Legal
Sub-processors
The third parties we engage to deliver the Services, what each one processes, and where.
The third parties we engage to deliver the Services, what each one processes, and where.
MasterPrep AI engages the third parties below to help deliver the Services. Each processes Customer Data only as needed to provide the Services, under contractual obligations of confidentiality and data protection.
| Sub-processor | Purpose | Data processed | Processing / storage location | Retention |
|---|---|---|---|---|
| Google LLC — Gemini API (Vertex AI and Gemini Developer API) | Speech-to-text, interview question generation, feedback and integrity analysis | Candidate audio, transcripts, interview content | Globally distributed; no single region | Not retained. Limited-period logging for abuse detection and legal compliance only |
| Google LLC — Cloud Storage | Interview video storage | Video recordings | India (asia-south1, Mumbai) | 30-day automated deletion |
| Google LLC — Google Sheets / Drive | Feedback records, transcripts, candidate contact details | Transcripts, feedback, candidate email addresses | Globally distributed | Retained until deleted on request or at end of engagement |
| ElevenLabs Inc. | Speech-to-text (realtime and batch); text-to-speech for interviewer questions | Candidate audio and transcripts; interview question text | United States, Netherlands and Singapore | Retained under ElevenLabs' own policies. No automatic expiry, and service and diagnostic logs are not individually retrievable or deletable by MasterPrep AI |
| Replit, Inc. | Application hosting | All Customer Data processed by the platform | United States (North America) | For the duration of the engagement. Replit's own sub-processors: replit.com/subprocessors |
| Neon Inc. (engaged via Replit) | Managed database | Transcripts, feedback, assessment outputs, candidate contact details | United States (us-east-1, Northern Virginia) | For the duration of the engagement; deleted databases recoverable from backup for 7 days |
| Stripe, Inc. | Payment processing (candidate practice purchases) | Candidate name, email address, payment details (entered on Stripe-hosted checkout) | United States | Per Stripe's retention policy |
| Resend | Delivery of candidate reminder and follow-up emails | Candidate email address, company name, interview status | United States | Per Resend's retention policy |
| IPinfo | Currency detection for regional pricing | Candidate IP address | United States | Not retained by MasterPrep AI |
Scroll the table horizontally on smaller screens to see every column.
Customer Data is processed and stored outside Australia, including in India, the United States, the Netherlands and Singapore, and — in the case of AI model processing — on globally distributed infrastructure where a single country cannot be identified. Customers are responsible for making any disclosures and obtaining any consents required from candidates in respect of these transfers.
MasterPrep AI does not use Customer Data to train, fine-tune or otherwise improve any artificial intelligence or machine learning model. We configure the AI services we use so that data submitted through the Services is not used to train their models.
Certain sub-processors retain service and diagnostic logs which may include Customer Data, including audio and transcription data processed through their services, under their own retention policies and for periods which may not be time-limited. These logs are not individually retrievable or deletable by MasterPrep AI.
Candidate-facing pages load static libraries and fonts from Cloudflare (cdnjs), jsDelivr, ElevenLabs' public CDN, and Google Fonts. These receive connection metadata only — IP address and browser user-agent — and no interview content, transcripts or contact details.
This list is maintained current. MasterPrep AI may add or replace sub-processors; this page is updated when it does.
Questions about this list: legal@masterprep.ai
See also our Privacy Policy and Terms of Service.