Privacy Policy

From agency users: account details (name, email, agency name), authentication data, the criteria, model personas and content you create, billing status and payment records, and affiliate program details where applicable.

From applicants: the information the agency's invite form requests (typically name and email), any files you upload, your chat messages and responses during the assessment, and derived metrics (such as response latency, and browser tab-switch counts during the timed session).

Automatically: basic technical data such as IP address and request metadata, used to operate and secure the Service (including rate limiting), and — where enabled — privacy-respecting analytics.

• to provide the Service: run assessments, generate AI fan replies, and grade transcripts;
• to display results, transcripts, and metrics to the relevant agency;
• to process payments and manage subscriptions and affiliate commissions;
• to secure the Service, prevent abuse, and enforce limits;
• to communicate with agency users about their account.

For applicant data, the agency that created the invite is the data controller and decides why the data is collected; ChatterMock acts as a processor on the agency's behalf. If you are an applicant and want your data accessed or deleted, contact the agency you applied to. We will assist agencies in fulfilling such requests.

Assessment transcripts and related context are sent to third-party AI model providers (via OpenRouter) to generate fan replies and to grade responses. We do not sell your data. Do not include information in assessments that you would not want processed by an AI provider.

We share data only with providers that help us run the Service, including:

• our hosting and database provider (Supabase) for storage and authentication;
• AI model routing (OpenRouter) for fan role-play and grading;
• our payment processor for billing;
• analytics, where enabled.

We retain account and assessment data for as long as the agency's account is active or as needed to provide the Service, then delete or anonymize it within a reasonable period, subject to legal and accounting requirements. Agencies can delete assessments and their account from the dashboard.

We use measures such as tenant isolation (row-level security), access-controlled service credentials, encrypted transport, and rate limiting. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. Agency users can exercise these by contacting us; applicants should contact the relevant agency (see "Roles" above).

We may process data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

We may update this Policy; the "Last updated" date reflects the latest version. For privacy questions or requests, contact privacy@chattermock.com. See also our Terms of Service.