Privacy Policy

1Who is responsible for your data

EmployeeEcho is the data controller for account holders and for mock interview users. Where a hiring organisation invites candidates to interview for one of its jobs, that organisation is the controller of those candidates' data and EmployeeEcho acts as its processor. Questions about either role can be sent to hello@employeeecho.tech.

2What is collected

From hiring organisations

• Company name, work email address and password credentials.
• Organisation profile: full name of the account holder, city, state, country and timezone.
• Job descriptions and any interview intents entered or edited.
• Applicant email addresses uploaded or typed in to send invitations.
• Billing and purchase records.

From candidates

• Name and email address.
• A CV or resume, where one is uploaded.
• The full written interview transcript, including every answer given.
• Still images captured from the camera and short audio samples captured from the microphone, taken at random moments during the interview.
• Session events, including tab-switch warnings, join time, and whether the session was completed or ended early.
• Generated assessment output: scores across Role-Based Skills, Problem Solving and Communication, a Fit Level, a Response Authenticity verdict and a written summary.

From mock interview users

• Name and email address, a CV or resume where uploaded, the interview transcript, camera and audio samples, and the resulting assessment.
• No account is required to take a mock interview.

Automatically

• Standard technical data such as IP address, browser type and device type.
• Analytics data collected through Google Analytics to understand how the site is used.

3Camera and microphone

Camera and microphone access is requested before an interview begins and the interview cannot start without it. No continuous video or audio recording is made. The platform captures a still image and a short audio sample at random moments during the session. These samples are used only to verify that the candidate is answering alone and without assistance, and they contribute to the Response Authenticity verdict. Candidates are told this before they begin.

If a candidate leaves the interview tab, a warning is shown with a 10 second countdown to return. Two warnings are permitted. On the third, the session ends. These events are recorded against the session.

4Your CV or resume

A CV or resume uploaded through the public Job Board or through a mock interview is stored by EmployeeEcho and held on your candidate profile. EmployeeEcho retains that copy so it can be produced later. It is not automatically sent to any organisation. It is released to a hiring organisation only where that organisation asks for it in connection with a role you interviewed for. If you do not want your CV held for this purpose, you can ask for it to be deleted at any time using the contact details below.

5One profile across the platform

A single candidate profile is created from your name and email address, and the same profile is used for both public Job Board interviews and mock interviews. This means the interviews you take in one part of the platform sit alongside those you take in the other. A candidate may take one interview per job. A mock interview for a given position may be taken once per day.

6Why the data is used

• To create and operate accounts and to authenticate users.
• To generate the JD Quiz, interview intents and interview questions for a job.
• To conduct interviews and to produce scores, Fit Levels, authenticity verdicts and summaries.
• To detect and deter impersonation and outside assistance during an interview.
• To deliver a candidate's result to the hiring organisation that invited them or published the role.
• To send account, verification and interview emails.
• To take payment and keep financial records.
• To maintain the security of the service and to meet legal obligations.

7Legal basis and consent

Where EmployeeEcho is the controller, data is processed on the basis of the consent given when an account is created or an interview is started, and on the basis of the legitimate interest in operating and securing the service. Consent to camera and microphone capture is given explicitly at the start of every interview. Consent can be withdrawn at any time, though an interview cannot be conducted without it.

8Who the data is shared with

• The hiring organisation whose job you interviewed for receives your result, transcript, scores, summary and authenticity verdict.
• Organisations that request a CV, as described in section 4.
• A third-party AI provider, whose model generates the questions and the assessment. Interview content is sent to that provider to produce these outputs.
• DigitalOcean, which provides hosting and storage.
• ZeptoMail and Amazon SES, which deliver candidate and account email.
• Google Analytics, for site usage measurement.
• Authorities, where disclosure is required by law.

Personal data is not sold, rented or traded.

9Where the data is held

Data is stored on servers located in Singapore, operated by DigitalOcean. Because EmployeeEcho operates from Bangladesh and uses service providers located outside Bangladesh, personal data is transferred and processed outside the country in which it was collected.

10How long the data is kept

• Candidate data connected to a job is retained until the hiring organisation deletes it, or until the organisation's account is closed.
• Mock interview data and candidate profiles, including any CV, are retained until the candidate asks for deletion.
• Account and billing records are retained for as long as required for legal and accounting purposes.
• Camera stills and audio samples are retained with the interview record and are deleted with it.

11Your rights

Under the Bangladesh Personal Data Protection Act 2026 and applicable law, you can:

• Ask what personal data is held about you and request a copy.
• Ask for inaccurate data to be corrected.
• Ask for your data to be deleted, including your CV and profile.
• Withdraw consent for future processing.

Requests can be sent to hello@employeeecho.tech and will be answered within 30 days. Where the request concerns data held by a hiring organisation about you, EmployeeEcho will pass the request to that organisation.

12Security

Access to candidate results is limited to users of the organisation that owns the job. Account emails are sent over a separate mail stream from candidate emails. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

13Age

The platform is not intended for anyone under 18. Accounts and interviews are for adults only.

14Cookies

Cookies are used to keep you signed in and to run Google Analytics. Analytics cookies can be refused through your browser settings without affecting your ability to take an interview.

15Changes

This policy may be updated. The date at the top of this page shows when it last changed. Material changes will be notified to account holders by email.

16Contact

Questions, requests and complaints: hello@employeeecho.tech. Mock interview support: support@employeeecho.tech.