1. Acceptance

By creating an account or using Aidril, you agree to these Terms. If you do not agree, do not use the Service.

2. Eligibility

You must be at least 16 years old to use the Service and have the legal capacity to enter a binding agreement.

3. Your account

Provide accurate information when registering. You are responsible for all activity under your account. Notify us immediately at [email protected] if you suspect unauthorised access.

4. Permitted use

You may use Aidril solely for lawful, personal interview preparation.

5. Prohibited conduct

• Use the Service for any unlawful purpose.
• Attempt to reverse-engineer or extract the AI models underlying the Service.
• Scrape or systematically extract data using automated tools.
• Impersonate another person or misrepresent your identity.
• Upload or transmit malware, viruses, or malicious code.
• Circumvent authentication, rate limits, or access controls.
• Resell or sublicense access to the Service without written consent.

6. Intellectual property

The Service and all its components are owned by Aidril, Inc. We grant you a limited, non-exclusive, non-transferable licence to use the Service for personal use.

7. Subscriptions & payments

Paid subscriptions are billed in advance monthly or annually. All fees are non-refundable except as required by law. We may change pricing with 30 days' notice.

8. Termination

Cancel your account anytime from account settings. We may suspend or terminate your account for violations of these Terms.

9. Disclaimers

The Service is provided "as is" without warranties of any kind. AI-generated feedback is for practice purposes only and is not professional career advice.

10. Limitation of liability

To the maximum extent permitted by law, our total liability for any claim shall not exceed the fees you paid us in the 12 months preceding the claim.

11. Governing law

These Terms are governed by the laws of Delaware, USA.

12. Changes

We may update these Terms at any time with at least 14 days' notice for material changes.

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. InterviewAI also uses browser localStorage and sessionStorage for similar purposes.

2. Cookies we use

3. Essential cookies

Essential cookies are required for the Service to work. You cannot opt out of these and continue to use the Service.

4. Analytics

We use privacy-respecting analytics to understand feature usage and improve the product. This data is anonymised and aggregated.

5. How to control cookies

• Browser settings: most browsers let you view, delete, and block cookies.
• Private mode: cookies set during private browsing are typically deleted when you close the window.
• Clear manually: you can clear localStorage and cookies for aidril.com from your browser's developer tools at any time.

Infrastructure & data storage

• Data stored in SOC 2 Type II certified data centres in the United States.
• Data at rest encrypted using AES-256.
• All data in transit protected by TLS 1.2 or higher. HTTPS enforced across all endpoints.
• Encrypted database backups retained for 30 days.

Authentication & access control

• Passwords hashed using bcrypt with a cost factor of 12. Plaintext passwords are never stored.
• Auth tokens are signed JWTs with a 7-day expiry stored in localStorage.
• Google OAuth available as a more secure, passwordless login option.
• Internal production access requires multi-factor authentication and follows least-privilege principles.

Interview data handling

• Audio is sent to OpenAI's API over TLS and not stored on our servers after transcription.
• Webcam frames are captured in-browser, used for analysis, and deleted within 24 hours.
• Interview transcripts and feedback are stored encrypted and accessible only to the account holder.
• Interview data is never shared with employers, recruiters, or any third party.

Application security

• All interview API endpoints require authentication. Unauthenticated requests are rejected with HTTP 401.
• Rate limiting on authentication endpoints to prevent brute-force attacks.
• CORS configured to restrict cross-origin requests to authorised domains.
• Dependencies regularly audited for known vulnerabilities.

Reporting a vulnerability

Email [email protected] with a clear description, steps to reproduce, and any proof-of-concept. We will acknowledge your report within 48 hours and aim to resolve confirmed issues within 90 days.