Privacy Notice

Worth the Practice is operated by WORTH THE PRACTICE LLC. This notice applies to your use of the product and takes effect on September 18, 2026.

Worth the Practice is a free, invitation-only pilot for people age 18 or older in the United States. It is not directed to children. We do not knowingly collect personal information from children under 13; if we learn that we have, we will delete it.

Account information: your sign-in email address and a small profile with your display name, timezone, and locale. Supabase provides email-and-password authentication and holds the password credential; Worth the Practice application tables do not store your raw password.

Preparation material: the role you are preparing for, the job description and resume you upload or paste, and the details you review and confirm.

Practice work: your recorded answers, written transcripts, interview plans, Career Stories, and coaching grounded in your own words.

Technical information needed to run and protect the product, such as IP address, browser and device details, timestamps, request outcomes, and error diagnostics supplied by our hosting and service providers.

Content-free AI operation records can capture timing, size, model, status, and cost, but not your words or audio.

We do not ask for government identifiers or payment details. The pilot is free and has no payment step.

We use this information to create and secure your account, provide the preparation and coaching you request, operate and improve reliability, respond to you, meet legal obligations, and protect Worth the Practice, our customers, and others from fraud, abuse, or harm.

We do not sell personal information, use it for targeted advertising, or use your material to train AI models.

We remove your original resume or job-description file once we have organized it, along with the raw text we extracted from it. Each record carries a 24-hour purge deadline. Earlier cleanup happens after successful processing where the product directly confirms it. A daily backstop removes content still present after its deadline on the next successful sweep.

Your practice audio is scheduled for deletion 24 hours after you save it, with automated cleanup removing it shortly afterward and checking for overdue recordings every 15 minutes; long-term audio storage is not available.

The work you build stays with your account until you delete it: contact-masked document text, the role and experience details you confirm, your Career Stories, written answer transcripts, interview plans, and coaching reports. Earlier versions of confirmed role and experience details stay with the account too.

A completed data export is available to you for seven days, and each download link lasts no more than five minutes.

Content-free technical records of AI operations become eligible for cleanup after 365 days and are removed on the next successful daily cleanup.

Completed or minimized privacy-operation and service-email records become eligible for cleanup after 30 days and are removed on the next successful daily cleanup. Delivery and audit records stay longer while a related privacy request is still requested or processing. The privacy-request record itself is not removed by this cleanup; it remains governed by your account lifecycle and account deletion.

Daily physical database backups can retain a deleted database record until that backup expires through the provider's normal rotation. A deleted file in private storage is not restored from a database backup.

Other minimal operational records stay with your account until you delete it.

Before document text is sent for AI-assisted organization, we replace email addresses, phone numbers, links, and street addresses with redaction markers. Names are not masked.

The contact-masked copy stays with your account so your profile remains traceable to your own document. The original file and raw extracted text follow the separate cleanup schedule described above.

OpenAI provides the AI-assisted processing used to organize your documents, generate practice interview questions from confirmed job details and resume evidence, transcribe your practice answers, and generate coaching from transcripts and confirmed details when those features are available.

Our AI Processing Disclosure explains what is sent, what is not sent, and the limits we place on these features.

We use service providers for database hosting, authentication, private file storage, application hosting, background jobs, transactional email, error diagnostics, and AI processing. They receive only what they need to perform those services for us and act on our instructions.

A small number of authorized people may access information when reasonably necessary to support you, investigate a problem, secure the service, or meet a legal obligation. We may also disclose information when required by law, to protect rights or safety, or as part of a merger, financing, acquisition, reorganization, or sale of the business, subject to appropriate safeguards.

Sentry receives limited error and performance diagnostics during the pilot. Before an event is sent, our scrubber removes message text, user details, attachments, page and request data other than the HTTP method, custom context, tags, spans, and breadcrumb details. Session replay is off. These diagnostics are not intended to contain resumes, transcripts, recordings, or other career content, but no automated filter can guarantee that every unexpected value is removed.

We use first-party authentication cookies to keep you signed in and protect your account. We do not use a third-party analytics vendor or an analytics cookie, local-storage identifier, or session-storage identifier during the pilot.

The product includes an optional product-event analytics preference that starts off. No product-event analytics collection is currently connected to that preference. Browser session storage is used only for short-lived recovery markers when a recording is interrupted, not to identify or track you.

Your files, recordings, and exports are held in private storage without public read access. Downloads use short-lived links. Customer-to-customer sharing, public profiles, and a general customer-content browsing screen are not built into the product.

We use reasonable administrative and technical measures designed to protect your information, including account-based access controls and fixed exclusions that keep resume, transcript, audio, and sensitive career content out of product analytics. No system can promise perfect security. If a legally reportable incident occurs, we will provide notice as required by applicable law.

You can export a private, portable copy of your data from privacy settings. Exports do not include audio files or raw document text.

You can schedule account deletion from your privacy settings. A deletion request stays cancelable for 24 hours. Once processing begins, it cannot be undone.

Account deletion removes your private files, application data, and sign-in identity. We keep only a non-identifying completion record; it becomes eligible for cleanup after 30 days and is removed on the next successful daily cleanup. Database backup rotation can take longer as described above.

Deletion applies to the whole account. The pilot does not offer deletion of one story, document, transcript, or report while keeping the account open.

Depending on where you live, applicable law may give you rights concerning your personal information. We will respond to a valid request as required by that law and may need to verify your identity.

Questions or privacy requests: privacy@worththepractice.com.

If we make a material change to this notice, we will email you at least seven days before it takes effect and ask you to accept the updated documents before you continue. We may post clarifications that do not reduce your rights without requiring a new acceptance.