Last updated: 8 September 2026
This policy explains what Iber collects, why, who we share it with, how long we keep it, and how to get it deleted. It covers joiniber.com, the Iber mobile app, and the assessment pages we serve.
Iber is operated from Bengaluru, India. For any privacy question or request: shiva@joiniber.com
The short version
If you are a builder, we collect the work you choose to show, and we record your assessments — camera, microphone and a face check — because that is what makes the result trustworthy to a company. Those recordings go to companies you apply to. You can delete your account and your data at any time.
What we collect
Account. Your email address, and your name and avatar if you sign in with Google or GitHub. Whether you are a builder or a company.
Profile. Anything you add — headline, skills, location, education, experience, links. Your GitHub username when you connect GitHub.
Phone number (builders). Your mobile number and its country code, which you add in Profile → Edit. It is required before you apply for a job or open your Iber Card. We use it only to contact you about interviews and offers, and we record when you agreed to that. Companies never see it through Iber; only Iber staff can.
Your builds. The video you upload, its title and description, and the GitHub repository URL. We read public metadata about that repository through the GitHub API — commits, contributors, timestamps — to confirm the repo is under your own account.
Resumes. If you attach one to an application, we store the file and share it with that company.
Assessment recordings and derived signals. This is the most sensitive category, so in detail:
- Video and audio of you answering, recorded in your browser during interviews, coding tests and spoken exams
- A transcript of each answer, produced from that audio
- A face image comparison — you enrol a selfie, and during an assessment we compare frames from your camera against it to confirm it is you. We store the enrolled selfie and numeric similarity scores. We do not sell, share or use this for any purpose other than confirming identity for your own assessments.
- Proctoring observations — whether a face was in frame, whether a second person appeared, whether the window lost focus or fullscreen was exited, whether a phone was visible, and coarse head-position estimates. These are timestamped notes shown to the company as evidence. They are not automatic judgements.
- Your code and diffs from coding rounds and repository challenges
- Scores, notes and pass/fail outcomes
Usage and technical data. Pages visited, actions taken, device and browser information, IP address, and error reports.
Waitlist (retired). Iber no longer has a waitlist — you sign up directly in the app. Entries collected while it existed (email, and phone number and GitHub link where given) are still held and can be deleted on request.
We do not collect payment card details from builders. Iber is free for builders.
Why we collect it
- To run your account and show your profile
- To verify that a build is yours
- To run and grade assessments, and to give a company evidence they can check
- To match you with roles and let companies contact you
- To keep assessments honest — identity matching and proctoring
- To fix bugs, monitor errors and improve the product
- To meet legal obligations
Our lawful basis is the contract between us (running the service you signed up for) and our legitimate interest in a trustworthy assessment. Where consent is required — camera and microphone access — your browser or device asks you, and you can refuse. Refusing means you cannot sit an assessment, because there is no assessment without it.
Who we share it with
Companies you apply to. When you apply to a role, that company sees your profile, your builds, your resume if attached, your assessment results, transcripts, recordings, and the proctoring evidence. They are contractually restricted to using it to assess you for that role, and are not permitted to use recordings to train models.
Service providers who process data for us:
| Provider | What it handles | |---|---| | Supabase | Database, authentication, file storage (recordings, resumes, selfies) | | Railway, Vercel | Application hosting | | Mux | Encoding and streaming of your build videos | | ElevenLabs | Speech-to-text for interview answers, and interviewer voice | | Anthropic | Generating interview questions and grading answers | | GitHub | Public repository metadata, via their API | | Judge0 | Running code you submit in coding tests | | Sentry, PostHog | Error monitoring and product analytics |
Some of these process data outside India, including in the EU and the US.
We do not sell your data, and we do not use your assessment recordings to train models.
How long we keep it
- Account and profile — while your account exists
- Phone number — while your account exists; deleted with the account
- Builds and their videos — while your account exists, or until you delete the build
- Assessment recordings, transcripts and proctoring records — 24 months from the assessment, then deleted. A company that has already seen them may hold their own copy under their own policy.
- Resumes — while the application is active, then 12 months
- Enrolled identity selfie — while your account exists; deleted with the account
- Waitlist entries (historical, no longer collected) — until you ask us to remove them
- Error and analytics logs — up to 12 months
If you delete your account we remove your personal data within 30 days, except anything we must keep for legal or accounting reasons.
Your rights
You can ask us to:
- Access a copy of your data
- Correct anything wrong
- Delete your account and data
- Object to or restrict particular processing
- Export your data in a portable format
- Withdraw consent for camera and microphone at any time, by revoking the permission in your browser or device
Email shiva@joiniber.com from your account address. We will respond within 30 days. If you are unhappy with our response you may complain to your local data protection authority.
Children
Iber is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has an account, email us and we will remove it.
Security
Data is encrypted in transit. Recordings, resumes and selfies live in private storage buckets and are served only through short-lived signed links. Access to production data is limited to people who need it. No system is perfectly secure, and we will tell affected users promptly if a breach occurs.
Changes
We will update this policy as the product changes. Material changes will be announced in the app or by email before they take effect. The date at the top always reflects the current version.
Contact
shiva@joiniber.com