Skip to main content

Legal

Privacy Policy

Last updated: June 2026

1. Who we are

GovPrep (“we”, “us”, “our”) operates the govprep.com.au platform. We are committed to protecting the privacy of our users in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information we collect

We collect the following personal information when you use GovPrep:

  • Account information: email address, full name, and password (managed by Supabase Auth). If you sign in with Google, we receive your name and email address from Google.
  • Career information: resumes, career summaries, job application documents, and selection criteria you upload or enter.
  • Generated content: STAR responses, cover letters, talking points, and resume analyses we generate on your behalf.
  • Practice session data: when you use voice practice interviews, your microphone audio is streamed in real time to Google for processing. We store the resulting transcripts, scores, and feedback. We do not store audio recordings.
  • Payment information: billing details processed by Stripe. We do not store credit card numbers on our servers.
  • Usage and analytics data: feature usage counts for quota tracking, and product analytics (pages visited, features used, browser and device information) collected via PostHog to help us improve the Service.

3. How we use your information

We use your information to:

  • Provide and improve the GovPrep service
  • Generate tailored interview preparation content
  • Process payments and manage subscriptions
  • Communicate with you about your account
  • Monitor errors and keep the platform secure and reliable

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. AI processing

Your documents and career information are sent to third-party AI services (Anthropic Claude API for content generation, Google Gemini API for voice practice) to generate content. Under our API agreements with these providers, your content is not used to train their models. These providers process your data on servers located in the United States and retain it for a limited period for abuse monitoring in accordance with their own privacy policies.

5. Data storage, security and overseas disclosure

Your data is stored in Supabase (hosted on AWS in the Sydney region). We implement row-level security policies to ensure you can only access your own data. Files are stored in Supabase Storage with user-scoped access policies.

Some of our service providers process data outside Australia, primarily in the United States:

  • Anthropic and Google (United States) — content generation and voice practice
  • Stripe (United States) — payment processing
  • Vercel (United States) — application hosting
  • Resend (United States) — transactional email
  • Sentry (United States) — error monitoring
  • PostHog (United States) — product analytics

We take reasonable steps to ensure these providers handle your information consistently with the APPs, including using providers that offer contractual data protection commitments.

6. Data retention

We retain your personal information while your account is active. When you delete a document, application, or your account, the associated data and uploaded files are permanently removed from our systems. We may retain limited transaction records where required for tax, accounting, or legal compliance purposes, and residual copies may persist in encrypted backups for a limited period before being overwritten.

7. Your rights and complaints

Under the Australian Privacy Act, you have the right to:

  • Access: request a copy of all personal information we hold about you.
  • Correction: request correction of inaccurate information.
  • Deletion: delete your account and all associated data at any time via Settings.
  • Data portability: download a copy of all your data as JSON via Settings.

To exercise these rights or make a privacy complaint, contact us at privacy@govprep.com.au. We will respond within 30 days. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Cookies and analytics

We use essential cookies for authentication (Supabase session). We also use PostHog analytics, which stores a cookie and browser storage entries to recognise repeat visits and measure how features are used. We do not use advertising cookies or sell analytics data. You can limit analytics collection using your browser’s tracking protection or by blocking the PostHog domain.

9. Data breaches

If a data breach occurs that is likely to result in serious harm, we will notify affected users and the OAIC in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify you of material changes via the email associated with your account.

11. Contact

If you have questions about this policy or wish to make a privacy complaint, contact us at privacy@govprep.com.au.