Legal
Privacy Notice
Effective date: September 9, 2026
1. Scope
Entrevly is responsible for the processing of personal information described in this Privacy Notice. Entrevly operates from Aguascalientes, Mexico. Privacy and ARCO requests may be submitted to support@entrevly.com. This Notice explains how we handle personal information when you create an account, use interview-preparation features, purchase Interview Credits, contact support or otherwise interact with the service.
2. Information we may process
Depending on the features you use, we may process account information such as email address and authentication records; profile and professional information; resumes and job descriptions you choose to provide; interview and assessment answers; scores, feedback and training recommendations; credit-wallet and transaction records; support messages; and technical/security records needed to operate and protect the service.
3. Why we use information
We process information as necessary to provide the service and perform our agreement with you; based on your consent where consent is required; to comply with legal obligations; and, where permitted, for legitimate operational interests such as security, fraud prevention, troubleshooting and improving Entrevly. You may withdraw consent for processing based on consent, without affecting processing already carried out lawfully.
4. AI service providers
Entrevly uses third-party artificial-intelligence providers, currently including Anthropic, for certain analyses and generated content. Information needed for an AI-powered feature may be transmitted to those providers, including relevant answers, job descriptions, resumes or assessment context. We seek to limit the information sent to what is reasonably needed for the requested feature. Entrevly does not use your resumes, job descriptions, interview answers or other User Content to train third-party AI models. Providers process information under applicable contractual, security and privacy terms.
5. Payments and card information
Payments are processed by third-party payment providers, currently including Stripe. Entrevly does not store full payment-card numbers or card security codes on its application servers. The payment provider may receive payment-card, billing, transaction, device and fraud-prevention information necessary to process and protect the transaction. Entrevly receives transaction information needed to confirm purchases and maintain your credit wallet.
6. Service providers and transfers
We use service providers for functions such as cloud hosting and databases (including AWS), artificial intelligence (including Anthropic), payment processing (including Stripe), and email or productivity services (including Google). These providers may process information outside Mexico. When a transfer requires consent or another safeguard under applicable law, Entrevly will rely on the applicable consent, contractual obligations, statutory exceptions or other lawful transfer mechanism. We may also disclose information when required by law, to protect users or the service, or in connection with a legitimate corporate transaction.
7. Retention
Our target retention periods are: account/profile information, while the account is active and up to 12 months after account deletion unless a longer period is legally required; interview and assessment answers, results and history, while the account is active and up to 24 months after account deletion; support communications, up to 24 months after resolution; security and operational logs, generally up to 12 months; and purchase, payment-reference, wallet, accounting and tax records, for the period required by applicable tax, accounting, fraud-prevention and legal obligations. Data may be retained longer when necessary for a legal claim, investigation, security incident or mandatory legal hold, and may be deleted or anonymized earlier when no longer needed.
8. Security
We use reasonable administrative, technical and organizational measures intended to protect personal information. No online service can guarantee absolute security, so users should also protect account credentials and avoid submitting unnecessary sensitive information.
9. Your privacy choices and rights
In Mexico, you may exercise the ARCO rights of Access, Rectification, Cancellation and Opposition, and may revoke consent where applicable. Send a request to support@entrevly.com with your name, the email associated with your account, the right you wish to exercise, a clear description of the request and information reasonably necessary to locate the relevant records. For rectification, identify the correction requested. We may request reasonable information to verify identity or authority. We will process requests within the periods required by applicable law and will explain any legally permitted denial or limitation. You may also seek review or relief before the competent Mexican data-protection authority.
10. Children
Entrevly is intended only for persons 18 years of age or older. We do not knowingly offer accounts to children or intentionally request personal information from persons under 18. If we learn that an account belongs to a person under 18, we may suspend the account and take appropriate steps regarding the associated information.
11. Cookies and similar technologies
Entrevly may use cookies or similar browser technologies that are necessary for authentication, session management, security and core service operation. If we introduce non-essential analytics, advertising or tracking technologies that require notice or consent, we will provide the appropriate controls before using them where required by law.
12. Updates to this Notice
We may update this Privacy Notice as Entrevly, our providers or legal requirements change. We will publish the current version with its effective date and seek additional consent when required.
13. Privacy contact
Privacy questions and ARCO requests may be sent to support@entrevly.com. Entrevly operates from Aguascalientes, Mexico. The complete identity and service address of the legal person or individual acting as data controller must be published here before public launch if it is not otherwise displayed in the service.