1. What we collect

Only what NYLAA needs to run your practice and coach you on it.

Account

Your name, username, email address and password. Passwords are handled by our sign-in provider and stored hashed; we never see them. A profile photo, if you add one.

Resume and career context

The text we extract from the resume you upload, plus the track, field, target role and job descriptions you choose or paste. We keep the extracted text, not the original file.

Practice and interviews

Your answers (typed, or transcribed from speech), the questions and follow-ups Nylaa asked, scores, feedback, reports, progress and personal statement drafts.

Voice

When you answer out loud, your browser turns speech into text and NYLAA receives the text. We do not record or store your audio. Your browser maker (for example Google in Chrome or Apple in Safari) may process the audio under its own privacy terms.

Usage and device

Pages visited, features used, session activity, AI usage per feature, browser type and IP address. We use these to keep sessions reliable, stop abuse and limit runaway AI cost.

Support

Bug reports, feedback and emails you send us.

2. How we use it

Coaching

Generate questions from your resume and target role, follow up on your actual answers, score them and write your reports.

Your history

Remember past sessions so Nylaa can point to recurring weaknesses and measure improvement.

Account and security

Sign you in, send sign-in and account emails, detect abuse and enforce limits.

Product quality

Find bugs and improve coaching quality using aggregate usage.

We do not sell your personal data and we do not show ads.

3. Who processes it for us

These providers process data only to run NYLAA for you.

Supabase

Accounts, sign-in and our database.

Vercel

Hosting and aggregate performance analytics.

OpenAI

Generates questions, follow-ups, scores and feedback. Your resume text and answers are sent to produce those results. Under OpenAI’s API terms, data sent through its API is not used to train its models.

ElevenLabs and OpenAI voice

Turn Nylaa’s replies into speech.

Resend

Sends sign-in, confirmation and account emails.

Google Analytics

Aggregate site traffic, such as which pages are visited.

Adzuna

Job search. We send only the role and location you search for.

4. How we protect it

Encrypted in transit

Every connection uses HTTPS, enforced by the browser on every visit.

Encrypted at rest

Our database provider encrypts stored data.

Your data stays yours

Database rules let each account read and change only its own records. Every private API checks who you are on the server, not just in the app.

Keys stay on our servers

AI and database keys are never sent to your browser.

Account protection

Optional two-factor sign-in (Profile, Account tab), automatic sign-out after 30 minutes of inactivity, and temporary lockout after repeated failed sign-ins.

Limited staff access

Only NYLAA administrators can view account data, and only to run the service and answer support requests.

Profile photos

Photos are stored privately. You see yours through a link that expires after an hour; nobody can open it from a guessed address.

5. How long we keep it

We keep your data while your account is open. When you delete your account, we erase your profile, resume text, answers, reports and history within 30 days. Aggregate statistics that cannot identify you may remain.

6. Delete your account

You can ask us to delete your account and everything saved in it at any time.

1. Sign in and open Profile from your avatar menu.
2. Open the Account tab and scroll to Danger Zone.
3. Select Request account deletion. Your email app opens a prefilled request.
4. Send it from the email address on your account.
5. We confirm with you by email, then erase your data within 30 days.

Can't sign in? Email support@nylaa.ai from your account email with the subject “Delete my NYLAA account”.

7. Your other choices

Access or copy

Email support@nylaa.ai for a copy of your data.

Correct

Edit your profile in Profile, or upload a new resume at any time.

Voice

Practice by typing instead. Voice is always optional.

8. Children

NYLAA is not intended for children under 13, and we do not knowingly collect their data.

9. Changes and contact

If we change how we handle your data, we update this page and the date above. For anything about your privacy, contact us.