How we handle your data
A factual summary for security and compliance review.
Data Residency
Session records — performance scores, qualification status, and skill dimensions — are stored in MongoDB Atlas, hosted in the Mumbai, India region (ap-south-1). This data does not leave the region at rest.
Voice conversation data captured during practice sessions is a separate case: it is processed and held by our voice AI sub-processor, ElevenLabs, not MongoDB. This voice data is not currently India-resident — India-only processing is available on ElevenLabs’ Enterprise plan, which we have not yet enabled. See Retention & Deletion below for how long this data is kept.
Retention & Deletion
Voice data captured by ElevenLabs during practice sessions is automatically and permanently deleted 90 days after the session, via a daily automated purge job we run ourselves — stricter than ElevenLabs’ own default 180-day inactivity retention window. Account information is retained only for as long as your account remains active.
Consent
Every voice session is preceded by a consent screen, compliant with India’s Digital Personal Data Protection Act (DPDP), 2023. No recording begins until consent is given for that session.
Sub-processors
These are the only third parties with any access to your data, each limited to the specific purpose below.
Security Practices
- ✓Role-based access control — reps see only their own data; managers see only their own organization
- ✓CORS locked to an explicit origin allowlist, not left wide open
- ✓X-Frame-Options: DENY enforced site-wide to prevent clickjacking
- ✓Session scores are independently re-derived from the transcript server-side, never trusted from the client alone
Data Deletion Requests
To request deletion of your personal data — including voice recordings, transcripts, and performance scores — contact privacy@repready.site. See our Privacy Policy for the full disclosure.