EngMock

Privacy Policy

Last updated: October 19, 2026

At EngMock.com, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our AI-powered technical interview practice platform.

1. Information We Collect

We collect information to provide a better experience for our users. This includes:

  • Account Information: When you sign up, we collect your name, email address, and profile picture from the Google account you sign in with.
  • Interview Data: We capture audio transcripts and whiteboard snapshots during your mock interviews to provide AI-generated feedback and session replays.
  • Coding Data: In runnable coding interviews, we process the code and workspace files you submit for compilation and execution.
  • Custom Scenarios: If you use My Scenarios, we store the scenarios you save, including their earlier versions, until you delete them. If you ask AI to draft a scenario, we store the text you paste or upload, and the name of an uploaded file, so the draft can finish. That text, and any draft you do not save, expires 30 days after you submit it and is then deleted; you can remove it sooner, for example with Remove source notes in My Scenarios. Uploaded files themselves are not kept. We keep a one-way fingerprint of submitted notes to detect duplicate requests. When you start an interview from a scenario, a copy of the scenario is saved with that interview until you delete the interview.
  • Usage and Product Analytics: We collect page paths, visit times, referring site, campaign tags, broad device type, session activity, scenarios practiced, and provider usage/cost metadata. We use random first-party browser identifiers stored in local and session storage; the server stores keyed hashes of those identifiers rather than the raw values. When you are signed in, page views are linked to your account. Identifiers in the addresses of private pages, such as your interviews, reports, custom scenarios and support requests, are removed before page paths are stored for analytics.
  • Online Presence: While the site is open and visible, a short heartbeat lets us measure aggregate visitors currently online and active interviews. Presence is considered offline after approximately 90 seconds without a heartbeat.
  • Question Bank Reads: When you open a full Question Bank question, on the website or through MCP, we record which question you opened, when, and a one-way fingerprint derived from the connection's IP address and user agent. We use this to enforce reading limits and to prevent scraping.
  • Gemini API Keys (optional): If you save your own Gemini API key for the Unlimited plan, we store it encrypted (AES-GCM) and show only a short hint afterwards. We check a key with a request to Google that generates no content. We never display the full key again, write it to logs, or include it in exports, links or MCP results.
  • MCP Connections: If you connect an AI tool through MCP, we store each access token or connected app with its name, permissions, expiry and when it was last used. Tokens are stored only as one-way hashes, with a short hint, such as the last few characters of a personal token, so you can recognize them. We keep these records, including revoked and expired ones, so they stay listed in Settings.
  • Diagnostics and Feedback: If a page or a live interview fails in your browser, we record a redacted error report: the kind of error, a shortened message with tokens, keys, email addresses and query strings removed, the page path and the broad browser type. If you rate an interview report, we store your rating and comment. We use these only to find and fix problems.
  • Support Requests: If you contact us through the Support Center, we store your request's category, title and messages, our replies, and when the request was opened and closed.
  • Payment Information: If you purchase credits or a membership, payment processing is handled by Stripe. We do not store your credit card details on our servers.

2. How We Use Your Information

We use the collected data for the following purposes:

  • AI Analysis: Your interview transcripts and whiteboard snapshots are processed by Google’s Gemini models to generate feedback and scoring.
  • Code Execution: When you select Runnable Sandbox mode, your submitted code is processed by a third-party code execution provider for isolated compilation and execution.
  • Custom Scenarios: To draft a scenario, run an interview from it and write the report, we send the scenario, and for a draft the notes you submitted, to Google's Gemini models. On the Unlimited plan this can run on your own key, as described below. We use your scenarios and notes only to provide the features you use with them.
  • Your Gemini API Key: On the Unlimited plan, the AI work for interviews on your own key (the live interview, transcription, the report and automatic quality checks of the interview) and the generation you start are processed by Google's Gemini models using your own key. Google bills that usage to your project, and the terms of your Google account govern how Google handles those requests, including how Google may use data sent to unpaid tiers. We use your key for nothing else, and stop using a key once you revoke or delete it in Settings, which also erases the stored key.
  • Service Improvement: We analyze anonymized usage data to improve our prompts, scenarios, and overall user experience.
  • Account Management: To manage your membership, credits, and provide customer support.
  • Communication: To send you important service updates or response to your inquiries.

3. Data Sharing and Disclosure

We do not sell your personal data. We only share information in the following circumstances:

  • Service Providers: We use trusted third-party providers for critical functions like AI processing, code execution, payment processing, and hosting. These providers only have access to the data necessary to perform their tasks.
  • Tools You Connect: When an AI tool you connected through MCP asks for information its permissions allow, we send that information to the tool. The tool, and any AI service it uses, handles it under its own terms and privacy policy, and we cannot recall information already sent. Revoking a token or disconnecting the app in Settings stops further access.
  • Legal Compliance: If required by law, we may disclose information to comply with legal obligations or protect our rights.

4. Data Security

We implement industry-standard security measures to protect your data. Your interview recordings and snapshots are encrypted at rest and in transit. However, no method of transmission over the internet or electronic storage is 100% secure.

5. Your Choices and Rights

You have the right to:

  • Access your interview history and reports, and download whiteboards from session replays.
  • Delete specific interview sessions from your dashboard.
  • Delete your custom scenarios and their source notes in My Scenarios.
  • Revoke MCP tokens and disconnect connected apps in Settings.
  • Revoke or delete your saved Gemini API keys in Settings at any time.
  • Request the deletion of your entire account by contacting support.
  • Opt-out of non-essential communications.

6. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
support@engmock.com