Privacy Policy

JI Lab (business registration no. 719-08-03709) is the controller of the personal data described here.

122-dong 103-ho, Botdeul Maeul 1-danji, Sampyeong-dong, Bundang-gu, Seongnam-si, Gyeonggi-do, Republic of Korea · jd@jidonglab.com · +82 10-6866-9282 · Weekdays 10:00–18:00 KST (closed weekends/holidays). Privacy contact: Ji Dongseok.

We have not appointed a representative under Article 27 GDPR. Our processing of EU, EEA and UK residents’ data is occasional, limited to what the Service needs, involves no large-scale processing of special-category data, and is unlikely to result in a risk to your rights, so the Article 27(2)(a) exemption applies. Write to jd@jidonglab.com in English and the controller answers you directly, within one month.

· Account: email, password (stored one-way hashed), name (optional).

· Social sign-in (Google, Kakao): if you sign up or sign in with a social account, we receive from that provider your account identifier with the provider, email address and nickname (name) — limited to what you approve on the provider’s consent screen — and we keep a record of which provider account is linked to yours.

· Service content: resumes, portfolios, job postings you paste, the answers you give in a mock interview, and what you type in the AI Fluency Practical (work split, prompts, review notes, revision) together with the AI work log inside that screen.

· Voice and transcripts: if you answer by speaking, by default your browser’s own speech recognition turns your speech into text and the audio does not reach our servers. If your browser does not support speech recognition, or you answer in recording mode, the recorded audio passes through our servers to OpenAI for transcription and is discarded immediately after — never stored. Either way, we store only the resulting text (Section 4).

· AI Fluency Practical: the text you submit, the AI work log inside the screen (requests and responses), the submission time of each step, and the count and time of copy, paste and away-from-screen events (their content is not stored).

· Reviews (optional): the rating, text, display name and job label you submit.

· Payment: handled by our payment processors (PortOne/NHN KCP in Korea, Polar as Merchant of Record overseas). We do not store card or bank details — only transaction records (payment identifier, amount, timestamp).

· Automatically: access logs, a visitor-ID cookie, device and browser info, IP address.

· Performance of our contract with you (Art. 6(1)(b) GDPR): creating and managing your account, delivering resume and portfolio reviews and AI mock interviews and the AI Fluency Practical, granting and deducting passes, taking payment, refunds, and support.

· Legal obligation (Art. 6(1)(c)): keeping the transaction, withdrawal and dispute records that Korean e-commerce and tax law require (Section 6).

· Legitimate interests (Art. 6(1)(f)): preventing abuse and fraudulent payment, keeping the Service secure, and producing aggregate usage statistics to improve it. You may object at any time (Section 7).

· Consent (Art. 6(1)(a)): advertising-performance cookies, publishing a review you submit, reusing that review in our marketing, and contributing pseudonymised interview signals to aggregate benchmarks (off unless you turn it on). You may withdraw consent at any time; withdrawal does not affect processing already carried out.

We do not sell your personal data, and we do not give it to AI providers for training their models. AI-generated questions, evaluations and reports are reference material — they are not automated decisions that produce legal effects for you.

If you sit the AI Fluency Practical in an institutional cohort using a code the institution issued, that institution's coordinator can open the full result report (your answers and revisions, the AI work log inside the screen, per-step submission times, scores and gate facts) together with reference signals such as paste and away-from-screen counts. The start screen sets out this scope and asks for your agreement before the sitting begins. Reference signals do not affect the score, and the coordinator's access ends once you close your account and the result body is deleted.

When you sit in an institutional or employer cohort, we give the report to that organisation's manager within the scope you agreed to before starting (recipient, purpose, items, retention period), and we keep a record of each time the manager opens it. In an employer cohort, once the retention period ends we destroy the originals and close the manager's access. The manager may download the results (name, email, scores, the five axes and gate facts) as a file and keep that copy inside the organisation; the organisation is responsible for destroying its copy by the same deadline.

For an employer or institutional cohort, that organisation gives us the email address and name of each person so that we can send the invitation. We use it only to send that invitation and to confirm who the person is, and we destroy the details of anyone who does not accept as soon as the sitting window closes. You may ask us to explain the source and the purpose, or to stop processing and delete the data, through customer support, and we act without delay. The organisation that supplied the list is responsible for having a lawful basis for supplying it, and we confirm this in the terms of use for organisations.

Our AI scoring provides a score, the evidence behind it and feedback. It does not make a decision that affects your rights or obligations, such as whether you are taken on. In an employer or institutional cohort, that organisation makes the hiring or HR decision after receiving the report. We publish the scoring criteria and procedure in our measurement scope document, and you may ask us for an explanation and for a re-score through customer support within the appeal window printed at the bottom of your report (30 days from the issue date by default). Once the retention period ends and the originals are destroyed, a re-score is no longer possible.

What we collect: (1) the documents, code, notes and working plan you write during the sitting; (2) the full record of your conversation with the AI inside the screen (requests and responses); (3) the results of running and checking your code or document; (4) your answers to the situational-judgement questions (and your confidence rating, if you send one); (5) your verdicts in the AI proposal review; (6) your answers in the confirmation interview and your self-reported experience; (7) input-origin signals — the count and character length of paste and drop events, the number of characters typed, and the number of times and total time the screen was left (we do not collect what was pasted or what you did away from the screen, only counts and durations); (8) your sign-in email, account identifier and the submission time of each step.

Why we use it: only to score this assessment, to write the result report, and to prepare the confirmation interview questions. We do not use it for advertising or to recommend other services, and we do not give it to AI providers for training their models.

How long we keep it: the record of a sitting is destroyed 90 days after the final submission. The final submission is the time you submitted the confirmation interview; if you stopped before that, the time you submitted your work; if neither exists, the time you started. A reviewer opening or scoring the sitting does not extend this period. If you ask us to destroy it earlier, we empty the body of the record and leave a deletion marker, and from that moment the candidate view, the sharing links and the reviewer view are all closed. A result report the reviewer has downloaded is separate from our destruction; the organisation the reviewer belongs to keeps and destroys that copy under its own recruitment-records rules.

Processors and international transfers: · Anthropic, PBC (United States): generating the in-session AI assistant's replies, scoring, writing the narrative of the result report, checking the evidence, and writing the confirmation interview questions. · OpenAI, Inc. (United States): only for writing the narrative of the result report, and only when Anthropic does not respond. This applies only to sittings consented to on the consent screen that states it (from the September 21, 2026 version); records from sittings consented to before that are not sent to OpenAI. · Turso (a United States company; servers in the Tokyo region of Japan): storing the record of the sitting. The items transferred are (1) to (6) above, and the transfer happens over an API call at the moment the feature is used. The retention period is the one stated above. If you do not agree to the international transfer, you cannot sit this assessment.

Who can read the result report: only after the reviewer confirms the scoring and turns sharing on. There are two paths. (1) You read it in your own account. (2) The reviewer creates a viewing link, and whoever holds that link reads the report without signing in. A link expires 30 days after it is created, or when the record of the sitting is destroyed if that comes first; a sitting can have up to ten links, and the reviewer can revoke any of them at any time. The report does not carry the raw scoring draft, the reviewer's notes or the non-public validation material. We do not give the record of a sitting to anyone outside these two paths.

Access, correction and deletion: write to help@preterview.com from the email address of the account that sat the assessment. When you ask for a correction we check the record again and either correct the result report or explain why we are not changing it. What we provide for access is the result report and the submission summary; we do not provide the raw record of the sitting, because it contains the expected values of non-public validation cases.

· Payments (Korea): PortOne (NHN KCP) — payment and settlement.

· Payments (overseas): Polar (Merchant of Record) — payment, settlement and tax.

· AI analysis: Anthropic (Claude API) — AI analysis, generation and scoring of your résumé, portfolio and interview content and of the AI Fluency Practical (the text you submit and the work-panel conversation).

· Interviewer voice and transcription: OpenAI — text-to-speech of the interviewer’s questions, and, only when you answer in recording mode, transcription of that audio. The audio is discarded after transcription.

· Portfolio and interview feedback: OpenAI (API) — analyzes submitted portfolio materials, target roles, experience and job postings, and interview questions and answers to generate feedback reports.

Portfolio and interview feedback uses Anthropic or OpenAI. The provider depends on feature settings and service availability. If processing fails, we may send the same input to the other provider to complete the request.

· AI proficiency assessment result reports (backup processing): OpenAI (API) — only when Anthropic does not respond, analyzes the AI requests and responses, run results, submissions and notes recorded during the assessment to write the narrative of the result report.

In the AI proficiency assessment, the in-session AI assistant, scoring and interview questions use Anthropic only. The report narrative is also sent to Anthropic first; the same input is sent to OpenAI only when no response is received. This applies only to assessments started from a consent screen that states it (from September 21, 2026). Records from assessments consented to before that date are not sent to OpenAI.

· Infrastructure: Vercel (hosting), Turso (database).

· Email: Resend — verification and notification emails.

· Advertising measurement, where configured: Google, Meta, Naver — conversion events. Browser-side events fire only after you accept the cookie banner; for a completed purchase we may also send a server-side event carrying your email and account identifier in hashed, irreversible form.

Speech recognition is a feature of your browser, not a processor we engage: Chrome sends the audio to Google, Safari to Apple, under their own privacy policies. Type your answers instead if you would rather not use it.

Anthropic, OpenAI, Vercel, Turso, Resend and Polar operate servers outside Korea (mainly in the United States). The data the Service needs — email, the content you enter, interview text, the AI Fluency Practical text you submit and its work-panel conversation, payment identifiers — is transferred over the network (API calls) at the moment you use the feature that needs it, and is held until the processing contract ends or you delete your account. Transfers rely on the standard contractual clauses and data processing agreements we have with each processor. You may decline international transfer by contacting jd@jidonglab.com, in which case the features that depend on it (AI analysis, interviewer voice, payment) become unavailable.

· Account data and the content you enter: until you delete your account.

· Accounts that never complete email verification: deleted automatically 24 hours after sign-up. This does not apply to accounts signed up via social sign-in.

· Records Korean law requires us to keep after that: contract, withdrawal-of-purchase and payment records — 5 years; consumer complaint and dispute records — 3 years (Act on Consumer Protection in Electronic Commerce); access logs — 3 months (Protection of Communications Secrets Act).

· Visit analytics (page views) and the visitor-ID cookie: 180 days.

· Reviews: published until you or we take them down. We keep a record of every takedown — the text, rating, and when and by whom it was taken down — as evidence that we do not suppress reviews. When the author’s account is deleted, the review itself is deleted and that record is stripped of the author’s name and re-keyed to an irreversible hash.

· What outlives account deletion: payment and settlement records, pass grant and spend ledgers, service usage logs (feature used, model, timestamp, cost), and activity history (the type, score, role label and time of each interview or portfolio review) are kept for accounting reconciliation and usage statistics. The account identifier in them is replaced with an irreversible hash, so they no longer point to a person. What you entered and the body of what came back — résumé, portfolio, interview answers, the report text, the role title you typed — is deleted with the account.

Once a purpose is fulfilled we delete the data without undue delay and irrecoverably.

Wherever you live, you can ask us to give you access to your personal data, correct it, delete it, restrict our processing of it, or hand you a portable machine-readable copy. You can object to processing we base on legitimate interests, and withdraw any consent you have given.

Email jd@jidonglab.com from your account address — there is no fee, and we answer within one month. You can edit your profile in account settings and delete your account there yourself; data export is handled on request at that address.

You can also complain to a supervisory authority: in the EU/EEA, your national data protection authority (list at edpb.europa.eu); in the UK, the ICO (ico.org.uk); in Korea, the Personal Information Dispute Mediation Committee (privacy.go.kr, 1833-6972) or the KISA report centre (privacy.kisa.or.kr, 118).

Categories of personal information we collect: identifiers (email, name, visitor ID, IP address), commercial information (purchases and passes), internet activity (pages viewed, referrer), professional information (resume, portfolio, interview answers), and audio-derived content (your spoken answers as text) — for the business purposes in Section 3.

We do not sell personal information for money, and we do not use or disclose sensitive personal information for purposes that would give you a right to limit. If you accept advertising cookies, advertising platforms receive event data, which California law may treat as “sharing” for cross-context behavioural advertising — declining or withdrawing that consent (Section 10) is your opt-out.

You may exercise the rights to know, delete, correct and opt out, and we will not discriminate against you for doing so. Email jd@jidonglab.com; an authorised agent may act for you with your written permission.

We apply one-way password hashing, access control, encryption in transit (HTTPS), and access-log retention as administrative and technical safeguards.

A first-party visitor-ID cookie (httpOnly, 180 days) lets us count visits and popular pages; it holds no email or IP address and is not used to follow you across other sites. Advertising-performance cookies are set only if you accept them below, and you can change or withdraw that choice at any time. You can also refuse cookies in your browser settings, though some features may then be limited.

The Service is intended for job seekers. Do not create an account if you are under 16 (under 14 in Korea) without your legal guardian’s consent; if we learn we hold such data without that consent, we delete it.

The current version of this policy took effect on 2026-09-30. We announce changes at least 7 days before they take effect and record each change below with its effective date.

Pending revision: Adds a clause for competency test practice (where offered): what it collects (work-style answers, choices in the reasoning and situational-judgement questions, sequence-memory input, written answers, time spent on each question, the attempt record and the result report), why (scoring practice, showing the result report and, when you ask, writing detailed feedback), deletion with your account, and OpenAI in the US as the processor for detailed feedback, meaning the whole-result interpretation, item-by-item explanations and answer coaching (only when you ask; each sends only the questions, answers and per-area results it needs, never your name, email or account ID; OpenAI keeps them for up to 30 days by default and does not train on them). Effective date: 2026-10-16. Section 3-4 and the lines added to Sections 4 and 5 appear in this document from that date; until then their full text is in the notice. Read the notice

Earlier versions are available on request at jd@jidonglab.com.

This English text is provided for convenience only. In case of any conflict, the Korean version prevails. Nothing in this policy limits the rights you have under the mandatory law of your country of residence.