Privacy notice · version 2026-10-04

Privacy & Recording Consent

This notice describes customer accounts, interview packages, and invitation-only beta features.

Identity and acceptance record

The beta uses the pseudonymous participant ID assigned in your invitation. A signed browser cookie records that ID, the agreement versions accepted, acceptance time, and expiration. The ID is displayed as a confidential-beta watermark and may be included in security, cost, completion, and feedback records. Do not use an employee number, badge number, birth date, or other sensitive identifier.

Customer accounts and billing

Customer accounts use your email address and a generated account ID. One-use sign-in links expire after 15 minutes; only a hash of each token is stored. Brevo processes your email address to deliver transactional sign-in messages. Requesting a sign-in link does not subscribe you to marketing. Stripe processes payments and payment details. Enter Prepared stores Stripe customer, subscription, and payment references, accepted terms versions, package dates, usage balances, and refund status. Card numbers are not stored by Enter Prepared.

Temporary scoring cache

To prevent duplicate scoring charges when you retry a request, the complete generated report, including answer transcripts, is cached encrypted on the server for up to one hour of access. A cleanup runs every minute while the service is running to remove expired cache contents; an outage can delay removal until the service resumes. This temporary cache is separate from your reduced saved report. Usage and billing records remain to support your balances and payment history. Provider backups may retain earlier copies under their retention policies.

Microphone and AI processing

During a live interview or coaching conversation, microphone audio is transmitted to OpenAI, either directly or through the Enter Prepared server, for voice interaction, transcription, and/or evaluation. The interviewer voice is AI-generated. Submitted written exercises and relevant answer text are also processed when necessary to create feedback. Microphone audio is transmitted for live interaction, transcription, and evaluation, but answer audio is not saved in the candidate account or browser history by Enter Prepared. The product currently does not use a webcam. A future video feature would require separate, explicit consent.

Candidate progress account

Completed oral-board progress summaries and reduced written coaching reports are saved to the private candidate account so they can be viewed on another device after sign-in. Account copies do not include answer audio or full transcripts. An account report may include the role, board label, completion date, question count, response time, answer-part coverage, aggregate evidence score, coaching feedback, evidence summaries, priorities, and a practice plan.

Physical preparation programs

Manual program generation runs in your browser. Optional test-document extraction sends only your selected file or pasted test requirements to OpenAI after separate consent; fitness inputs are not included. Do not upload medical records or restricted agency material. Enter Prepared does not retain the original upload. OpenAI processing and retention rules still apply. Extraction request counts and token totals are stored for cost control. Extracted requirements must be reviewed by you.

If you choose Save to my account, we store one current program under your participant ID: confirmed requirements, reported performance, routine, equipment, schedule, safety-screening selection and session logs. Do not enter diagnoses or medical histories. Program records expire from access 210 days after the last save; expired records are removed when that account next accesses the module or through administrative cleanup. Delete account program removes the active database copy; routine provider backups may persist under provider retention. Device copies and exports remain until separately deleted. The program page has separate controls for account and device deletion. Progress is not a medical assessment or a guarantee of passing.

Optional training calendars

Calendar files and subscriptions contain scheduled workout times, generic event titles, a test-day marker and a link to your plan. You can opt to include workout instructions and custom event names. Baseline results, source documents, safety-screening selections and session notes are excluded. Calendar services and shared devices may display event information and notifications. Their storage and notification settings apply.

Creating a subscription issues a password-like, read-only address: anyone with that address can read the exported schedule without signing in. Keep it private. We store a hash of the access token and a calendar snapshot, updated when you explicitly save your account program. The original address is displayed only when created. Replacing or revoking the address stops future access using the old address; deleting or expiring the program also ends access. These actions cannot erase events already imported or cached by Google, Apple or other recipients. Remove the calendar separately in those services. Subscriptions do not read your personal calendar, reserve time in other calendars, or write changes back to Enter Prepared.

Optional interview practice schedules

Interview scheduling defaults to no calendar connection and no requested alert. Preview and calendar downloads run in your browser; drafts are not saved automatically. An optional account save stores one current schedule under your participant ID: role, question goal, dates, weekday times, time zone, session duration, calendar choice and reminder preferences. Saved schedules expire from access 120 days after the last save; expired records are removed when you next load the schedule or during administrative cleanup. Delete account schedule removes the active database copy and revokes its subscription; provider backups and calendar copies may remain.

Practice calendar exports use generic titles and an account link unless you opt to include the role, question goal and role link. They never include answers, reports, scores or access codes. Read-only subscription addresses use the same private-link protections and third-party caching limitations described above. Saving a non-subscription choice revokes an existing interview subscription. No emails, texts or browser push reminders are sent; any alerts come from your calendar service and may require separate configuration. PT and interview subscriptions are independent. Neither reads personal appointments or checks scheduling conflicts.

Referral information

When you use a referral link or enter a code on the pricing page, this browser remembers the code for up to 30 days to carry it through sign-in. You can clear it before opening checkout. Once attached to checkout, the referral is recorded against the purchasing account to prevent duplicate rewards and handle refunds. Referral codes contain no email address. Referrers see reward balances and dates, not the referred customer’s name, email or payment details. Referral and reward records form part of the account and transaction records described here.

AI document, PT and assessment assistance

With your separate consent, we send the material you submit for document drafting or revision, or your PT question, requirements, fitness inputs, safety selection and recent progress, to OpenAI. PT coaching excludes calendar subscription tokens and freeform workout-log notes. Use placeholders for personal identifiers and never submit confidential case, medical or personnel records. Assessment review submissions are also sent to OpenAI after consent. Exercise reports are saved in your browser, and completed AI reviews use the same encrypted 24-hour retry cache. AI responses are cached encrypted in our database for up to 24 hours to recover interrupted requests. Usage records retain account and grant references, action type, timing, token totals and estimated cost, without document text.

Saving a document is a separate explicit action. Up to 20 private documents, including their background and requirements, can be stored encrypted for 90 days after each save. They remain readable and editable after your paid plan ends until that expiration. Delete saved copy removes the active account document; downloads and provider backups may persist separately. The service removes expired drafts and cached response content through its regular cleanup job. Unsaved document edits and displayed AI replies are held in the current browser page and disappear when you leave or reload. OpenAI provider retention still applies; we do not promise zero retention.

What remains in this browser

This browser may also store fuller oral-board reports containing transcripts, assessment-center drafts and reports, interview history and rotation progress, preparation plans, feedback backups, and your participant ID. Those browser-local copies do not automatically follow you to another device. Clearing browser-local data does not delete records already associated with your private candidate account.

What the beta records

Operational logs may include the participant ID, agreement version, page or module, board identifier, processing duration, audio duration, token totals, estimated API cost, completion events, error information, a feedback receipt, device class, first landing path, referring website domain, and campaign tags such as UTM source, medium, or campaign. Referral tracking is used to understand whether visitors arrived from search engines, AI search, professional referrals, or outreach. The application is designed not to place answer audio, full transcripts, names, precise location, or the referring page’s full URL in its analytics events.

Service providers and retention

OpenAI processes audio and text used for the AI features. OpenAI states that API data is not used to train its models unless the account owner opts in; default abuse-monitoring logs may retain content for a limited period. Hosting, database, email, or feedback-webhook providers may process the minimum information necessary for their functions. Progress summaries and reduced written coaching reports are retained while your account is active to support candidate access, tracking, and product evaluation. Review the current OpenAI API data-controls documentation.

Do not submit sensitive material

Do not include names, personal identifiers, confidential incident details, restricted agency information, confidential records, protected selection questions, assessor notes, restricted tactics, nonpublic policy, medical details, or personnel information. Use fictionalized details and describe professional reasoning at a general level.

Feedback and communications

Feedback may include your participant ID, role/module/board context, rating, written comments, receipt number, and submission time. Do not include protected or identifying information. If you voluntarily join an email list, the separate signup information is used to send requested guidance and product updates, with an unsubscribe method.

Your choices and deletion

You can stop microphone capture by ending the exercise or closing the page. The browser-data control below removes known Enter Prepared reports, transcripts, drafts, histories, preparation progress, feedback backup, and participant information saved in this browser, then signs this browser out. It does not delete account-synchronized oral-board reports or server records.

Clear this browser: removes known Enter Prepared information saved locally and signs this browser out. It does not delete synchronized reports or server records.

Delete account-associated data: send a verified request to Enter Prepared. Never include your access code.

Request account-data deletion →

To request access to, correction of, or deletion of account-associated information, email privacy@enterprepared.com from an address where Enter Prepared can reply. Include your participant ID, but never include your access code. Enter Prepared may need to verify the request. A deletion request does not necessarily remove short-lived provider security logs, submitted feedback, email records, or records that must be retained for security or legal purposes.

Related terms

Invitation-only beta access is also governed by the Beta Tester Agreement and the Tester Participation Instructions.