Skip to content

Privacy Policy

This policy explains what Oops!... AI Did It Again (operated by Medhāvi-AI) collects when you use the Service, why, and the choices you have. We aim to collect as little as possible.

Information we collect

  • Your interview answers — the job title, industry, region, and the free-text you type during the assessment. This is the core input to your report.
  • Account details — if you create an account to unlock a paid report, your email address (and a securely hashed password, handled by our auth provider).
  • Payment information — when you pay, our payment processor handles the transaction. We receive payment metadata (e.g. a payment/order ID and status) to unlock your report. We never receive or store your full card or UPI credentials.
  • Technical data — an anonymous session identifier stored in your browser to link your reports, and a one-way hashed version of your IP address used only for rate-limiting and abuse prevention. We do not store raw IP addresses.
  • Analytics — we record which pages are visited, which site referred you (the site name only, never the full link), and whether an assessment was started or completed, so we can see how the product is used. This is cookieless, stored in our own database, never shared or sold, and tied only to the anonymous session identifier and hashed IP described above — never to your name or email.
  • Voice input (optional) — if you choose to dictate an answer, speech-to-text is performed by your browser’s built-in speech service (which may process the audio on its own servers, per your browser vendor’s policy). We never receive, record, or store any audio — only the final text you review and send.

How we use it

  • To generate your risk report and run the interview.
  • To create and secure your account and process your payment.
  • To prevent abuse and keep the Service reliable (rate-limiting).
  • To understand aggregate, anonymous usage so we can improve the product.
  • On occasion, a member of our team may access your interview answers — for example to fix a technical problem, respond to a support request, or investigate abuse or a safety concern. We keep this access limited to those purposes and never sell or publicly share your answers.

Service providers we share data with

We use trusted third parties to run the Service. Each receives only what it needs:

  • Supabase — database, authentication, and file storage.
  • Vercel — website hosting.
  • Razorpay — payment processing (INR and international card payments).
  • AI providers (such as Anthropic, OpenAI, or Google) — to process your interview text and generate the report. Your answers are sent to the active provider solely to produce your report.
  • Tavily — web search used to enrich paid reports. Your job title, any specialization you enter, and your selected industry and region are included in the search queries used to find relevant, up-to-date sources.
  • An email provider (Resend) that delivers account emails such as your password reset link, and your payment receipt. The receipt includes the job title you entered, the tier and amount you paid, and a link to your report.
  • Google — if you choose "Continue with Google" to sign in, Google handles that sign-in and shares your email address and basic profile with us. You can sign up with an email and password instead.
  • A cookieless analytics provider (Vercel Web Analytics), which receives visitor counts and the names of anonymous milestone events (for example that a checkout began) — never any detail about you, your role, your answers or what you paid. An error-tracking provider (Sentry) helps us diagnose problems. Our own usage analytics described above are first-party — they stay in our database and are not shared with any third party.
  • Product Hunt — serves the launch badge image shown in our site footer. Like any image loaded from another site, your browser sends it standard request data (such as your IP address); we send it nothing about you.

We do not sell your personal data. We only disclose data to others if required by law.

How long we keep it

  • Anonymous reports (created without an account) are automatically deleted after 3 days.
  • If you have an account, your reports and account data are kept until you delete them or close your account.

Your rights & choices

You can view and manage your reports from your dashboard. You can permanently delete a report, or delete your entire account and all associated data, from your account settings — this removes your data from our systems. To make any other request about your data, reach out via our Contact page.

Cookies

We use a single functional cookie set by our authentication provider (Supabase) to keep you signed in. We do not use tracking cookies or advertising cookies. Our analytics are cookieless and do not track you across sites. We do store a randomly generated session identifier in your browser’s local storage — this is what links the reports you create in one browser; it contains nothing about you and you can clear it at any time from your browser settings.

Security

Access to user data is protected with row-level security, and secrets and API keys are held server-side only. No system is perfectly secure, but we take reasonable measures to protect your information.

Contact

For any privacy question, see our Contact page. See also our Terms & Conditions.