BadgeBound Prep LLC ("BBP," "we," "us") provides AI-powered firefighter interview preparation. This policy explains what we collect, how we use it, who we share it with, and the choices you have. It applies to badgeboundprep.com and related services (the "Service"). Capitalized terms not defined here have the meaning given in our Terms of Use.
1. Information We Collect
You provide directly:
- Account information: name, email, password
- Candidate profile information: resume data, work and education history, certifications, and other background you choose to add to your candidate profile
- Practice content: written mock interview answers; audio recordings and transcripts of voice-based mock interviews; and, when video features launch, video of your sessions
- Department tracking selections and session preferences
- Communications you send us (support requests, feedback)
Generated by the Service:
- Scores, competency assessments, and AI coaching feedback on your sessions
- Progress and usage history (sessions completed, modes used, trends)
Collected automatically:
- Log and device data: IP address, browser type, pages viewed, timestamps, and similar diagnostic data
- Essential cookies (see Section 9)
Payment information is collected and processed by Stripe, our payment processor. We do not store your full card number. We retain Stripe customer identifiers and transaction records.
2. How We Use Your Information
- Run your practice sessions, including converting your speech to text, generating AI panelist responses, and producing scores and coaching feedback
- Personalize your experience, including session recommendations based on your performance history and, where you enable it, injecting your candidate profile into mock sessions
- Maintain your progress history and session playback
- Process payments and manage subscriptions
- Send service communications (receipts, renewal reminders, security notices) and, with your consent or as permitted by law, product updates you can opt out of
- Maintain security, prevent fraud and abuse, and debug the Service
- Analyze usage in aggregate to improve the Service
We do not use your recordings, transcripts, or answers to train AI models.
3. AI Processing and Service Providers
Your session content is processed by third-party providers acting on our behalf to deliver core features, under contracts restricting their use of your data to providing services to us. These include, by category:
- Payment processing (Stripe)
- Cloud hosting and databases
- Real-time voice infrastructure (audio streaming for live sessions)
- Speech-to-text and text-to-speech providers
- Large language model providers that generate panelist responses, scores, and feedback
A current list of subprocessors is available on request. We do not permit these providers to use your identifiable session content for their own purposes.
4. Voice Recordings
- We record voice sessions only after you confirm at the in-product prompt before recording begins.
- Recordings and transcripts are used to run your session, generate your scores and feedback, and provide session playback to you.
- We do not create voiceprints or use your audio to biometrically identify you, and we do not sell your recordings.
- You can delete individual session recordings or your full history as described in Section 7.
5. Information Sharing
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with:
- Service providers described in Section 3, to operate the Service
- Your educational institution or training program, if you use the Service through an institutional account (see Section 6)
- Legal authorities when required by law, subpoena, or to protect rights and safety
- A successor entity in a merger, acquisition, or asset sale, in which case this policy continues to apply to your data
- Others only with your direction or consent
6. Institutional and Educational Accounts
If your access is provided through a college, academy, or training program:
- Program instructors or administrators may view your session results and progress, as disclosed at signup for that program
- Student records handled under an institutional contract are managed consistent with the institution's obligations (including FERPA, where applicable) as set out in that contract
- Records connected to grant-funded programs may be retained for the period required by the funding source (see Section 7)
- The institutional agreement governs in the event of a conflict with this policy for institution-provisioned data
7. Data Retention and Deletion
- Account data: retained while your account is active.
- Session content (answers, recordings, transcripts, scores): retained while your account is active so we can provide your history and progress tracking, unless you delete specific sessions earlier.
- Deletion requests: you may delete your account and associated data at any time. We complete deletion requests within 30 days, except for data we must retain as described below.
- Payment records: transaction records are retained as required for tax, accounting, and audit purposes (typically 4-7 years), with personal identifiers minimized where possible.
- Institutional/grant records: where your participation is part of a grant-funded program, related records may be retained for the retention period required by the funding source (for example, federal grant rules requiring retention for a period of years after program completion), as set out in the institutional agreement.
- Applicants: if you started but did not complete signup, or applied to a program and were not accepted, your data is fully erasable on request.
- Backup copies are purged on our standard backup rotation schedule after deletion.
8. Data Security
We use industry-standard measures to protect your data, including encryption in transit, access controls, and secure infrastructure. No method of transmission or storage is 100% secure. If a breach affecting your personal information occurs, we will notify you and applicable regulators as required by law.
9. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising or cross-site tracking cookies. If we add analytics cookies in the future, we will update this policy and provide any required consent controls.
10. Your Rights and Choices
You may, at any time:
- Access the personal data we hold about you
- Correct inaccurate data (most profile data is editable in-app)
- Delete your account, individual sessions, or specific data
- Export your data in a portable format
- Opt out of non-essential communications via the unsubscribe link or account settings
To exercise rights not available in-app, email [email protected]. We will verify your identity before acting on a request and respond within 30 days. We will never discriminate against you (in price or service quality) for exercising privacy rights. You may use an authorized agent to submit requests, subject to verification.
California residents: we honor the rights described above for all users, including rights of access, correction, deletion, and portability consistent with California privacy law. As noted in Section 5, we do not sell or share personal information as those terms are defined under California law, so no "Do Not Sell or Share" opt-out is required.
11. Children's Privacy
The Service is intended for users 18 and older. We do not knowingly collect information from anyone under 18. If we learn we have done so, we will delete it.
12. Changes to This Policy
We may update this policy from time to time. For material changes, we will notify you by email or in-product notice before the changes take effect, and update the version date above.
13. Contact
Privacy questions or requests: [email protected]