1. Who This Policy Applies To
This Privacy Policy applies to EvidenceFit Studio websites, web applications, beta services, and related services operated by MRAB AI Labs that link to this Policy.
EvidenceFit Studio is intended only for individuals who are 18 years of age or older.
We do not knowingly offer the Service to children or intentionally collect personal information from individuals under 18.
2. Information We Collect
The information we collect depends on how you use EvidenceFit.
Account and Identity Information
When you create or access an account, we may collect information such as:
- your name;
- email address;
- profile image;
- account identifier;
- authentication information provided through a sign-in provider;
- account role or access status;
- beta access, waitlist, approval, or account-status information; and
- account creation and sign-in information.
Where third-party authentication such as Google Sign-In is used, we do not receive your Google password.
Career and Professional Information
When you use EvidenceFit, you may choose to provide information including:
- resumes and resume content;
- employment history;
- job titles;
- employer or organization names;
- dates of employment;
- accomplishments and performance results;
- professional skills and competencies;
- education and qualifications;
- certifications;
- career goals;
- job descriptions;
- job requirements;
- interview questions;
- interview answers;
- interview preparation material;
- interview feedback or reviews;
- professional evidence or supporting information; and
- other information you choose to enter, upload, or generate through the Service.
Some of this information may reveal personal information beyond what is required to use EvidenceFit. You should avoid including unnecessary sensitive information in documents or responses you provide to the Service.
Files and Uploaded Content
If you upload documents or other files, we may process and store the uploaded file, file name and type, extracted text, processing or extraction status, upload timestamps, and related project information.
Audio and Transcription Information
Where EvidenceFit offers interview recording, transcription, speech-to-text, or similar functionality, we may process audio or other supported media you choose to submit, transcripts generated from that material, technical information needed to perform transcription, and related interview, session, or project context.
EvidenceFit transcription functionality is intended to support legitimate career-development and interview workflows. You are responsible for ensuring that you have any rights, authority, notices, or consents required to record, upload, submit, or transcribe material involving another person.
We do not activate your microphone or record audio without an action or permission from you.
AI, Transcription, and Operational Information
When you use AI-powered or transcription features, we may record operational metadata including the feature or operation used, provider and model or service, date and time, token or processing usage, transcription request and duration information, file size, provider job or response identifiers, estimated or actual processing cost where available, processing duration, success or failure status, error codes, retries or processing attempts, project/session/request identifiers, quota or rate-limit events, and other technical information reasonably necessary to operate, secure, monitor, and improve the Service.
Depending on the feature and configuration in use, not every category of operational metadata listed above will necessarily be collected for every request.
Operational analytics are designed to avoid unnecessarily storing the underlying contents of resumes, interview responses, job descriptions, prompts, or AI responses.
Technical and Security Information
We may collect technical information such as browser and device information, IP address where required for operation/security/fraud prevention/server logging, authentication and session information, request timestamps, application errors, rate-limit events, security events, access-control failures, and information reasonably necessary to investigate misuse or protect the Service.
3. How We Use Information
We use personal information only for legitimate purposes connected with operating EvidenceFit, including to:
- create and manage your account;
- authenticate you and control access to the Service;
- provide resume analysis, rewriting, tailoring, and related features;
- analyze job descriptions and job requirements;
- provide interview preparation, roleplay, feedback, and related functionality;
- process files and information you submit;
- generate AI-assisted outputs you request;
- provide transcription or speech-processing functionality you choose to use;
- maintain project history and user-created work;
- operate beta-access controls;
- calculate and monitor Service usage, including AI and transcription usage, and operating costs;
- enforce usage limits, our Acceptable Use Policy, and protections against abuse, circumvention, fraud, or excessive use;
- diagnose errors and improve reliability;
- maintain security and prevent unauthorized access;
- provide customer or technical support;
- comply with legal obligations; and
- improve the functionality and usability of EvidenceFit.
We will not use personal information for a materially different purpose without appropriate notice and, where required, consent.
4. Artificial Intelligence Processing
EvidenceFit uses artificial intelligence to provide features such as career analysis, resume assistance, interview preparation, roleplay, feedback, and related functionality.
Information relevant to a feature may be sent to an AI service provider for processing. Depending on the feature, this may include portions of your resume, a job description, professional evidence, interview questions or answers, instructions you provide, or other information needed to produce the requested result.
We seek to limit information sent to AI providers to what is reasonably necessary for the requested operation.
AI-generated results can be inaccurate, incomplete, misleading, or inappropriate. You should review generated material before relying on it or providing it to employers, recruiters, or other third parties.
Training of Models
MRAB AI Labs does not sell your career information or submitted content for AI training.
MRAB AI Labs does not use your private resume, interview responses, job-search materials, or other private career content to train a general-purpose MRAB AI Labs model unless we separately explain the proposed use and obtain any consent required by law.
Third-party AI providers process information according to the agreements and settings applicable to the services we use. We select service configurations intended for business or API processing where reasonably available.
5. Service Providers and Third Parties
We may use service providers to operate EvidenceFit, including providers of cloud hosting and infrastructure, databases and storage, authentication, artificial intelligence processing, transcription or speech processing, email or communications, security and monitoring, and technical support services.
These providers may process personal information on our behalf where necessary to provide their services. For example, where you use transcription or speech-processing functionality, submitted audio or other supported media and related technical information may be transmitted to a transcription or speech-processing provider so that the requested transcript can be generated.
MRAB AI Labs remains responsible for managing personal information under its control and takes reasonable steps to select and use service providers appropriately.
We may also disclose information when required by law; when reasonably necessary to investigate fraud, misuse, security incidents, or violations of our Terms; to protect rights, property, or safety; in connection with a business transaction subject to appropriate protections; or with your consent or at your direction.
We do not sell personal information.
6. International and Cross-Border Processing
EvidenceFit may use service providers located outside your province or country.
As a result, personal information may be processed or stored in Canada, the United States, or other jurisdictions in which our service providers operate.
When information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement agencies, or government authorities where legally required.
We take reasonable measures to ensure service providers handling personal information provide protections appropriate to the nature of the information and the services being provided.
7. Cookies and Similar Technologies
EvidenceFit uses cookies and similar browser technologies where necessary to operate the Service.
Strictly Necessary Cookies
We may use cookies or similar technologies for maintaining an authenticated session, keeping you signed in, protecting account security, preventing unauthorized requests, remembering security-related state, and enabling core application functionality.
These technologies are necessary for the Service to function properly.
Third-Party Authentication
When you choose to sign in through a third-party identity provider such as Google, that provider may use its own cookies or similar technologies as part of the authentication process. Those technologies are governed by the provider's own privacy practices.
Analytics and Non-Essential Cookies
EvidenceFit does not rely on non-essential cookies as a condition of accessing core functionality.
If we introduce analytics, advertising, personalization, or other non-essential cookies or similar tracking technologies, we will provide appropriate notice and, where required by applicable law, obtain your consent or provide suitable controls before using them.
You can also control cookies through your browser. Blocking strictly necessary cookies may prevent you from signing in or using parts of EvidenceFit.
8. Legal Basis and Consent
Where applicable privacy law requires a legal basis for processing, we process personal information because it is necessary to provide the Service you request; you have provided consent; processing is reasonably necessary for legitimate operational, security, or business purposes; we are required to comply with legal obligations; or another lawful basis applies.
Where consent is required, you may withdraw it subject to legal or contractual restrictions and reasonable notice. Withdrawal may mean we can no longer provide some or all of the Service.
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide your account and projects, meet legal obligations, resolve disputes, maintain security, and enforce agreements.
Different information may have different retention periods. Account and career information may be retained while your account remains active.
If you request deletion of your account or information, we will delete or de-identify applicable information within a reasonable period, subject to legal obligations, fraud and security requirements, dispute-resolution requirements, technical backup cycles, and information we are otherwise permitted or required to retain.
Information contained in backups may remain temporarily until the relevant backup is overwritten or securely retired.
Operational records, including records used to measure AI or transcription usage and investigate misuse, may be retained for a limited period where necessary for security, reliability, billing, quota enforcement, fraud or abuse prevention, dispute resolution, or legal compliance.
We will continue to develop and document specific retention schedules as EvidenceFit moves beyond beta.
10. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, theft, misuse, unauthorized disclosure, alteration, and destruction.
Measures may include authentication controls, access restrictions, encrypted network communications, rate limits, application security controls, monitoring, and other safeguards appropriate to the sensitivity of the information.
No online service can guarantee absolute security. You are responsible for protecting access to your own devices, email account, and authentication credentials.
If we become aware of a privacy or security incident, we will investigate and take steps required by applicable law.
11. Your Rights and Choices
Depending on where you live, you may have rights relating to your personal information. These may include the right to request access, ask us to correct inaccurate information, request deletion of certain information, withdraw consent where processing depends on consent, ask questions about use or disclosure, make a privacy complaint, and exercise other rights provided by applicable privacy law.
To make a request, contact [email protected].
We may need to verify your identity before responding. Some requests may be limited where we are required or permitted by law to retain information.
12. Account and Data Deletion
You may contact us to request deletion of your account or personal information.
Deleting information may prevent us from continuing to provide features that depend on that information.
We may retain limited records where reasonably necessary for legal compliance, security, fraud prevention, financial recordkeeping, dispute resolution, or enforcement of our agreements.
13. Accuracy of Your Information
You are responsible for ensuring that information you provide is reasonably accurate.
Because EvidenceFit may use information you provide to generate resumes, interview responses, career analysis, and other materials, incorrect information can result in incorrect AI output.
You should review your stored information and generated materials regularly and correct inaccuracies where appropriate.
14. Information About Other People
Do not upload or provide personal information about another person unless you have a lawful reason and appropriate authority to do so.
If you record, upload, or transcribe material involving another person, you are responsible for obtaining any notice, permission, authorization, or consent required by applicable law or by your obligations to that person.
For example, you should avoid uploading confidential employer, colleague, client, candidate, or customer information that is not necessary for your use of EvidenceFit.
15. Beta Services
EvidenceFit may be made available as a beta, preview, pilot, or early-access service.
During beta operation, features may change, data structures and workflows may evolve, functionality may be added, modified, or removed, and reliability may differ from a fully released commercial service.
Our privacy obligations continue to apply during beta operation.
16. Changes to This Privacy Policy
We may update this Privacy Policy as EvidenceFit evolves or when legal, technical, or operational requirements change.
If we make material changes, we will provide appropriate notice through the Service, website, email, or another reasonable method.
The Effective Date at the top identifies when the Policy was last updated.
17. Privacy Questions and Complaints
MRAB AI Labs is accountable for personal information under its control.
We will review privacy concerns and respond within a reasonable period and in accordance with applicable law.