Privacy
Last updated 4 November 2026
Matilda is a practice tool. We keep what we need to run your interviews and debriefs, and we don’t sell your data.
Who we are
Matilda is run by Filipp Vyshkov, a sole proprietor registered in Israel. Contact: admin@pebble.ink.
What we store
- Account: your name, email address and, if you set one, a password stored only as a salted hash. If you sign in with Google or Telegram, the account ID they give us.
- What you’re after: your profession, the job you describe, the interview language and the interviewer you chose.
- CV: the text we read from the file you upload.
- Interviews: the job posting each interview was built from, the call recording, its transcript, the debrief, scores and the questions you answered weakly.
- Plan: your plan, credit balance and, if you subscribe, the subscription and customer IDs that Paddle gives us. We never see or store your card details.
- Activity: a log of interviews, calls and sign-ins, so the dashboard can show your history and we can fix problems, and your IP address, used for abuse limits and fixing problems.
Who processes it
We use a few services to run the product. Each gets only what its job needs.
| Service | What for | What it receives |
|---|---|---|
| Hetzner (Germany) | Hosting the site and storing data | Everything listed above |
| Backblaze (B2) and a private server we operate | Disaster-recovery backup copies | Everything listed above |
| ElevenLabs | The voice call and speech-to-text | Call audio, the interview prompt with the job and your CV text |
| Anthropic (Claude) | The interviewer’s replies, matching jobs to you, and the debrief | The job, your profession and what you’re after, your CV text, the transcript |
| Sign-in with Google, if you use it | The sign-in request | |
| Google Fonts, jsDelivr | Loading fonts and scripts for the pages | Your IP address and browser details |
| Telegram | The bot and sign-in with Telegram, if you use them | Messages you exchange with the bot, your Telegram ID and name |
| SMTP2GO | Sending our emails: confirmation, password reset and account notices | Your email address and the message |
| Paddle | Taking payments as our reseller and Merchant of Record, taxes, invoices and refunds | What you enter at checkout, and your Matilda account ID so the payment lands on your account |
| Cloudflare | DNS for the site’s domain only | The domain name lookup, not your data |
Jobs come from public LinkedIn listings. We search LinkedIn with keywords generated from the profession and job description you enter. Nothing else about you is sent to LinkedIn, and nothing is sent to the companies.
Payments
Payments go through Paddle.com, our reseller and Merchant of Record. You enter your card or PayPal details in Paddle’s checkout, not on our site, and Paddle handles them under its own privacy policy. Paddle tells us when a payment goes through or a subscription changes, so we can add your credits.
How long we keep it
As long as your account exists, so your history and progress stay available. Delete your account and we delete your profile, interviews, recordings, transcripts, debriefs and history from our server. Copies held by the services above follow their own retention rules. Your IP address can stay in server logs and short-lived abuse counters until they rotate.
For disaster recovery we keep a nightly copy of the server’s data on a second server we operate, and an encrypted copy in Backblaze B2 cloud storage. Deleted data leaves the home-server copy within a day and the cloud snapshots as they expire, up to about two years. Backups are used only to restore the service.
Your choices
- Export your transcripts and debriefs from the dashboard at any time.
- The audio recording is kept for your debrief. It isn’t available for download, but it is deleted with your account.
- Share a debrief only if you want to: a share link lets anyone who has it read that one debrief, read-only, until you stop sharing it on the dashboard.
- Delete your account from the dashboard, under Account.
- Ask us what we hold about you, or to correct or delete it: admin@pebble.ink.
Cookies
One cookie keeps you signed in. A few short-lived ones protect signing in and signing up: with Google, with Telegram (a few minutes) and with email (up to 48 hours). The site also keeps a small note in your browser’s local storage so it can remind you which address a confirmation email went to. No advertising or tracking cookies.
Contact
Questions about privacy: admin@pebble.ink.