Under the GDPR, and the UK GDPR, you can ask any AI interview assistant vendor what personal data it processes about you, why and on what legal basis, where, for how long and who else receives it, and you can ask for a copy or for deletion; the vendor generally has one month to respond. This applies to vendors outside the EU and UK when they offer their service to people inside it. This page is not legal advice; it is a plain-language guide to a GDPR AI interview assistant request.
Below: your rights in one table, the six questions to send, what a good answer looks like, and how CoPilot Interview handles audio, transcripts and resumes.
Your GDPR rights in plain words
| Right | What you can ask for |
|---|---|
| Access (Article 15) | A copy of your personal data and an explanation of how it is used |
| Rectification (Article 16) | Correction of inaccurate data |
| Erasure (Article 17) | Deletion, with some exceptions such as legal obligations to retain |
| Restriction (Article 18) | A pause on processing while a dispute is resolved |
| Portability (Article 20) | Your data in a machine-readable format |
| Objection (Article 21) | To stop processing based on legitimate interests or for marketing |
The vendor must respond within one month, extendable by two further months for complex requests if it tells you why. Requests are free in most cases, and if you get no answer you can complain to your national data protection authority. Country specifics are in our Germany and UK guides.
The six questions to send any vendor
Copy these into an email to the vendor's privacy or support address. Mention that you are exercising your rights under the GDPR, give the email address you used with the service, and keep the date.
- What personal data do you process about me: audio, transcripts, resume text, account details, usage data?
- For what purposes, and on what legal basis for each?
- Where is it processed and stored, is any transferred outside the EU or UK, and under what safeguard?
- How long is each category kept, in days or months?
- Which sub-processors receive it, including transcription and AI model providers, and under what terms?
- How do I obtain a copy and request deletion, and who is your data protection contact?
What good answers look like
A good answer is specific, dated and signed by a named role. It lists data categories separately rather than lumping them as "your information", gives retention in numbers, names the model and transcription providers, and states the transfer mechanism for any processing outside the EU or UK. Deletion should be an email or a button, not a phone call.
Warning signs: "as long as necessary" with no number, a refusal to name sub-processors, a claim that GDPR does not apply because the company is in the US, or a response that arrives late with no explanation. None of these proves wrongdoing, but each is a reason to choose a different tool.
How to read a privacy policy in five minutes
Search the page for five words: retain, third, transfer, train and delete. Each should lead to a sentence that answers a concrete question. If "train" appears nowhere, the policy has not told you whether your interview answers feed a model. If "transfer" appears nowhere and the company is outside your region, it has not told you how your data leaves it. We ran this exercise on several vendors in AI interview assistant privacy policies compared.
How CoPilot Interview handles audio, transcripts and resumes
Our facts, stated the way we would want a vendor to state them. Audio is streamed in short segments for transcription and is not stored on our servers. A text transcript is saved only in your Documents folder. The transcribed text and the resume and job description you paste are sent to the AI model you pick. Sign-in is an email link with no password, and an account is needed only for paid plans. To delete an account, email support@copilotinterview.com. For legal basis, sub-processors and transfer safeguards, see the privacy policy; we will not improvise those details here. The resume question is covered in does an AI interview assistant store your resume.
Where CoPilot Interview fits
CoPilot Interview is an AI interview assistant for Windows and macOS with AI mock interviews on the free plan, and the six questions above apply to us as much as to anyone; send them. Two things sit outside any vendor's privacy policy: your interviewer's company is a separate controller with its own GDPR duties for its process, and whether live help is allowed in a given interview is for them to say, so read the invite and follow your employer's rules. Again, this is not legal advice.
Disclosure: CoPilot Interview is our product, so weigh what we say about it accordingly.
Frequently asked questions
Does the GDPR apply to a US-based AI interview assistant?
Generally yes, when the company offers its service to people in the EU or UK, regardless of where it is based. A vendor claiming otherwise because it is in the US is a warning sign. The specifics depend on the facts, and this is not legal advice.
How long does a vendor have to answer my request?
Without undue delay and within one month of receiving it. The period can be extended by two further months for complex or numerous requests, but the vendor must tell you within the first month and explain why. Silence past the deadline can be reported to your data protection authority.
Can I ask CoPilot Interview to delete my transcripts?
The transcript is saved only in your Documents folder on your own computer, so you delete it by deleting the file; no copy is kept on our servers. To delete your account, email support@copilotinterview.com. The AI model provider's own retention is described in the privacy policy.
Does the company interviewing me also have GDPR duties?
Yes. The employer is a controller for its own recruitment process, including any recording, AI scoring or note-taking it uses, and owes you the same transparency. You can send it the same six questions. This is separate from any tool you choose to use yourself.
Send the six questions, then try the free plan
No credit card, and the data facts above are the whole story on our side.
Try a practice question