Legal
Privacy policy
Last updated 1 October 2026
Getting ready for an interview means telling Toby a lot about yourself. This policy explains what we collect, why, who we share it with and the choices you have.
Who we are
Toby is run by [Company name] Ltd, a company registered in England and Wales (number [company number]), registered office [address]. We are the controller of your personal data under the UK GDPR and the Data Protection Act 2018. You can reach us at hello@usetoby.ai.
What we collect
- Account details: your name, email address and login details.
- Interview material you give us: job descriptions, your CV and any notes about the role or company.
- Session data: your voice while you're on a call, the transcript we make from it, and the scores, feedback and suggested answers we generate.
- Camera: your video is shown only on your own screen. We don't record, upload or store it.
- Payment details: handled by our payment provider, [Stripe]. We see a receipt and the last four digits of your card, not the full number.
- Usage data: device, browser, pages visited and how you use the product, collected through essential cookies and, with your consent, analytics.
How we use it
- To run the service: research the role, generate questions, run your interview and write your debrief. Our lawful basis is our contract with you.
- To take payment and keep financial records, under our contract with you and our legal obligations.
- To keep Toby secure, fix problems and improve the product, under our legitimate interests.
- To send product news, only if you've opted in. You can unsubscribe at any time.
AI processing
Toby uses third-party AI models to generate questions, play the interviewer and score your answers. Your interview material and transcripts are sent to these providers only to produce your results. We [don't] allow them, or ourselves, to use your content to train AI models.
Scores and feedback are produced automatically to help you practice. They are never used to make decisions about you that have legal or similarly significant effects.
Who we share it with
We don't sell your data. We share it only with providers who help us run Toby, under contracts that require them to protect it:
- Hosting and storage: [provider]
- AI models and speech-to-text: [providers]
- Payments: [Stripe]
- Email: [provider]
- Website analytics: Google Analytics, only if you agree to analytics cookies
We may also disclose data if the law requires it.
International transfers
Some providers process data outside the UK. When they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement to keep it protected.
How long we keep it
- Sessions, transcripts and debriefs: until you delete the session or close your account. You can delete any session from inside Toby at any time.
- Account details: for as long as your account is open, then [30 days].
- Billing records: six years, as UK tax law requires.
Your rights
You can ask to access, correct, delete or export your data, to restrict or object to how we use it, and to withdraw consent at any time. Email hello@usetoby.ai and we'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right first.
Cookies
We use essential cookies to keep you signed in and the service working. We only use analytics cookies (Google Analytics) if you agree. You can change your mind at any time with "Cookie settings" at the bottom of every page.
Age
Toby is for people aged 18 and over.
Changes
If we make significant changes to this policy, we'll tell you by email or in the product before they take effect.
