Encryption everywhere
All traffic runs over TLS. Files and database rows are encrypted at rest by our hosting provider.
Security & data privacy
Your resume is the most personal file you own
This page is maintained by the IntervBoost team to answer common security and privacy questions about the platform. It describes controls that are live today — it is not a certification or an independent audit.
Row-level security
Every application table enforces database-level policies scoped to your user ID. One account cannot read another's resumes, interviews or reports.
Private file storage
Resume and CV uploads live in a private bucket with no public URLs. Downloads are served through short-lived signed links to the owner only.
Authentication
Email and password with leaked-password checks, plus Google sign-in. Sessions are refreshed with rotating tokens and can be revoked from your account page.
Server-side AI calls
Model credentials never reach the browser. Every AI request is made from our server after verifying your session.
No model training on your data
Your resumes, transcripts and reports are not used to train publicly available models, and are never sold or shared with advertisers.
IntervBoost handles
- Platform infrastructure, encryption and backups
- Access control policies on every table and bucket
- Secure handling of AI provider credentials
- Security patching of the application and its dependencies
- Responding to reported vulnerabilities
You handle
- Keeping your password unique and your device secure
- Reviewing what personal information you put in an uploaded resume
- Deleting documents you no longer want stored
- Following your employer's or institution's rules on assistive tools
Data deletion
Delete individual resumes, interviews and reports at any time from your dashboard, or delete your entire account from Account settings. Removal from the production database is immediate; provider backups age out on their standard cycle.
Reporting a vulnerability
Email security@intervboost.in with steps to reproduce. We acknowledge reports within two business days and will keep you updated until the issue is closed. Please do not test against other users' accounts.