Home

Privacy Policy

Last updated: 18 June 2026

1. Introduction

This Privacy Policy explains how CaseCompass (“CaseCompass,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards personal data when you access or use our website at casecompass.in and any related services, features, and applications (collectively, the “Service”). We act as the data controller for the personal data described below. By using the Service, you acknowledge the practices described in this Policy. If you do not agree, please do not use the Service.

2. Scope

This Policy applies to all visitors and users of the Service, including both registered users (who sign in with Google) and unregistered visitors (“guests”). It covers data we collect through the website, the AI practice interviewer, the competition directory, and our analytics and logging systems. It does not apply to third-party websites or services that we link to but do not operate.

3. Information we collect

We collect the following categories of personal data:

  • Account and authentication data. When you sign in with Google, we receive your email address, name, and profile picture from Google. We never receive or store your Google password.
  • Profile data. Information you choose to provide, such as username, business school, batch year, target firms, areas of interest, and biography.
  • Practice activity and content. Cases you start and complete, your full chat transcripts with the AI interviewer, dimension scores, points, streaks, and badges.
  • Guest (unregistered) activity. If you use the AI interviewer without signing in, we store your practice sessions, including the full chat transcripts, on our servers. These are associated with a randomly generated identifier stored in your browser (not with your real-world identity) so that we can understand and improve how guests use the Service. If you later create an account, related activity may be linked to it.
  • Usage and analytics data. We record events about how the Service is used (for example, pages viewed, practice sessions started and completed, and competition links clicked), together with a browser identifier, page paths, referrer, approximate device/browser information, and timestamps. We collect this for both registered users and guests.
  • Cookies and local storage. We use a first-party cookie to keep you signed in, browser local storage for preferences and the guest identifier, and the cookies set by the analytics providers described in Section 6.
  • Server logs. Standard request logs, including IP address, user agent, and timestamp, used for security, rate-limiting, and abuse prevention.

4. How we use information and our legal bases

We use personal data for the following purposes:

  • To operate, provide, and maintain the Service, including running the AI interviewer and saving your progress (basis: performance of a contract).
  • To generate AI interviewer responses and evaluations by transmitting your messages to our LLM providers (basis: performance of a contract / legitimate interests).
  • To compute and display profiles, scores, badges, and (where enabled) rankings (basis: performance of a contract / consent).
  • To analyse usage, measure performance, debug, and improve the Service and develop new features, for both registered users and guests (basis: legitimate interests).
  • To maintain security, prevent fraud and abuse, and enforce our Terms (basis: legitimate interests / legal obligation).
  • To send transactional communications such as a sign-up confirmation (basis: legitimate interests). We do not send marketing emails.

Where we rely on legitimate interests, we balance those interests against your rights and freedoms. Where we rely on consent, you may withdraw it at any time.

5. AI processing of your messages

The AI interviewer is powered by third-party large language model providers. The content of your interview messages (for both registered users and guests) is transmitted to these providers to generate responses and evaluations. Per the terms of the providers we use, free-tier traffic of the type we send is not used to train their models. We do not use your messages to train any model of our own. Please do not enter sensitive personal information into the AI interviewer.

6. How we share data; service providers

We do not sell your personal data. We share data only with the service providers (sub-processors) that operate the Service on our behalf:

  • Supabase — database hosting, authentication, and storage of profiles, practice sessions, transcripts, and analytics events.
  • Vercel — website and serverless/edge hosting, plus Vercel Analytics (aggregate, privacy-friendly traffic measurement).
  • Google — Google Sign-In (authentication), Google AI / Gemini (AI responses where used), and Google Analytics 4 (usage analytics).
  • Groq and OpenRouter — large language model inference for the AI interviewer.
  • Microsoft Clarity — product analytics, including session replay and heatmaps that record interactions such as page navigation, clicks, scrolling, and mouse movement on our pages.
  • Resend — transactional email delivery.

We may also disclose data if required by law, to enforce our Terms, to protect the rights, safety, or property of CaseCompass or others, or in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honour this Policy.

7. Analytics, session recording, and your choices

We use first-party analytics (stored in our own database), Google Analytics 4, Microsoft Clarity, and Vercel Analytics to understand how the Service is used. Microsoft Clarity may capture a recording of your interactions with our pages (a “session replay”); these recordings are intended to exclude form-field contents but may capture general on-page behaviour. You can limit much of this tracking by using your browser’s privacy controls, an ad/analytics blocker, or “Do Not Track” / Global Privacy Control signals, and through Google’s opt-out tools. We will honour applicable opt-out signals where legally required.

8. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter as necessary for legitimate business or legal purposes. Specifically: account, profile, and practice data are retained until you request deletion; guest practice sessions, transcripts, and analytics events are retained for up to twenty-four (24) months for product analysis and then deleted or anonymised; and server logs are retained for up to thirty (30) days. We may retain aggregated or de-identified data, which can no longer be linked to you, for longer.

9. Security

We use industry-standard measures to protect personal data, including encryption in transit, access controls, and reliance on reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and devices secure.

10. International data transfers

We and our service providers may process and store data in countries other than your own, including the United States and other jurisdictions that may have different data-protection laws. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.

11. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you and request a copy (data portability). We will provide a machine-readable export within 30 days.
  • Request correction of inaccurate data, or update it yourself in profile settings.
  • Request deletion of your account and associated personal data. We will action verified requests within 30 days, subject to legal retention requirements.
  • Object to or restrict certain processing, and withdraw consent where processing is based on consent.
  • Make your profile private at any time from profile settings.
  • Lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us using the details in Section 14.

12. Children

The Service is intended for users aged 18 and over and is built for graduate (MBA/PGDM) students. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide a notice on the Service. Your continued use after changes take effect constitutes acceptance of the revised Policy.

14. Contact us

For any privacy question or to exercise your rights, contact us at amanbanthia@casecompass.in. If you are in India, you may also contact our Grievance Officer at the same address in accordance with applicable law. We aim to respond to all requests within 30 days.