CCPA Notice at Collection

1. Notice at Collection for California Residents

This notice is provided pursuant to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). It describes the categories of personal information we collect about California residents and the purposes for which we use that information.

2. Categories of Personal Information Collected

• Identifiers: Name, email address, phone number, account ID, IP address
• Professional Information: Resume content, job history, education, skills, certifications
• Audio/Visual Data: Voice recordings and transcripts of interview sessions (video recording is currently disabled)
• Biometric Information: Voice patterns from audio recordings may be considered biometric information under some laws; we do not create voiceprints or use your voice to identify you. Facial geometry is not collected — camera-based features are currently disabled
• Internet Activity: Browsing history on our platform, search queries, interaction data, device information
• Geolocation: Approximate location derived from IP address
• Commercial Information: Subscription plan, payment history, credit usage
• Inferences: AI-generated performance scores, skill assessments, coaching recommendations

3. Business Purposes for Collection

• Providing the interview practice and recruitment Service
• Processing and fulfilling subscription purchases
• Generating AI-powered interview feedback and performance scores
• Improving and developing our AI models and Service features (with opt-in consent)
• Ensuring security and preventing fraud
• Complying with legal obligations

4. Sources of Personal Information

• Directly from you when you create an account, upload a resume, or conduct an interview
• Automatically through cookies, analytics tools, and platform usage
• From third-party authentication providers (Google, Microsoft, LinkedIn, X) when you use social sign-in
• From your employer or recruiting organization if you are invited as a candidate through a B2B link

5. Sharing and Disclosure

Vocaid does not sell personal information. We do not share personal information for cross-context behavioral advertising.

We share personal information with service providers who process data on our behalf, and with B2B organizations when candidates are invited through organizational interview links (as disclosed before the interview).

6. Do Not Sell or Share My Personal Information

If you wish to exercise your right to opt out of any future sale or sharing, or to request information about our data practices, please contact us at support@vocaid.ai.

7. Your CCPA Rights

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of personal information we have collected
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale or sharing of personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights
• Right to Limit Use of Sensitive PI: Limit the use of sensitive personal information (including biometric data) to purposes necessary for the Service

8. How to Exercise Your Rights

To submit a CCPA request, contact us at support@vocaid.ai. We will verify your identity by confirming your email address associated with your account. We will respond within 45 days of receiving your verifiable request.

You may also designate an authorized agent to make a request on your behalf. The authorized agent must provide proof of authorization.

9. Sensitive Personal Information

We collect the following category of sensitive personal information as defined by the CPRA: biometric information (voice patterns from audio recordings). Facial geometry is not collected — camera-based features (video recording, liveness verification, behavioral analysis) are currently disabled platform-wide. This information is used only for the purposes of providing the Service and is not used for profiling purposes beyond what is necessary for interview feedback.

You may limit the use of your sensitive personal information by contacting us at support@vocaid.ai. While camera-based features are disabled, no video recording consent is requested — interview practice is audio-only.

10. Automated Decision-Making Technology (ADMT) Notice

Pursuant to the California Privacy Rights Act (CPRA) regulations on Automated Decision-Making Technology (ADMT), Vocaid provides the following pre-use notice about our use of automated processing that may significantly affect you.

Vocaid uses AI-powered systems to generate interview scores, performance assessments, and candidate evaluations. These systems constitute ADMT under California law when used by employers (B2B deployers) to make or substantially inform significant decisions about consumers, including employment-related decisions.

• Purpose of ADMT: Our AI systems assess interview performance across multiple dimensions (communication, problem-solving, technical depth, leadership, clarity) to generate advisory scores for hiring teams
• How ADMT Works: AI models analyze spoken responses (via speech-to-text transcription) and resume content against job requirements to produce probabilistic scores; camera-based behavioral signals are not used (these features are currently disabled)
• Opt-Out Right: You have the right to opt out of ADMT-based profiling that produces legal or similarly significant effects. To exercise this right, contact us at support@vocaid.ai or use the Privacy Center in your account settings
• Access Right: You have the right to access information about the logic involved in ADMT processing and a description of the likely outcome of such processing with respect to you
• Human Oversight: All ADMT-generated scores are advisory only. Employers using our platform are required to apply human judgment to all employment decisions. No hiring, promotion, termination, or other employment decision should be based solely on ADMT outputs

The ADMT notice requirement takes full effect January 1, 2027. Vocaid is providing this notice proactively to ensure transparency and compliance readiness.

11. Privacy Risk Assessments

Under the CPRA, businesses must conduct risk assessments before engaging in processing activities that present a significant risk to consumers' privacy. Vocaid conducts the following risk assessments:

• Processing of sensitive personal information (voice patterns; camera-based facial-geometry processing is currently disabled)
• Use of AI-powered automated decision-making technology for employment-related assessments
• Processing personal information of minors (our Service requires users to be 18+, and we implement age verification)

Risk assessments are reviewed and updated annually, or whenever we make material changes to our data processing practices. Assessment records are retained for at least five years and are available to the California Privacy Protection Agency upon request.

12. Contact Us

• California Attorney General: https://oag.ca.gov/privacy↗