Privacy Policy
Last updated on: 09 / 09 / 2026
Intro Consulting Ltd
Company no. 13287405
Please read the following important privacy policy.
1. Introduction
This Privacy Policy is provided by Intro Consulting Ltd, a company registered in England and Wales under company number 13287405 with registered office at Studio 4, 224 Shoreditch High Street, London, England E1 6PJ (‘we’, ‘our’ or ‘us’) for use of our products and services including our “Round Zero” AI-powered interview preparation platform designed for individuals seeking to improve their interview skills through mock interviews, personalised coaching and feedback (Services).
We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on how and why we collect, store, use and share any information relating to you (your personal data).
It also explains your rights in relation to your personal data and how to contact us or the relevant regulator in the event you have a complaint. Our collection, storage, use and sharing of your personal data is regulated by law, including under the UK General Data Protection Regulation (UK GDPR).
We are the controller of personal data obtained via the Services, meaning we are the organisation legally responsible for deciding how and for what purposes it is used.
2. What This Policy Applies To
This privacy policy relates to your use of the Services only.
The Services may link to or rely on other apps, websites, APIs or services owned and operated by us or by certain trusted third parties to enable us to provide you with Services. These other apps, websites, APIs or services may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other apps, websites or services, please consult their privacy policies as appropriate. For more information see the section ‘Who we share your personal data with’ below.
3. Personal Data We Collect About You
The personal data we collect about you depends on the particular activities carried out through the Services. We will collect and use the following personal data about you:
Identity and account data you input into the Services
Registration is mandatory in order to use the Services
Name, email address, desired role, level of seniority, target company, and uploaded job descriptions.
Data collected when you use specific functions in the Services
- Voice recordings submitted during interview sessions.
- Interview transcripts generated from those recordings.
- AI-generated interview feedback and coaching outputs.
- Interview session history.
- User-specific coaching memory used to improve future sessions for the same user.
Other data the Services collects automatically when you use it
- Your activities on, and use of, the Services which reveal your preferences, interests or manner of use of the Services and the times of use.
- IP addresses, browser details, and device information.
Data collected when you make an enquiry with us
Name, email address and details contained in your enquiry or correspondence.
If you do not provide personal data we ask for where it is required, it may prevent us from providing services and/or the Services to you.
We collect and use this personal data for the purposes described in the section ‘How and why we use your personal data’ below.
4. Special Category Personal Data or Sensitive Data
We do not intentionally request, collect or require special category personal data. However, users may voluntarily disclose special category personal data during interview responses, uploaded documents or other content submitted through the Services. Any such disclosure is incidental to the provision of the Services and is not a purpose for which we collect personal data. We encourage users not to disclose unnecessary special category personal data or personal data relating to other individuals when using the Services. Where special category personal data is voluntarily provided by a user, we will process that information only to the extent necessary to provide the requested Services, maintain the security and operation of the Services, and otherwise comply with applicable legal obligations. We apply appropriate technical and organisational measures to protect all personal data processed through the Services, including any special category personal data that may be disclosed by users.
5. How Your Personal Data Is Collected
We collect personal data from you directly when you sign up to the Services, contact us directly or reach out to us via social media, make submissions via the Services when a forum element is available, or indirectly, such as your activity while using the Services.
We may collect personal information about you using cookies or similar technologies. Please refer to our Cookies Policy for details about the cookies and similar technologies we use and how you can control them.
6. How and Why We Use Your Personal Data
Under data protection law, we can only use your personal data if we have a proper reason, e.g.:
- where you have given consent
- to comply with our legal and regulatory obligations
- for the performance of a contract with you or to take steps at your request before entering into a contract, or
- for our legitimate interests or those of a third party
A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own. You can obtain details of this assessment by contacting us (see ‘How to contact us’ below).
The table below explains what we use your personal data for and why.
Create and manage your account with us
To perform our contract with you or to take steps at your request before entering into a contract
Providing services and/or the functionalities of the Services to you
Depending on the circumstances: to perform our contract with you or to take steps at your request before entering into a contract (in this case, the contract means the Terms and Conditions of Use which apply to the Services)
To enforce legal rights or defend or undertake legal proceedings
Depending on the circumstances:
- to comply with our legal and regulatory obligations
- in other cases, for our legitimate interests or those of a third party, i.e. to protect our business, interests and rights or those of others
Communications with you not related to marketing, including about changes to our terms or policies or changes to the Services or service or other important notices
Depending on the circumstances:
- to comply with our legal and regulatory obligations
- in other cases, for our legitimate interests or those of a third party, i.e., to provide the best service to you
Protect the security of systems and data
To comply with our legal and regulatory obligations we may also use your personal data to ensure the security of systems and data to a standard that goes beyond our legal obligations, and in those cases our reasons are for our legitimate interests or those of a third party, i.e., to protect systems and data and to prevent and detect criminal activity that could be damaging for you and/or us
Operational reasons, such as improving efficiency, training, and quality control or to provide support to you
For our legitimate interests or those of a third party, i.e., to be as efficient as we can so we can deliver the best service to you
Statistical analysis to help us manage our business, e.g., in relation to our performance, customer base, app and functionalities and offerings or other efficiency measures
For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service to you and improve and develop our service
Updating and enhancing user records
Depending on the circumstances:
- to perform our contract with you or to take steps at your request before entering into a contract (in this case, the contract means the Terms and Conditions of Use which apply to the Services)
- to comply with our legal and regulatory obligations
- where neither of the above apply, for our legitimate interests or those of a third party
To comply with our legal and regulatory obligations
Depending on the circumstances:
- to perform our contract with you or to take steps at your request before entering into a contract (in this case, the contract means the Terms and Conditions of Use which apply to the Services)
- to comply with our legal and regulatory obligations
- where neither of the above apply, for our legitimate interests or those of a third party
To share your personal data with members of our group and third parties in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency.
In such cases information will be anonymised where possible and only shared where necessary
Depending on the circumstances:
- to comply with our legal and regulatory obligations
- in other cases, for our legitimate interests or those of a third party, i.e., to protect, realise or grow the value in our business and assets
See ‘Who we share your personal data with’ for further information on the steps we will take to protect your personal data where we need to share it with others.
7. Who We Share Your Personal Data With
We routinely share personal data with service providers we use to help us run our business or provide the services or functionalities in the Services.
We use carefully selected third-party service providers to assist us in delivering the Services. These providers process personal data on our behalf and only in accordance with our instructions and contractual arrangements.
Our current providers include:
- Supabase, which provides authentication, database hosting, storage, real-time functionality and related backend infrastructure.
- OpenAI, which provides speech-to-text transcription services (Whisper) and AI functionality used to generate interview questions, coaching feedback and related outputs.
- Vercel, which provides website hosting, application deployment and content delivery services.
These providers may process personal data only for the purpose of providing services to us and are required to implement appropriate security measures to protect personal data.
8. How Long Your Personal Data Will Be Kept
We retain personal data as follows:
- Voice recordings: 30 days.
- Interview transcripts: until account deletion.
- Interview history: until account deletion.
- AI-generated feedback: until account deletion.
- Job descriptions uploaded by users: until account deletion.
- User-specific memory: until account deletion.
- Profile information: until account deletion.
- Support records: 12 months from the date the enquiry is closed/resolved.
- Backups: up to 7 days.
Users may delete their account through the platform. Upon deletion, associated production records are removed. Certain information may remain within encrypted backups for up to 7 days before automatic removal.
Following the end of the aforementioned retention period, we will delete or anonymise your personal data.
Where a support enquiry relates to an ongoing complaint, dispute, security issue or legal/regulatory matter, relevant records may be retained for longer where necessary for that purpose.
9. De-identified Information
We may create anonymised or aggregated information that no longer identifies individual users. Such information may be used for analytics, service improvement, operational reporting and business planning purposes.
10. Automated Decision-making
We use AI systems to generate interview questions, interview coaching and feedback based on information you provide.
However, round zero does not make employment decisions, determine suitability for employment, rank candidates or produce decisions that have legal or similarly significant effects on individuals.
Accordingly, we do not carry out automated decision-making within the meaning of Article 22 UK GDPR.
11. Transferring Your Personal Data Out of the UK
As part of providing the Services, we may share your personal data with third parties based outside of the UK.
We use OpenAI API services for transcription and AI-generated coaching functionality. Some OpenAI processing may take place in the United States.
OpenAI model-training and data-sharing settings are disabled for our implementation. OpenAI’s standard API retention policies apply, including retention for abuse monitoring purposes for up to 30 days.
12. Your Rights
You generally have the following rights, which you can usually exercise free of charge. For more information regarding these rights, please visit the ICO website.
Access to a copy of your personal data
The right to be provided with a copy of your personal data.
Correction (also known as rectification)
The right to require us to correct any mistakes in your personal data.
Erasure (also known as the right to be forgotten)
The right to require us to delete your personal data, in certain situations.
Restriction of use
The right to require us to restrict use of your personal data in certain circumstances, e.g. if you contest the accuracy of the data.
Data portability
The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party, in certain situations.
To object to use
The right to object:
- at any time to your personal data being used for direct marketing (including profiling)
- in certain other situations to our continued use of your personal data, e.g. where we use your personal data for our legitimate interests.
Not to be subject to decisions without human involvement
The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you
We do not make any such decisions based on data collected by the Services.
For further information on each of those rights, including the circumstances in which they do and do not apply, please contact us (see ‘How to contact us’ below). You may also find it helpful to refer to the guidance from the UK’s Information Commissioner on your rights under the UK GDPR.
If you would like to exercise any of those rights, please email or write to us using the contact details below. When contacting us please:
- provide enough information to identify yourself (e.g., your full name and username) and any additional identity information we may reasonably request from you, and
- let us know which right(s) you want to exercise and the information to which your request relates
13. Keeping Your Personal Data Secure
We have appropriate security measures to prevent personal data from being accidentally lost, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit the Get Safe Online website. Get Safe Online is supported by HM Government and leading businesses.
14. How to Complain
Please contact us if you have any queries or concerns about our use of your information (see below ‘How to contact us’). We hope we will be able to resolve any issues you may have.
You also have the right to lodge a complaint with the Information Commissioner.
The Information Commissioner can be contacted through the ICO complaints page or telephone: 0303 123 1113.
15. Changes to This Privacy Policy
We may change this privacy policy from time to time. When we make significant changes we will take steps to inform you, for example via the Services or by other means, such as email.
16. How to Contact Us
For further information about our privacy policy or practices, or to access or correct your personal data, or make a complaint, please contact us using the details set out below:
Name: Intro Consulting Ltd
Email: privacy@roundzero.tech