Legal

GDPR & Data Protection

Last updated: May 2026

This page explains how Korriv complies with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) and the United Kingdom, and our broader data protection commitments for all users worldwide.

Data Controller

Korriv Interview Prep acts as the data controller for personal data collected through this platform. For data protection enquiries, contact us at careerprep@korriv.com.

Legal Basis for Processing

We process your personal data under the following legal bases:

Contract performance: Processing necessary to deliver the coaching service you have requested
Legitimate interests: Improving our platform based on anonymized usage data
Consent: For optional features such as saving sessions and receiving communications
Legal obligation: Where required by applicable law

Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights regarding your personal data:

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Request correction of any inaccurate personal data.

Right to Erasure

Request deletion of your personal data (right to be forgotten).

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Restriction

Request that we limit how we process your data in certain circumstances.

Right to Object

Object to processing based on legitimate interests.

To exercise any of these rights, email us at careerprep@korriv.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Data Transfers

Korriv uses services that may transfer your data outside the EEA, including to the United States. Where such transfers occur, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions. Our key service providers include:

Anthropic (USA): Processes resume and job description content to generate coaching responses
Supabase (USA): Stores account data and saved sessions
Vercel (USA): Hosts the platform

Data Minimization

We collect only the minimum data necessary to provide our service. You are not required to create an account to use Korriv's core coaching features. Account creation is optional and only required if you wish to save sessions.

Retention Periods

Account data: Retained until you delete your account, then removed within 30 days
Session data: Retained until you delete it or close your account
Anonymous analytics: Retained for up to 12 months
Feedback submissions: Retained for up to 24 months

Cookies

Korriv uses minimal cookies. We use authentication cookies (necessary for login functionality) and anonymized analytics cookies through Vercel Analytics. We do not use advertising or tracking cookies.

Automated Decision-Making

Korriv does not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Contact and Complaints

For data protection matters, contact us at careerprep@korriv.com. If you are not satisfied with our response, you have the right to complain to your national data protection authority. For UK users, this is the Information Commissioner's Office (ICO) at ico.org.uk.