Legal & Privacy
Your privacy and security are our top priorities. This page contains our complete legal policies.
Last updated: December 2025 | Effective: December 27, 2025
Last updated: December 2025 | Effective: December 27, 2025
Summary: We collect data to provide AI-powered interview practice. Your code and conversations are processed by AI providers to generate feedback. We never sell your data. You can delete your account and all data at any time.
CodeSparring ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our AI-powered technical interview practice platform.
Information We Collect
Account Information
- Email address (from OAuth provider)
- Display name and profile picture (from GitHub/Google)
- Account creation date
Interview & Practice Data
- Code you write during practice sessions
- Conversations with our AI interviewer
- Performance scores and feedback
- Session duration and completion status
- Programming languages used
Payment Information
- Payment transactions are processed by Stripe
- We store: subscription status, billing dates, payment history (amount, date, status)
- We do NOT store: full credit card numbers, CVV, or sensitive payment details
Technical Data
- IP address (for security and rate limiting)
- Browser type and device information
- Usage analytics (with your consent)
Important: How We Use AI Providers
To provide AI-powered interview feedback, your code and conversation data is sent to third-party AI providers for processing. This is essential to how our service works.
What is sent to AI providers:
- Code you write during sessions
- Your conversation messages with the AI interviewer
- Problem context (not your personal information)
What is NOT sent:
- Your email address or name
- Payment information
- Your user ID or account details
AI providers do NOT use your data to train their models. Data is used solely for generating your interview responses and feedback in real-time.
Third-Party Service Providers
We work with trusted third-party services to operate our platform. Each provider has their own privacy policy and data protection measures:
| Provider | Purpose | Data Shared |
|---|---|---|
| Google Gemini | AI responses & feedback | Code, conversations |
| Anthropic Claude | AI backup provider | Code, conversations |
| DeepSeek | AI backup provider | Code, conversations |
| Stripe | Payment processing | Payment details, email |
| Firebase (Google) | Authentication & database | Account data, sessions |
| Deepgram | Voice transcription | Audio (if voice enabled) |
| Brevo | Email notifications | Email, name |
| Pinecone | AI memory/context | Anonymized embeddings |
| Vercel | Hosting & analytics | Usage data (with consent) |
Data Retention Periods
We retain your data for the following periods:
- Account data: Until you delete your account
- Interview sessions: 2 years from creation, or until account deletion
- Payment records: 7 years (required for tax/legal compliance)
- Analytics data: 26 months (anonymized after 14 months)
- Security logs: 90 days
- Deleted account data: Permanently purged within 30 days
International Data Transfers
Our services are hosted in the United States. If you are accessing our services from the European Union, United Kingdom, or other regions with data protection laws, please note that your data will be transferred to and processed in the United States.
We ensure appropriate safeguards are in place for international transfers, including:
- Standard Contractual Clauses (SCCs) with our processors
- Data Processing Agreements with all third-party providers
- Encryption of data in transit and at rest
How We Use Your Information
- Provide our service: Deliver AI-powered interview practice and personalized feedback
- Improve your experience: Track your progress and recommend relevant practice problems
- Process payments: Handle subscription billing through Stripe
- Send notifications: Email reminders, practice suggestions, and account updates (with your consent)
- Ensure security: Prevent fraud, abuse, and unauthorized access
- Legal compliance: Meet our legal and regulatory obligations
What We Do NOT Do
- We do NOT sell your personal data to anyone
- We do NOT share your data with advertisers
- We do NOT use your code to train AI models
- We do NOT access your code for any purpose other than providing our service
- We do NOT store sensitive payment details (handled by Stripe)
Data Security
We implement industry-standard security measures:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for data at rest
- OAuth 2.0 secure authentication (no password storage)
- Regular security audits and vulnerability assessments
- Rate limiting and DDoS protection
- Sandboxed code execution environments
Last updated: December 2025 | Effective: December 27, 2025
By accessing or using CodeSparring ("the Service"), you agree to be bound by these Terms of Service. If you do not agree to these terms, please do not use our Service.
Age Requirement
You must be at least 16 years old to use CodeSparring. By creating an account, you confirm that you are at least 16 years of age. If you are under 18, you confirm that you have your parent or guardian's permission to use this Service.
We do not knowingly collect personal information from children under 16. If we discover that a child under 16 has provided us with personal information, we will delete it immediately.
Account Terms
- You are responsible for maintaining the security of your account
- You must provide accurate information when creating your account
- You may not share your account with others
- You are responsible for all activity that occurs under your account
- You must notify us immediately of any unauthorized access
Acceptable Use
You agree NOT to:
- Use the Service for any illegal purpose or to violate any laws
- Attempt to reverse engineer, decompile, or exploit our AI systems
- Submit malicious code, viruses, or harmful content
- Attempt to gain unauthorized access to our systems
- Use automated tools to scrape or extract data from the Service
- Resell, redistribute, or commercialize the Service without permission
- Harass, abuse, or harm others through the Service
- Violate the intellectual property rights of others
Intellectual Property
Your Code: You retain all ownership rights to the code you write during practice sessions. We do not claim any intellectual property rights over your code.
Our Service: CodeSparring, including our platform, AI systems, problem sets, and content, is protected by intellectual property laws. You may not copy, modify, or distribute our materials without permission.
Feedback: If you provide suggestions or feedback about our Service, we may use it to improve our products without any obligation to you.
Subscription & Billing
Free Tier
Our free tier provides limited access to the Service at no cost. Free tier limitations may change at any time.
Pro Subscription
- Pro subscriptions are billed monthly or annually in advance
- Automatic Renewal: Your subscription will automatically renew at the end of each billing period unless you cancel before the renewal date
- You will be charged using your stored payment method on file
- Prices are in USD and exclude applicable taxes
Cancellation
- You may cancel your subscription at any time from your Account Settings
- Upon cancellation, you retain Pro access until the end of your current billing period
- We do not provide prorated refunds for partial months
Refund Policy
We offer a 30-day money-back guarantee on all new subscriptions. If you're not satisfied with CodeSparring within the first 30 days of your initial purchase, contact support@codesparring.dev for a full refund—no questions asked.
Service Availability
We strive to maintain high availability but do not guarantee 100% uptime. We may perform maintenance that temporarily affects service availability. We are not liable for any downtime or service interruptions.
Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW:
- THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED
- WE ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES
- OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID US IN THE 12 MONTHS PRECEDING THE CLAIM
- WE ARE NOT RESPONSIBLE FOR YOUR INTERVIEW OUTCOMES OR JOB APPLICATION RESULTS
- WE DO NOT GUARANTEE THE ACCURACY OF AI-GENERATED FEEDBACK OR CONTENT
Indemnification
You agree to indemnify and hold harmless CodeSparring, its officers, directors, employees, and agents from any claims, damages, losses, or expenses (including reasonable attorney fees) arising from your use of the Service, your violation of these Terms, or your violation of any rights of a third party.
Dispute Resolution
Informal Resolution: Before filing any legal claim, you agree to contact us at legal@codesparring.dev and attempt to resolve the dispute informally for at least 30 days.
Arbitration: Any disputes that cannot be resolved informally shall be resolved through binding arbitration in accordance with the rules of the American Arbitration Association. The arbitration shall be conducted in English.
Class Action Waiver: You agree to resolve disputes with us on an individual basis and waive any right to participate in a class action lawsuit or class-wide arbitration.
Termination
We may suspend or terminate your account at any time for violation of these Terms or for any other reason at our sole discretion. Upon termination, your right to use the Service ceases immediately. You may delete your account at any time through your Account Settings.
Governing Law
These Terms shall be governed by the laws of the State of Delaware, United States, without regard to its conflict of law provisions.
Changes to These Terms
We may update these Terms from time to time. We will notify you of material changes by email or through the Service. Your continued use after changes constitutes acceptance of the new Terms.
Last updated: December 2025
This Cookie Policy explains how CodeSparring uses cookies and similar technologies to recognize you when you visit our platform.
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your experience. We also use localStorage, which is similar but stays on your device.
Cookies We Use
Necessary Cookies (Always Active)
Required for the website to function. Cannot be disabled.
- Authentication tokens: Keep you logged in
- Session ID: Maintain your session state
- CSRF tokens: Protect against cross-site attacks
- Cookie consent: Remember your cookie preferences
Analytics Cookies (Optional)
Help us understand how visitors use our site. Only active with your consent.
- Firebase Analytics: Page views, feature usage, session duration
- Vercel Analytics: Performance metrics, page load times
Functional Cookies (Optional)
Enable enhanced functionality and personalization.
- Theme preferences: Dark/light mode settings
- Editor settings: Code editor preferences
- UI state: Sidebar, panel positions
Managing Your Cookie Preferences
You can manage your cookie preferences at any time:
- Cookie Banner: Click "Cookie Preferences" at the bottom of any page
- Account Settings: Go to your Account page and click "Cookie Preferences"
- Browser Settings: Most browsers allow you to block or delete cookies
Note: Blocking necessary cookies may prevent the website from functioning properly.
Depending on your location, you have specific rights regarding your personal data under regulations like GDPR (Europe) and CCPA (California).
Your Rights Under GDPR (EU/UK Users)
If you are in the European Union or United Kingdom, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure ("Right to be Forgotten"): Request deletion of your personal data
- Portability: Export your data in a machine-readable format
- Restriction: Limit how we process your data
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time for consent-based processing
Your Rights Under CCPA (California Users)
If you are a California resident, you have the right to:
- Know: Request information about the personal data we collect
- Delete: Request deletion of your personal data
- Opt-Out: Opt out of the sale of personal data (we do not sell your data)
- Non-Discrimination: Not be discriminated against for exercising your rights
Notice: We do NOT sell personal information as defined under the CCPA.
How to Exercise Your Rights
- Access & Export: Go to Account Settings → "Export My Data"
- Delete Account: Go to Account Settings → "Delete My Account"
- Update Information: Edit your profile in Account Settings
- Email Preferences: Manage notifications in Account Settings
- Contact Us: Email privacy@codesparring.dev for any privacy request
We respond to all verified requests within 72 hours (typically within 24 hours).
Data Processing Agreement (Enterprise)
For enterprise customers requiring a Data Processing Agreement (DPA) or Business Associate Agreement (BAA), please contact us at legal@codesparring.dev. We provide custom agreements that meet your organization's compliance requirements.
In the unlikely event of a data breach that affects your personal information, we are committed to transparent and timely notification.
Our Commitment
- Regulatory Notification: We will notify the relevant supervisory authority within 72 hours of becoming aware of a qualifying breach (as required by GDPR)
- User Notification: If the breach poses a high risk to your rights and freedoms, we will notify affected users without undue delay via email
- Transparency: We will provide clear information about what data was affected, what we are doing to address it, and what steps you can take
- Investigation: We will conduct a thorough investigation and implement measures to prevent future incidents
Report a Security Concern
If you discover a security vulnerability or suspect unauthorized access to your account, please report it immediately to security@codesparring.dev. We take all reports seriously and will investigate promptly.
If you have any questions about our legal policies, need to exercise your data rights, or have compliance inquiries, please contact us:
General Legal Inquiries
legal@codesparring.dev
Privacy & Data Requests
privacy@codesparring.dev
Response within 72 hours
Security Concerns
security@codesparring.dev
For vulnerability reports
Customer Support
support@codesparring.dev
These policies may be updated from time to time. We will notify users of significant changes via email or through the platform interface. The "Last updated" date at the top of each section indicates when that policy was last modified.
CodeSparring is operated in the United States. For EU users, our representative can be contacted at privacy@codesparring.dev.