Privacy Policy

Last updated: 27 September 2026. Effective: 27 September 2026.

This Privacy Policy explains how Clozo FZE LLC ("Clozo", "we", "us", "our") handles personal information in connection with the Interview Clozo macOS application, the website at interview.clozo.ai, and related services (together, the "Service"). It uses some defined terms that also appear in our Terms of Service: "You", "your" and "User" mean the individual who downloads, creates an account for, or pays for the Service; "Session Content" means the audio, transcripts, screenshots, résumé/CV text, job descriptions, notes and answers processed when you use the Service; and "Other Participants" means any person other than you in a meeting or call in which you use the Service (for example, an interviewer).

Please read this alongside our Cookie Policy, our Acceptable Use Policy and our Disclaimer. This Policy describes our practices; it is not a claim of certification under, or compliance with, any particular law.

The short version

• We are Clozo FZE LLC, a free-zone company in Ajman, United Arab Emirates. Contact us at info@clozo.ai.
• To run a live session, the app captures two audio streams on your Mac — your microphone and your Mac's system audio — and your Mac's system audio includes the voices of Other Participants. See Other people in your interviews.
• Session Content is sent to third-party AI providers to transcribe speech and generate suggestions. We do not use Session Content to train our own models, and we create no voiceprints or other biometric identifiers.
• Some Session Content is written to your own Mac; account and billing data are stored on our servers.
• On our website, Microsoft Clarity records how every page is used — including the pricing, sign-in, account, subscription-management, payment-confirmation and cancellation pages — for every visitor, without waiting for your cookie choice; what you type into forms is masked, and the recordings are not linked to your account. The payment pages themselves are hosted by Stripe and PayPal on their own sites, where Clarity does not run. When you are signed in, our website also always sends our servers content-free records of what you do there, such as the pages you open and the account buttons you press. Advertising technologies and PostHog analytics run only if you allow them, and we honour Global Privacy Control for them. See Analytics, session recordings, error reports and cookies.
• Newer versions of the Mac app always send us usage analytics (which screens and features you use, repeated or unanswered clicks, how far you scroll long screens, how sessions start and end, error and crash codes). They cannot be switched off in the app. They never include your interview audio, transcripts, answers, résumé or other text you type, with one exception: the title you give a role (for example “Senior Product Manager”), which we record with the kind of role it is.
• When you start to cancel, we record that you did, and we ask you why — typed or as a voice note. A reason you give is kept even if you then keep your plan or leave the cancellation steps. OpenAI transcribes voice notes; we keep the audio for 1 year and the text for as long as your account exists. See When you cancel.
• Once error reporting is switched on, errors and slow responses in our servers, website and app are reported to Sentry so we can fix them, without Session Content or anything you type.
• If you have not yet finished the steps to our free book, Never Take the First Offer, we email you what is left; you can unsubscribe from those emails in one click. See Our free book.
• You are responsible for using the Service lawfully, including obtaining any notice or consent the law requires from Other Participants.
• Your rights, and how to exercise them, are in Your rights by region.

1. Who we are and how to contact us

Interview Clozo is operated by Clozo FZE LLC, a limited liability company registered as a free-zone company in Ajman, United Arab Emirates.

• Business registration number: 2629114574888
• Registered address: CWS-1V-226222, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates
• Contact: info@clozo.ai

For the personal information described in this Policy we are the controller (the business responsible for it), except where we say otherwise. Please direct all privacy questions and requests to info@clozo.ai.

Regional contacts.

• European Economic Area (EEA): Individuals in the EEA may contact us about their personal information at info@clozo.ai. If you are in the European Economic Area and need our EU representative’s details, contact us at info@clozo.ai.
• United Kingdom: Individuals in the UK may contact us about their personal information at info@clozo.ai. If you are in the United Kingdom and need our UK representative’s details, contact us at info@clozo.ai.
• Canada (including Quebec): Our Privacy Officer, who also acts as the person in charge of the protection of personal information for Quebec, can be reached at info@clozo.ai.
• India: Individuals in India may contact us about their personal information at info@clozo.ai. If you are in India, you may contact us about your personal data or raise a grievance at info@clozo.ai.
• Everywhere else: info@clozo.ai.

We have not appointed a Data Protection Officer, because the scale of our processing does not require one; if this changes we will name one here.

2. What this Policy covers

This Policy covers the Interview Clozo website, the macOS application, account creation, checkout, billing and cancellation, our free book offer, and our support communications. It does not cover the separate services and privacy practices of third parties, including: your meeting platform (for example Zoom, Microsoft Teams, Google Meet, Cisco Webex) and any assessment platform; the payment processors Stripe and PayPal (which handle your card details under their own policies); and the advertising platforms named in Advertising, pixels and "sharing" or "sale", which use data they receive for their own purposes under their own policies. The Service is intended for use only by people aged 18 or over (see Children).

3. The personal information we collect

We collect the following categories of personal information.

You do not have to give us a full name or marketing consent. You must give an email address to hold an account (and, where you create an account in the app, a username and a password), and the Service cannot run a live session without capturing the audio described above. Cancelling requires you to tell us why, in writing or by voice note; the rest of the cancellation works the same whichever you choose.

4. Other people in your interviews

Interview Clozo runs during live conversations, so it necessarily processes information about people other than you — usually an interviewer. This section is our notice to those Other Participants, and it is also our commitment to you about how we treat their information. It is a public notice for anyone who was in a conversation with a user of the Service.

What we process, and why

When you run a session, the app captures two audio streams on your Mac: your microphone, and your Mac's system audio. Because your Mac's system audio is the sound of your meeting, it includes the voices of everyone else on the call. If you use screen capture, the app also processes images of your screen, which may show other people's names, faces or shared documents. We call all of this "Session Content".

We process this Session Content only to transcribe what is said and to show you suggestions during that session. We do not use Session Content about Other Participants to identify them, build a profile of them, contact them, advertise to them, or train any AI model. As explained in Voice and biometric data, we create no voiceprints or other biometric identifiers, and we do not attempt to recognise who is speaking beyond distinguishing the two audio streams by the input channel each arrives on.

Where it goes

On all plans — free and paid alike — both audio streams (your microphone and your Mac's system audio, which includes Other Participants' voices) are streamed in real time from your Mac, through a relay that Clozo operates, to our third-party speech-to-text provider (OpenAI) to be transcribed. The relay passes this data through in memory to complete your request and does not store it on our servers. Text (including transcripts, your notes and text read from your screen) and screenshot images are sent to the AI providers listed in AI providers and sub-processors. Those providers act on our instructions and may keep limited logs for abuse-monitoring for a short period, as that section explains.

What is kept, and where

Transcripts and suggestions from your recent sessions, and a limited number of recent audio recordings, are stored on your Mac, not on our servers. Screenshot images are held only in the app's memory during a session and are never written to disk or stored on our servers; only the text read from them is kept. See How long we keep information. We do not receive a copy of this local content.

Your responsibility

You decide when to run a session and whose conversation it processes. The Service acts as your tool, at your direction. In many places the law requires the consent of every person to a conversation before it may be recorded, or before certain information may be processed, and the law of an Other Participant's location may apply to you. You represent that you are a party to each conversation, and you are solely responsible for giving any notice and obtaining any consent that the law requires of you before you capture any audio. These obligations are set out in our Acceptable Use Policy and Terms of Service.

If you spoke with a user of Interview Clozo

We usually cannot link Session Content to you, because it is not stored on our servers and is not organised by any identity other than the user's. If you believe your information was processed and you wish to exercise a right, please write to info@clozo.ai. We will tell you what, if anything, we hold, and help you with the rights available to you. Because we act on the user's behalf and cannot ordinarily identify Other Participants, we may need to refer some requests to the user who ran the session.

5. Sensitive information

We do not ask for sensitive information and we do not need it. However, a live interview can surface it — for example, a question about your visa or immigration status, or a health matter you mention — and it then becomes part of Session Content. We use Session Content only to provide the session you started, never for advertising, profiling or training AI models, and we do not store it on our servers. The same applies to the reason you give us when you cancel: please leave out health or other sensitive details. If you include them, we use them only to understand your feedback, and only the people at Clozo who work on the product can see them.

You accept our Terms of Service when you start a Trial, buy a plan or create an account (see Section 1 of our Terms of Service), and that acceptance covers our processing, as this Policy describes it, of the audio, screen images and text of your sessions — which may include sensitive information about you — solely to generate your suggestions. We use this information only to provide the session you start, never to infer characteristics about you, and we do not store it on our servers. You control what you upload and what you say, and you may withdraw any marketing or privacy consent, or ask us to stop non-essential processing, by emailing info@clozo.ai or using the "Your Privacy Choices" control on our website.

California residents: we use sensitive personal information solely to perform the Service you request and never to infer characteristics about you. If you wish to limit the use of your sensitive personal information, you may exercise the "Limit the Use of My Sensitive Personal Information" right by emailing info@clozo.ai or using the "Your Privacy Choices" control on our website, and we will restrict our use of that information to what is necessary to provide the Service you requested.

6. How we use information, and our legal bases

We use personal information for the purposes below. Where the EU or UK GDPR applies, the legal basis for each purpose is shown in brackets.

• To provide the Service — to run sessions, transcribe speech, generate suggestions, store your account and settings, and deliver the plan you bought. (Performance of our contract with you.)
• To process Session Content — solely to provide the session you start, at your direction. (Performance of our contract with you.)
• To take payment and manage subscriptions — including renewals, cancellations and refunds. (Performance of our contract.)
• To show you, before you pay, exactly what you are agreeing to, and to keep proof of it — the renewal and Trial terms shown next to each pay button and every charge you confirm in the Service, recorded with the text, time and IP address. (Legal obligation; our legitimate interests in being able to show what you agreed to.)
• To send you service emails about your account and subscription — the Trial terms when a Trial starts; reminders 7 and 3 days before a Trial becomes a paid plan; a note when you have used your 3 trial interviews; a reminder 30 days before a Yearly plan renews; receipts; a notice when a payment fails or your bank asks you to approve it; cancellation and “Keep my plan” confirmations; a confirmation when you accept the retention discount; an acknowledgement of a support request; a notice when a password is set on your account; the codes you use to sign in again when you cancel; the email that sets up an account created by a purchase, with a private download link for the app; and an email when we change our Terms, this Policy or our Refund Policy. Some of these contain a sign-in link that takes you straight to one action on your account page (for example “Start your plan now”, “Update your card” or “Keep my plan”). These are not marketing and are sent even if you have unsubscribed from marketing. (Performance of our contract; legal obligation.)
• To understand why people cancel and to improve the Service — recording each time someone starts to cancel and what happened next, with a usage snapshot, and analysing the reasons people give (including reasons given before keeping the plan or leaving the steps, and voice notes, transcribed by OpenAI) into topics. We do not use this to make any decision about you, and we do not use your reason for marketing. (Our legitimate interests in finding and fixing what does not work.)
• To offer you something before you cancel — our founder's help and the 25% retention discount (which can be accepted at most once in any 12 months, which is why we record when it was offered and accepted). (Performance of our contract; our legitimate interests in keeping customers.)
• App usage analytics — to see which features are used, where people get stuck and what fails, always on in newer versions of the app, including the titles of your roles and their categories, so that we can see which kinds of roles people prepare for. (Our legitimate interests in understanding how the app is used and fixing what fails.)
• Our own website events — to see how signed-in visitors use our account, checkout, cancellation and book pages and what fails, always on for signed-in visitors. (Our legitimate interests in understanding and improving our website.)
• Error and crash reports — to find and fix failures and slow responses in the website, the app and our servers, once error reporting is switched on. (Our legitimate interests in keeping the Service working and secure.)
• Website session recordings (Microsoft Clarity) — to see where our pages confuse people or fail, on every page and for every visitor. (Our legitimate interests in understanding and improving our website.)
• To run our free book offer — to work out whether you qualify for our free book, Never Take the First Offer, to send it to you, and to email you the steps you have left (see section 9B). (Performance of our contract for the book once you qualify; our legitimate interests in telling you about the offer — you can object to the step emails at any time by unsubscribing.)
• To keep the Service secure and prevent abuse — including detecting and limiting misuse of the free Trial, protecting accounts, and investigating fraud. (Our legitimate interests in securing the Service and preventing abuse.)
• To keep records for disputes and to defend claims — including logs of access, IP addresses, timestamps and usage that help us respond to payment disputes and chargebacks. (Our legitimate interests; and legal obligation where applicable.)
• To communicate with you — to send service messages (such as verification, password reset, billing-portal and activation emails) and to answer your support requests. (Performance of our contract; our legitimate interests.)
• To send you product news and offers — marketing emails about the Service and our other products for interview candidates, where you have allowed marketing on your account, allowed it through our website, or otherwise asked us to contact you. Every marketing email includes an unsubscribe link. The step and reminder emails about our free book are sent differently, as section 9B explains. (Your consent, which you can withdraw at any time.)
• For PostHog analytics and advertising on our website — only where you have allowed the relevant cookies. (Your consent.)
• To meet legal obligations — including tax and accounting records. (Legal obligation.)

We do not use Session Content, or any personal information, to train or fine-tune AI models.

7. AI providers and sub-processors

To operate the Service we rely on the third parties below, who process personal information on our behalf or, where noted, as independent controllers.

Retention at our AI providers, and our no-training commitment

Our AI providers process Session Content on our instructions under contract. Their retention is governed by their own terms; based on those terms:

• OpenAI does not use data sent through its API to train its models by default, and keeps a limited amount of real-time and chat data for up to 30 days for abuse-monitoring, unless the law requires it to keep data longer. We do not claim that no data is retained anywhere.
• Cerebras does not retain session content.
• Groq does not retain data by default, but may keep logs for up to 30 days when troubleshooting or investigating abuse.
• OpenRouter does not retain prompts by default.
• We are confirming the retention terms of BaseTen and Vercel AI Gateway and will describe them here. Each of these providers processes this data only to return a result to you and retains it only as its own data-processing terms allow.

We do not use your personal information, including Session Content, to train or fine-tune any AI model, and our contracts do not permit our providers to do so. If we ever wish to change this, we will ask for your consent first and will not apply the change to information we already hold. Suggestions are generated by AI and can be wrong; they are for you to judge, and are not professional advice — see our Disclaimer.

8. Where Session Content goes

To make the flow clear:

• Audio (both your microphone and your Mac's system audio, which includes Other Participants' voices) is, on all plans, streamed in real time from your Mac, through a relay we operate, to OpenAI for transcription. The relay processes it in memory and does not store it on our servers.
• Transcripts, your résumé/CV text and filename, job descriptions, notes, saved questions and answers, prior-round answers, and text read from your screen are sent to the AI providers above to generate suggestions. Your résumé/CV text is sent when you import it, or ask the app to read it again, not only when a suggestion is generated.
• Screenshot images are sent to AI vision models to read the on-screen content. Screenshot images are not stored on our servers; the text extracted from them is kept in the session on your Mac.
• Session audio, transcripts and suggestions are written to your own Mac by default for a limited number of recent sessions (see How long we keep information). There is currently no in-app switch to turn off local audio recording. The app does not display a recording indicator of its own; this is simply how the Service works.
• Account, security, usage, analytics, purchase, cancellation and book records, and cancellation voice notes, are stored on our servers (Fly.io and Supabase).

There is no cloud history backup and no synchronisation of your Session Content between devices. Your local session history stays on the Mac where it was created.

9. Voice and biometric data

We do not create voiceprints, speaker-identification templates, or any other biometric identifiers, from you or from Other Participants. The Service distinguishes speakers only by which input channel their audio arrives on (your microphone versus your Mac's system audio); it does not analyse voice characteristics to recognise or identify a person. On-device text processing turns text into numeric vectors for search; it does not process audio into a biometric identifier.

9A. When you cancel: your reason, voice notes and the retention offer

What we always record. When you press “Cancel subscription” — in the app or on your account page — we record that you did, when and where, at the moment you press it, together with your plan and subscription status and a snapshot of your usage at that moment (the counts described in section 3, and from the app the titles and categories of your roles, never Session Content). We then record each step you reach and when: your reason, signing in again (and whether with your password or an emailed code), the “Before you go” step, and the final confirmation; and how it ended — whether you kept your plan, took the 25% discount, asked our founder for help, left the steps, cancelled, or later chose “Keep my plan”. If your subscription is cancelled outside these steps (for example on paypal.com), we record that too. We record all of this whether or not you finish cancelling, because the moment someone considers leaving is when we most need to understand why.

Your reason. To continue cancelling, you tell us why — by typing a reason, recording a voice note, or both. What you type is saved when you press “Submit”, when you press “Keep my plan” or close the steps with × instead, and also if you leave the page, or close the app's window, with a typed reason you have not submitted. A voice note is saved when you press “Submit”, “Keep my plan” or ×. Saving a reason never cancels anything: if you kept your plan, we record that you kept it. Before you submit, you can play back, re-record or delete a voice note.

Voice notes. A voice note is recorded only while the recording indicator is shown, for at most two minutes. In newer versions of the Mac app, your words appear as text while you speak, using Apple's speech recognition, which runs on your Mac where the Mac supports it and otherwise uses Apple's servers under Apple's privacy policy. When a voice note is saved, the recording is uploaded to our servers and transcribed by OpenAI; OpenAI's handling of it is described in section 7. We do not use voice notes to identify you or anyone else and we create no voiceprint from them (see section 9).

How we analyse reasons. We send your typed reason and the transcript, with a content-free usage summary (for example your plan and how many interviews you ran), to OpenAI to sort them into topics such as “transcription quality”, “price” or “hard to set up”, with a severity and a one-line summary; names, companies and contact details are removed from that summary. The topics help us decide what to fix, and a reason that reports a serious failure is flagged to our founder. This never changes your plan, your price or your cancellation, and we do not use your reason, or the fact that you started to cancel, for marketing.

Who sees it. Only the people at Clozo who work on the product, through an access-controlled internal tool. Your reason, voice note and transcript are never sent to Stripe, PayPal, advertising platforms or Sentry, and never written to our server logs. Our cancellation pages never show your reason back to you as page text, and Microsoft Clarity masks what you type, so Clarity's recordings of those pages do not contain it.

The retention offer. Everyone who reaches the “Before you go” step is offered our founder's help. The 25% discount is offered too, unless a discount was accepted on your account in the last 12 months (a discount you were shown but did not take does not count). If you accept it, it reduces one payment — normally the next automatic payment of the plan you have at that moment; our Terms of Service explain the exceptions — and we email you a confirmation; for PayPal plans it is given as an automatic refund of 25% of that payment through PayPal. We record when we showed the discount, whether you accepted it and which payment it applies to. If you ask for our founder's help, we create a support request linked to your cancellation, so the founder can see your reason and reply to your account email, and we email you an acknowledgement.

How long we keep it. The audio of a voice note: 1 year from upload, then deleted; our database backups never contain it. The reason you typed and the transcript: for as long as your account exists (deleted with your account). The record of the click, the steps and the outcome, and the discount record: while your account exists.

9B. Our free book: step emails, download links and your browser

What we record. Our free book, Never Take the First Offer (The Salary Negotiation Book), is sent to accounts that have a Trial or a plan, have signed in to the Mac app, and have an email address that accepts mail. For each account we record which of these steps are done, which step and reminder emails we sent, when the book was granted and sent, how many times it was downloaded, and whether and how you unsubscribed from the step emails. We keep this record while your account exists, because it is how we make sure the book is sent only once.

Step and reminder emails. Until you have finished the steps, we email you what is left: one email when you reach each new stage, and reminders one day and three days later — whether or not you have allowed marketing email. Accounts created before the offer started that have neither a Trial nor a plan at that time may receive one email about it. These are marketing emails: each has an unsubscribe link, and your email app can unsubscribe you in one click. Unsubscribing, or turning off marketing email on your account page, stops every later step and reminder email about the book, whatever your situation; the book itself, an email you ask for (such as the link to download the Mac app), and every email about your account, Trial, plan, payments and cancellation continue.

Links. Links from these emails to our website carry a short tag naming the email and the button (for example bk=eb3.d1.cta) and standard campaign parameters (utm_…), so that we can count which emails and buttons are used; the tags contain nothing about you. The link to download the book is private to your account and expires (a link in our email after 90 days; a link from your account page or the app after 10 minutes). The link to download the Mac app is also private to your account and expires. We record that a download started, not what you do with the file.

Your browser: a functional identifier. When you sign in to our website, your browser stores a random identifier (clozo_bid, in the browser's local storage for interview.clozo.ai; it is not a cookie). It is made from nothing and contains no personal information. It is sent to our servers only when you sign in and when our website shows the progress of your book, and our servers keep only a scrambled (keyed-hash) form of it, linked to the Interview Clozo accounts that sign in from that browser. Its only purpose is to show which of your accounts has the Trial and the book: if you sign in with a different account in the same browser, the book's progress panel can show a masked form of the email address of your other account that has the Trial or plan (for example a•••@b.com). A link between the identifier and an account is deleted after 180 days without use, and deleting an account deletes its links. Clearing your browser's site data for interview.clozo.ai removes the identifier. It is functional and always on, like the website records described in section 10: our cookie banner does not control it, it is never used for advertising or analytics, and Microsoft Clarity does not read it.

10. Analytics, session recordings, error reports and cookies

On our website. Microsoft Clarity runs on every page of our website — including the pricing, sign-in, account, subscription-management, payment-confirmation, cancellation and legal pages — for every visitor, starting shortly after the page loads. The payment pages themselves are hosted by Stripe and PayPal on their own sites, where our code, and so Clarity, does not run. Clarity does not wait for your cookie choice: for every visitor, whatever you choose in our banner and whether or not your browser sends Global Privacy Control, our pages tell Clarity that consent to its analytics and advertising storage is granted, so Clarity sets its cookies and records complete visits. Clarity records how our pages are used — clicks, taps, scrolling, mouse movement, the page's layout and the text it shows — so that we can replay and study visits; what you type into form fields is masked in your browser and is not recorded. Before Clarity starts, any sign-in, checkout or cancellation code in the page's address is removed. We never tell Clarity who you are: recordings are not linked to your account, your email address or your user ID.

When you are signed in, our website also sends our own servers content-free events from the pages you use — for example the pages you open, which account, checkout and book buttons you press and whether they worked, repeated or unanswered clicks, and errors shown. These events are always on for signed-in visitors: they do not wait for your cookie choice, and neither the cookie banner nor Global Privacy Control switches them off. They set no cookie and never include what you type. Our other analytics (PostHog) and all advertising technologies load only if you allow them in our cookie banner, and never on our account, sign-in, password-reset, verification, subscription-management, cancellation, welcome, app sign-in or support pages. Once error reporting is switched on, our pages report script errors and how long pages take to load to Sentry, which sets no cookie and never receives what you type. For the full list, the categories, durations and how to change your choices, see our Cookie Policy.

In the Mac app. The app sets no cookies and runs no advertising or session-recording technology. Newer versions of the app always send us the usage analytics described in section 3 — including repeated or unanswered clicks and how far you scroll long screens, which show us where people get stuck in the app, as Clarity does on our website — and, once error reporting is switched on, crash reports and how long some actions take. This is part of how the app works; there is no setting to turn it off. It never includes Session Content, other text you type, résumé text or file names, the words shown on the app's buttons or screens, or the audio or transcript of an interview. The one exception is the title you type for a role, which we record with its category; only the people at Clozo who work on the product can see it. During a Trial, newer versions of the app can also show you notifications about your Trial (at most one a day, never during an interview and never at night). They are created on your Mac from your Trial's status, and the app reports which ones were shown and opened. You can turn them off with “Trial and billing reminders” in the app's Settings, or in macOS System Settings; that choice affects notifications only, not the usage analytics described above.

On our servers. Our servers keep technical logs of requests, errors and response times, with sign-in and cancellation codes removed from them, and record AI errors and slow AI responses against your account, without Session Content.

11. Advertising, pixels and "sharing" or "sale"

We advertise Interview Clozo on other websites and apps. To measure whether our ads work and to show our ads to people who have visited our website, we use advertising and measurement technologies from Google, Meta, Microsoft, LinkedIn, Reddit and X. Where you allow advertising, Microsoft Advertising's tag also links Microsoft Clarity's recordings of your visit to Microsoft's advertising measurement. These technologies run only on our marketing website, and only after you accept advertising cookies in our banner. When you allow them, each platform may receive: the pages you view on our website; the ad you clicked (including click identifiers); your IP address, browser and device information; cookie identifiers; and events such as starting checkout or completing a purchase (the plan and its value, never your card details). A platform may combine this with information it already holds, including across devices where you are signed in to it, and may use it for its own purposes under its own privacy policy.

Some US state laws describe allowing an advertising platform to receive this information — through cookies, pixels or server-side events — as "sharing" for cross-context behavioural advertising, as "targeted advertising", or as a "sale", even when no money changes hands. We do not sell personal information for money.

Categories shared for advertising in the 12 months before the date at the top of this Policy: When you accept advertising cookies, we share online identifiers (cookie identifiers, your IP address and any ad click identifier), your activity on our website, and the fact and value of a sign-up, checkout or purchase, with the advertising platforms named above. Under some US state privacy laws this counts as “sharing” for cross-context behavioural advertising, and may be treated as a “sale”. You can stop it at any time through “Your Privacy Choices” or Global Privacy Control. Separately, Microsoft receives Microsoft Clarity's recordings of every visitor's use of our pages, whatever your cookie choices — our pages tell Clarity that consent is granted for every visitor — and may use Clarity data for its own purposes; some US state laws may treat that as “sharing”. Global Privacy Control and “Your Privacy Choices” do not switch Clarity off.

We have not sold or shared Session Content, passwords, payment-card data, cancellation reasons, book records, our own website events, or any information from the macOS app (including its usage analytics), and we never will for advertising. We do not knowingly sell or share the personal information of anyone under 16.

You can opt out of this sharing at any time using the "Cookie settings" and "Your Privacy Choices" links in the footer of every page of our website, by rejecting advertising cookies in our banner, by sending a Global Privacy Control signal (see below), or by emailing info@clozo.ai. You do not need an account to opt out. These choices cover advertising and PostHog analytics; they do not switch off Microsoft Clarity or our own website events (section 10).

12. Global Privacy Control and other opt-out signals

If your browser or an extension sends a Global Privacy Control ("GPC") signal, or another opt-out preference signal recognised by law, we treat it as a request to opt out of the sale and sharing of your personal information and of targeted advertising. We apply it to that browser and device and, where you are signed in, to your account, automatically and without asking you for anything further. When we detect the signal, our cookie-settings panel shows that your opt-out request has been honoured, and the signal overrides any earlier acceptance on that browser. We honour these signals for visitors from every location. If you later want to allow advertising cookies again, you can do so in "Cookie settings". We do not require you to verify your identity or to create an account in order to opt out. Global Privacy Control does not switch off Microsoft Clarity, our own events for signed-in visitors (section 10) or the functional browser identifier described in section 9B.

13. International transfers

Clozo FZE LLC is based in the United Arab Emirates. Our servers run on Fly.io, and most of our service providers operate in the United States. Wherever you live, your information will be processed in the United Arab Emirates, the United States, and the other countries where our providers operate. Those countries may not have data-protection laws equivalent to those where you live, and their authorities may be able to access information under local law.

When you give information to us directly, we collect it in the United Arab Emirates. Where we transfer personal information protected by the EU or UK GDPR to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant) or, for recipients certified under the EU–US Data Privacy Framework and its UK Extension, on that certification. Where the UAE Personal Data Protection Law applies, we transfer information under contractual safeguards requiring the recipient to protect it to the standard that law requires, or where the transfer is necessary to perform our contract with you. You can ask for more information about these safeguards at info@clozo.ai. We put in place appropriate safeguards for these transfers, including standard contractual clauses where required.

14. Automated decisions

We do not make decisions about you based solely on automated processing that produce legal effects or similarly significant effects on you, and we do not use automated decision-making technology to make significant decisions about you. The suggestions the app generates are for you to read and judge; they are not decisions about you, and we do not use them to assess you.

One automated control does affect access: to prevent misuse of the free Trial, our systems can automatically refuse to create a new account from a device or network that has already used its free allowance or that shows signs of automated abuse, and an account or email address that has already had a free Trial cannot start another (a checkout that tries to starts the paid plan at once, as our Terms of Service explain). If this happens and you believe it is a mistake, email info@clozo.ai and a person will review it within 10 business days.

We use an AI model to sort cancellation reasons into topics (section 9A). The result informs what we fix; it never changes your plan, your price or your cancellation. Whether we offer you the 25% retention discount depends only on whether a discount was accepted on your account in the last 12 months and whether your plan is one it can apply to — never on a profile of you.

15. How long we keep information

We keep personal information for the periods below, unless the law requires us to keep it longer or we need it to establish, exercise or defend a legal claim.

• Account information (username, email, optional name, password hash, marketing preference): while your account exists, and deleted within 30 days of account deletion; backups are overwritten within a short cycle thereafter.
• Sign-in sessions: app sessions for 90 days from last use; web sessions for 30 days; or sooner when you sign out.
• Security and anti-abuse records (IP address, device identifier, macOS login name, Mac model and OS version, and sign-up, sign-in, session-start and purchase-access events): 24 months from each event, to prevent fraud and abuse and to answer payment disputes.
• Usage, session and quota records (section 3): while your account exists.
• App usage analytics and our own website events: individual events for up to 90 days (sometimes less, to save space); daily counts, by app or website version, for 25 months; a record of first-time milestones (for example the first role you created, with the title you typed for it, or finishing onboarding) and your latest daily summary while your account exists.
• Error and crash reports at Sentry (once error reporting is switched on): up to 90 days.
• Website session recordings (Microsoft Clarity): kept by Microsoft for 30 days, unless we mark a recording to keep, when Microsoft keeps it for up to 13 months; heatmaps are aggregated. Because recordings are not linked to your account, we cannot find or delete the recordings of one person; they expire on Microsoft's schedule.
• Billing history (Trial start and end, charges, renewals, plan changes, failed payments, cancellations, retention discounts, refunds): as purchase records, 7 years. If you delete your account, we keep only what the law requires, without the details of those events.
• Records of the terms shown to you and the charges you confirmed: while your subscription runs, and then 3 years from when they were shown or 1 year after the subscription ends, whichever is later — even if you delete your account sooner, because the law requires us to be able to show them.
• Cancellation records (the click, the steps, the outcome, the usage snapshot and the retention-discount record): while your account exists. Your typed reason and voice-note transcript: for as long as your account exists (deleted with your account). Voice-note audio: 1 year from upload, then deleted.
• Book records (section 9B): while your account exists. Links between your browser's identifier and your accounts: deleted 180 days after they were last used, or when the account is deleted.
• One-time sign-in codes and single-use links: deleted 7 days after they expire.
• Records of which celebration animations were shown to you: up to 90 days.
• Database backups: kept for 14 days; they never contain voice-note audio or app and website usage events.
• Purchase records (plan, price, dates, purchase IP address, Stripe/PayPal transaction identifiers, billing country): 7 years, as required by UAE tax and accounting law, for tax, accounting and dispute purposes.
• Session Content on our relay: not stored; held in memory only while a request is processed.
• Session Content at AI providers: governed by each provider, as described in section 7 (OpenAI up to 30 days for abuse-monitoring; Cerebras none; Groq none, or up to 30 days in limited cases; OpenRouter prompts none).
• Session history on your Mac (transcripts and suggestions): your most recent sessions (currently the newest 40, subject to a size limit), kept until you delete them from History or newer sessions replace them.
• Diagnostic traces on your Mac: a separate technical record of each session, which includes the text of the prompts sent and the answers returned, kept for your most recent sessions (currently the newest 25) and removed when newer sessions replace them. Deleting a session from History does not delete its diagnostic trace.
• Your résumé/CV on your Mac: the text the app read from it and, in app versions that let you open the original, a copy of the original file, kept until you replace or delete it.
• Session audio on your Mac: written by default for the newest three earlier sessions plus the current one (each recording capped at three hours); there is currently no in-app switch to disable this. Older recordings are removed when a new session starts. There is no automatic time-based deletion, so recordings remain until they are pruned by newer sessions or until you delete the files yourself. Deleting a session from History does not delete its recording.
• Support emails and support requests (including a request for our founder's help made while cancelling): for up to 3 years after the request is closed.
• Website analytics (PostHog): up to 12 months; the analytics cookie lasts up to 365 days, or is not set if you reject analytics.
• Advertising click identifiers and campaign parameters recorded against a purchase (for example a Google gclid or a Meta fbclid, where you allowed advertising cookies): kept as part of the purchase record, for the same period as that record. We do not apply a separate, shorter retention period to them. You can ask us to erase them at any time using the contact details in section 1.
• Advertising data held by the platforms: retained by each advertising platform under its own policy; see the Cookie Policy.
• Consent and opt-out records: up to 5 years, so we can show what you chose.
• Privacy-request records: 24 months.
• Email unsubscribe list: kept indefinitely, so that we do not email you after you unsubscribe.

To delete individual sessions from History, use the app's history controls; this removes the session's transcript and suggestions from History, but not its diagnostic trace or any audio recording of it. Those are kept in the session-traces folder inside the app's Application Support folder (~/Library/Application Support/Interview Clozo), one folder per session, and you can delete any of them there at any time. To remove all local files, delete the app's Application Support folder from your Mac. To request deletion of your account and the data we hold on our servers, email info@clozo.ai. Deleting your account deletes your cancellation records, reasons, transcripts and voice notes, your usage analytics and website events, your support requests, your book records and your browser links; we keep your billing history without its details, and the records of the terms shown to you, for the periods above, and we ask Sentry to delete the error reports that carry your account ID. We handle account-deletion and data-export requests manually: email info@clozo.ai and we will complete your request within the response times in section 17.

16. Security

We protect personal information with measures appropriate to its sensitivity, including encryption in transit, hashed passwords, access controls limited to staff who need access, session tokens, and keeping Session Content off our servers. No system is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities where the law requires, without undue delay, and will tell you what happened and what you can do.

17. Your rights by region

Depending on where you live, you may have some or all of the following rights: to know what personal information we hold about you and to receive a copy; to correct it; to delete it; to receive it in a portable format; to restrict or object to certain uses; to opt out of the sale or sharing of personal information and of targeted advertising; to withdraw consent (without affecting processing already carried out); and to object to processing based on our legitimate interests, including profiling. Wherever you live, we will extend these rights to you, except where the law allows us to decline (for example, records we must keep for tax purposes).

How to exercise your rights. Email info@clozo.ai. We will verify your request using information we already hold, usually by confirming control of your account; we will not require verification simply to opt out of sale or sharing. You may use an authorised agent with your written permission. We will not treat you differently for exercising your rights. You can withdraw consent to website advertising and PostHog analytics at any time in “Cookie settings”; Microsoft Clarity, our own website events for signed-in visitors, the functional browser identifier and the app's usage analytics do not depend on those settings (sections 9B and 10).

Response times. We respond within the time your law requires — generally 45 days in the United States (extendable once by a further 45 days), one month in the EEA and UK (extendable by two further months for complex requests), and, in India, within the periods that apply once those rights are in force.

United States

Residents of California and of other US states with comprehensive privacy laws have the rights described above, including the right to opt out of sale, sharing and targeted advertising, and (where applicable) the right to appeal. To appeal a decision on your request, reply "appeal" to our response and a different member of staff will review it; if you remain dissatisfied you may contact your state Attorney General. California residents may also see the Notice at Collection below and the "Your Privacy Choices" link in our website footer. Provisions of any agreement that purport to waive or limit your rights under the CCPA, including any representative-action waiver, do not apply to those rights.

EEA and United Kingdom

Individuals in the EEA and UK have the rights above under the GDPR and UK GDPR, including the right to lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office). You may contact us at info@clozo.ai. We do not route privacy complaints into any arbitration clause.

India

Once the relevant provisions of India's Digital Personal Data Protection Act are in force, individuals in India will have the rights above, may contact us at info@clozo.ai, and may complain to the Data Protection Board of India.

United Arab Emirates

Where the UAE Personal Data Protection Law applies, you have rights of access, correction, deletion, restriction, portability and objection (including to automated processing), which you may exercise at info@clozo.ai.

Canada (including Quebec)

Individuals in Canada may exercise the rights above and may contact our Privacy Officer at info@clozo.ai, or complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information. Your personal information is processed outside Canada and may be accessible to authorities in those countries under their laws.

Australia

Individuals in Australia may seek access to and correction of their personal information and may complain to the Office of the Australian Information Commissioner. Your personal information may be disclosed to recipients overseas, including in the United States and the United Arab Emirates.

18. Children

Interview Clozo is for adults. You must be at least 18 years old to create an account or buy a plan. Our website and app are not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it and close the account. If you believe a child has provided us with information, contact info@clozo.ai.

19. Changes to this Policy

We will update this Policy when our practices change, and at least once a year. We will post the new version with its date and keep the previous version available on request. When we change this Policy, we email every account holder when the new version is published, and it applies from that day — the date shown at the top of this Policy. We will never use information we already hold to train AI models, or share it in a new way for advertising, unless you agree.

20. Notice at Collection (short form)

We collect your account details, purchase and billing details (including the terms shown to you when you paid), device and security information, usage and session records, the app's usage analytics (including the titles of your roles), our own website events when you are signed in, records of our free book offer, and, when you run a session, the audio, screen images and text of that session, in order to provide Interview Clozo, keep it secure, improve it and meet our legal obligations. On our website, Microsoft Clarity records how every page is used, for every visitor, with what you type masked and without linking the recordings to your account; advertising and PostHog analytics run only if you allow them. When you start to cancel, we record that you did and collect your reason, which may include audio information from a voice note that OpenAI transcribes. Session Content and cancellation reasons are not sold, are not shared for advertising, and are not used to train AI models. How long we keep each category, and your choices, are set out above in How long we keep information, Analytics, session recordings, error reports and cookies, Advertising, pixels and "sharing" or "sale" and Your rights by region.

21. Contact and complaints

For any question or request about this Policy or your personal information, contact us at info@clozo.ai. You also have the right to complain to your data-protection authority, including your EEA supervisory authority, the UK Information Commissioner's Office, the Office of the Privacy Commissioner of Canada or Quebec's Commission d'accès à l'information, the Office of the Australian Information Commissioner, the UAE Data Office, or the Data Protection Board of India once it accepts complaints.