Skip to content
provitude
Privacy

Your data, your choice

Provitude is built private-by-default: practice is yours, and anything public is something you chose to share.

Last updated 7 October 2026

This notice describes how the product works today. It is a plain-language draft and must be reviewed by a qualified privacy professional for each launch country before a public launch.

What is private by default

  • Interview practice sessions, answers and feedback.
  • Skill pack results, STAR stories, preparation plans, résumé and cover-letter drafts.
  • Saved posts, saved jobs and job alerts.
  • Your email address and time zone.

What becomes visible when you act

  • Posts and replies show your name. Your headline shows only if your profile is discoverable.
  • Applications share exactly the name, contact email, answers, work sample and reflection you review before submitting — only with that company. If you attach a CV, the company can open it only after they shortlist you.
  • Discoverable profile: when you switch it on, employers can see the fields you fill in. Practice results and reviewed Proof summaries appear only if you switch those on separately.
  • Expert questions are public unless you mark them private; private questions are visible only to approved experts and you.

AI features

When the site owner connects an AI provider, the text you submit to an AI feature (for example an interview answer) is sent to that provider to generate feedback. It is not used to train Provitude models, and it is not sent unless you press an AI button. Each member has a daily limit. Without a connected provider, feedback uses a built-in checklist that never leaves the site.

Job assessments

Some companies ask applicants to answer requirement questions and complete their own assessment, which can include coding and SQL tasks. Your code and queries run only in your own browser; the company re-runs them in theirs when reviewing. Python tasks load the Python interpreter (Pyodide) from the jsDelivr content network the first time you run them. Your answers are shared only with the company you apply to, and requirement answers never reject anyone automatically.

VERA hiring assessments

When you apply to a job that uses VERA, we store your Skill Check answers, job-task work and “Prove it’s yours” answers, and share them only with the companies you apply to. Your Skill Check result is kept in your private passport for 6 months so you don’t repeat it; you can delete it at any time from your passport. VERA does not record keystrokes, typing rhythm, tab switching, webcam, microphone or location, and never tries to infer emotions. The only timing we keep is how long each question took. To stop people using many accounts to copy our questions, we store a salted, one-way hash of the network address a Skill Check was started from (never the address itself) and delete it after 30 days. AI may generate question variants and follow-up questions and summarise answers for reviewers, but it never scores, ranks or rejects anyone: scores come from answer keys, automatic tests and people at the company. VERA may propose that someone is very unlikely to reach a company’s shortlist, but a person at the company confirms every such decision, you are told, and you can ask for a human review and an explanation of the reasons. If you choose to answer the optional fairness questions (gender, ethnic background, age band, disability), they are stored separately, never shown to companies or used in scoring, and only reported in totals of five or more people to check that VERA treats groups fairly. You can remove them at any time.

Your CVs

You can keep up to 10 CVs in your account: files you upload (PDF or Word) or CVs you make with the CV builder. They are private and stored encrypted with a key for your account. When you apply for a job you can attach one if you want to; the company can open it only after they shortlist you, so they read your work first, and every time they open it is recorded in their access log. Deleting a CV also removes it from the applications you attached it to. To help fill in forms, your browser reads the text of a CV you upload; for PDFs it loads the pdf.js reader from the jsDelivr network the first time (your file is not sent to jsDelivr). When the site owner connects an AI provider, that text may be sent to the provider to pick out details such as job titles and skills; it never scores, ranks or rejects anyone. A CV made with the builder can include a “Verified by Provitude” section; anyone with its verification link can see your name, headline and those verified results, but not your contact details or the rest of your CV. You can withdraw it by deleting the CV.

Companies’ hiring workspace

Companies that hire on Provitude get a private workspace to manage their candidates. When you apply, the company’s hiring team can see what you shared with that application (your name, the contact email you gave, your answers and work) plus your application status and messages. They can add private notes, tags, interview scorecards, files and tasks about you; these are visible only to people the company invited to its hiring team, and notes, scorecard comments, files and the text of emails are stored encrypted with the company’s own key. A company may also add people it found elsewhere (for example a public professional profile); if a company emails you through Provitude, every email says who it’s from and has a one-click link to stop their emails. For this data the company decides how it’s used and is responsible for it (the “controller”); Provitude stores it on the company’s behalf under our data processing agreement. Companies can set a retention period after which inactive candidates’ details are deleted automatically, and you can ask a company (or us, at hello@provitude.com) to delete your details.

Analytics cookies

If you choose “Allow measurement”, we use Google Analytics 4 and Google Ads measurement cookies to count visits and completed signups and understand which ads bring new members. Google receives browser and device information, an approximate location, pages viewed, cookie and ad-click identifiers, and a random signup event identifier used to prevent duplicate counting. We switch off Google signals, enhanced conversions and ad personalisation. We never send your name, email, profile, answers or messages. If you choose “No thanks”, these Google tags are not loaded. A first-party signup receipt expires within 24 hours and is cleared when counted or when measurement is declined. Change your choice any time with “Cookie settings” at the bottom of every page.

Keeping Provitude free of spam

To stop spam and scams, new posts, replies, expert questions and answers, job listings and application messages are checked automatically: by pattern rules and, when enabled, by an AI moderator that reads the text against our community guidelines. It can send content to a human moderator or hide clear spam until a moderator reviews it; people make the final decision, and the AI never reviews job applications or judges candidates. Sign-in also uses rate limits and blocks temporary email addresses.

Newsletter

If you subscribe to the newsletter we store your email address, where you signed up and when you confirmed. We only add you after you click the confirmation link we email you, and we send one email a week with new articles. We never sell or share your address. Every email has a one-click unsubscribe link; unsubscribing stops all newsletter email immediately.

Your controls

  • Edit or delete posts, replies, practice sessions and saved items at any time.
  • Withdraw an application: the company loses access to your answers and contact details (copies they already made cannot be recalled).
  • Export your data or delete your account from Settings & privacy.
  • Turn off email notifications at any time.

Sign-in

You can sign in with ChatGPT, Google or an email link, depending on what this site has enabled. We receive your name and email address from the sign-in provider and nothing else.