (Art 15).
• Rectify data that is inaccurate or incomplete (Art 16).
• Erase your data, also called "the right to be forgotten" (Art 17).
• Restrict how we process your data in certain situations (Art 18).
• Receive your data in a portable format so you can move it to another service (Art 20).
• Object to processing that relies on our legitimate interests (Art 21).
• Withdraw consent at any time, for any processing that relies on consent (Art 7).

To exercise any of these rights, email [email protected]. We will respond within one month. There is no charge for exercising your rights unless your request is excessive or repetitive.

If you believe we are not handling your data correctly, you also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL).

We use cookies that are strictly necessary to operate the site, primarily to keep you signed in and to protect against forgery of authenticated requests. These cookies are essential and do not require your prior consent under EU law.

We do not currently use cookies for analytics, advertising, or marketing profiling. If we add such cookies in the future, we will ask for your explicit consent through a cookie banner before placing them, and you will be able to refuse or change your choice at any time.

Our payment processor may set its own cookies to detect fraud during checkout. These are also considered strictly necessary for the payment to work.

We protect your data with industry-standard technical and organisational measures, including encrypted connections (HTTPS), password hashing, secure session cookies that JavaScript on the page cannot read, and access controls on our backend systems. No system is ever perfectly secure, and we cannot guarantee absolute protection against every possible attack, but we work continuously to minimise risk.

If we ever discover a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the CNIL within 72 hours and inform affected users directly, as required by Article 33 and 34 of the GDPR.

myquantpartner.com is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time to reflect changes in the service, the law, or our processors. The "Last updated" date below changes whenever the policy is revised. For material changes that affect your rights, we will notify signed-in users by email or through an in-app notice before the change takes effect.