Privacy Policy — El-Maestro

Effective date: October 28, 2026 · Last updated: October 28, 2026

El-Maestro ("we", "us", "our") operates https://el-maestro.io, an AI-powered career-preparation service offering mock job interviews, CV tailoring, and a job-search assistant ("Job-AutoPilot"). This policy explains what information we collect, how we use it, who processes it for us, and the choices you have.

1. Information we collect

Account information. When you register, we collect your name, email address, and a password, which we store only as a secure hash. We never store your password in plain text.

Profile and résumé data. You may upload a résumé/CV (as text or a file) and provide profile details such as work history, skills, target companies, locations, and salary preferences. We store the text of your CV so the features you use can work from it.

Interview data. When you take a mock interview, we process the job posting you provide, your answers, and the questions asked, and we generate scores and feedback, which we store with your session so you can review them.

• Voice interviews. If you use voice mode, your spoken answers are streamed to our voice provider (OpenAI Realtime) to hold the conversation and transcribe your answers. The transcript is stored as your interview answers.
• Camera presence (optional). If you enable the camera, presence analysis runs in your browser on your device. We do not upload or store video of you. We do receive and store simple numeric presence metrics (for example, the percentage of time a face was visible) as part of your session results.

Job-search data. Job-AutoPilot stores your search settings, the openings matched for you, the applications you track and the outcomes you record, and a log of search and application events. If your plan includes recurring searches, we run them automatically on the schedule your plan provides.

Application answers (optional). You may save answers to common application questions — for example education, work history, work authorization, and salary expectations — so you can reuse them when you apply. Some fields are voluntary self-identification questions (such as gender, race/ethnicity, veteran status, and disability status). These are always optional, are stored only if you choose to provide them, and are never guessed or filled in for you. You can view, change, or delete your saved answers at any time.

Applying is manual-assisted. El-Maestro prepares your application materials and shows you your saved answers next to the employer's posting. You open the employer's application page and submit the application yourself. El-Maestro does not submit applications to employers on your behalf, and nothing is sent to an employer unless you send it.

Email assistant (optional, off by default). The email assistant works only if you (1) connect your Gmail account and (2) turn the assistant on in settings — it is off by default. With your permission (Google OAuth scopes gmail.readonly and gmail.send), it reads your inbox only to identify job-application-related messages and update your application statuses. Depending on the consent mode you choose, a draft follow-up either waits in an approval queue for your one-tap approval, or is sent automatically only under rules you set explicitly. Every action the assistant takes is recorded in an activity log you can review. Your Google refresh token is stored encrypted. You can disconnect Gmail or turn the assistant off at any time, and disconnecting stops all access.

Payment information. Payments are processed by Stripe. We never receive or store your full card number. We keep records of your purchases, the plan or credits they bought, and their expiry.

Technical data. We use cookies that are necessary to run the service: a session cookie to keep you signed in and a cookie to remember your language preference. We do not use advertising or third-party analytics cookies. Server logs record basic request data (such as IP address and timestamps) for security and reliability. Our error-tracking tool is configured to collect errors only, without personal data (no tracing, send_default_pii off).

2. How we use information

• To provide the mock-interview, CV-tailoring, and Job-AutoPilot services.
• To generate interview questions, scores, and feedback.
• To match job openings to your settings and track your applications.
• To prepare application materials for your review and submission.
• To process payments and manage your credits and plan term.
• To send you service emails (for example verification, receipts, and follow-ups you asked the assistant to draft or send).
• To respond to support requests and protect the service against abuse.

We do not sell your personal information. We do not use your résumé, interview answers, saved application answers, or emails to train AI models.

3. Service providers who process data for us

We share data only as needed to run the service:

• Stripe — payment processing (card data goes to Stripe, not to us).
• OpenAI — AI language processing for interview scoring, follow-up questions, question generation, and résumé/skill extraction; voice conversation and transcription in voice interviews (OpenAI Realtime); and, if you enable the email assistant, classification of job-related emails.
• Google Gemini — an independent cross-check of generated interview preparation materials (job posting and CV-derived content).
• ElevenLabs — text-to-speech for the interviewers' voices. Only the interviewer's script text is sent. If ElevenLabs is unavailable, a fallback voice service (Microsoft Edge text-to-speech) may be used.
• Google — Gmail access, only if you connect your account, as described above.
• Resend — delivery of our service emails (via SMTP).
• Sentry — error reporting, configured to exclude personal data.
• Render — application hosting and storage.
• Cloudflare — DNS, content delivery, and media hosting.
• UptimeRobot — availability monitoring (it checks that the site is up; it receives no account data).

Each provider processes data under its own privacy policy.

4. Retention and deletion

We keep your data while your account is active. You can delete your account at any time from within the app (or by emailing us). Account deletion is a hard delete of your personal data — sessions and answers, CVs and tailorings, job-search data, saved application answers, email-assistant data and tokens are removed, and any connected Gmail token is revoked with Google on a best-effort basis. Two limited exceptions: (1) purchase and account-credit records are retained on an anonymized record (with your identity removed) because accounting and refund rules require the ledger; and (2) a one-way hash of your deleted email address is retained so we can prove deletion happened and prevent abuse of introductory offers. Neither exception can be used to identify or contact you.

5. Security

We use HTTPS for all connections, hash passwords, encrypt stored Google OAuth tokens, use single-use, time-limited tokens for email verification and password resets, and limit error reporting so it does not include personal data. No system is perfectly secure, but we take reasonable measures to protect your information.

6. Your choices

• Access, correct, or delete your profile information, saved CV, and saved application answers from your account, or by contacting us.
• Disconnect Gmail or disable the email assistant at any time in settings.
• Delete your account at any time, as described in section 4.
• Opt out of any non-essential email by contacting us.

7. Children

El-Maestro is intended for adults preparing for employment. We do not knowingly collect data from anyone under 18, and accounts for users under 18 are not permitted.

8. Changes to this policy

We will post changes on this page and update the "Last updated" date. Material changes will be announced in the app or by email.

9. Contact

El-Maestro · Email: president@el-maestro.io · Website: https://el-maestro.io