Privacy Policy

Last updated: 11 August 2026 Effective date: 11 August 2026

1. Who We Are#

Plaicer Tech Ltd is a limited liability company registered in Malta, with its registered office at Unit No. SG26 SOHO Savoy Gardens, Rue D'Argens, Gżira GZR 1362, Malta ("Plaicer", "we", "us", or "our").

We are the data controller for the personal data we process about you when you use our platform (plaicer.com, our AI-powered mock technical interviews and DSA assessment rounds, our practice challenges and learning content, and any related services - together, the "Service").

This Privacy Policy explains what personal data we collect, why, how we use it, who we share it with, how long we keep it, and what rights you have.

2. Legal Framework#

This Privacy Policy is issued under the General Data Protection Regulation (EU) 2016/679 (the "GDPR") and the Maltese Data Protection Act (Chapter 586 of the Laws of Malta). The supervisory authority in Malta is the Information and Data Protection Commissioner (IDPC).

3. Visitors Using Free Samples and Demos#

You can use free Challenge samples and Mock Interview / DSA demo pages without an Account. On those pages we do not ask for your name, email, or any registration.

Code you enter on sample pages is executed by a third-party code-execution service, not on Plaicer's servers. Your code and your IP address are transmitted to that service in order to run your code; Plaicer does not store the code you enter on sample pages. Do not enter personal information, credentials, or confidential material into sample editors. Details of our service providers are on our Subprocessors page.

Standard technical data (Section 4.3) and cookies (see our Cookie Policy) apply to all visitors.

4. Personal Data We Collect (Account Holders)#

4.1 Information You Give Us#

Email address (used for account creation and login) and the username you choose, which is displayed on leaderboard features.
Information you provide when you contact us, including the content of your messages.
If you purchase a Pass, your purchase is processed by our merchant of record, Paddle (Section 7.1). Plaicer receives confirmation of your purchase and order details, but never receives or stores your full payment card details.

4.2 Information Generated by Your Use of the Service#

Mock Interview and DSA Round data: your answers, your code, the transcript of your exchange with the AI interviewer, stage-level evaluations and evidence records, your Reports, scores, and timing/pacing data.
Voice interaction: where you speak during an interview, your browser's built-in speech-to-text service converts your speech to text. Depending on your browser, that service may transmit audio to the browser vendor (for example Google for Chrome, Apple for Safari) for recognition, under that vendor's privacy terms. Plaicer receives and stores the resulting transcript only. Plaicer does not receive, record, or store your audio.
Challenge and P2P data: Challenge attempts, Submissions, Results, P2P progress (Sections and Cards completed, saved exercise state and solutions), Badges, Achievements, and Certificates.
Leaderboard: the Plaicer 30/30 leaderboard displays your username, streak details, and scores. It does not display your email address.
Coaching: our coaching features read your stored Report and Result history to generate feedback on your progression.
Commercial data: your Pass status, Credit balance, and usage of paid features.
Account activity: sign-in dates and times, features used, and notifications we send you.

4.3 Information Collected Automatically#

Technical data: IP address, browser type and version, device type, operating system, referring URL.
Cookies and similar technologies - see our Cookie Policy.
Error and performance data, logged so we can diagnose and fix problems.

4.4 What We Do Not Collect#

We do not ask for, and do not intentionally collect, special categories of personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health, or sexual orientation). Please do not include this kind of information in your interview answers, code, or messages to us.

5. How We Use Your Personal Data and Our Legal Bases#

5.1 To Provide the Service (Contract - Article 6(1)(b))#

Creating and managing your Account and sending login codes.
Conducting Mock Interviews and DSA Rounds, evaluating your performance, and generating your Reports.
Running Challenge Submissions against test cases and generating Results; tracking P2P progress and issuing Badges and Certificates.
Providing coaching based on your stored history.
Managing your Pass, Credits, purchases (fulfilled via Paddle), and progress dashboard.
Sending essential service emails: login codes, purchase confirmations, security alerts, and notices about changes to these documents.

5.2 To Keep the Service Safe, Reliable, and Improve It (Legitimate Interests - Article 6(1)(f))#

Detecting and preventing fraud, abuse, and account misuse.
Maintaining a minimal record of Accounts terminated for attacks on or abuse of our systems, so that those users cannot evade termination by re-registering.
Monitoring performance, diagnosing errors, and improving reliability.
Using data derived from Submissions and evaluations in anonymised or aggregated form to calibrate, test, and improve the accuracy of our evaluation systems.
Understanding aggregate usage so we can improve the Service.

Where we rely on legitimate interests, we have balanced them against your rights and freedoms and concluded they do not override them. You may object (Section 12).

5.3 Non-Essential Notifications (Legitimate Interests - with opt-out)#

Product notifications and engagement emails are sent on the basis of our legitimate interest in keeping you engaged. You can turn any of them off in Account settings, and each includes a one-click unsubscribe link.

Marketing emails beyond the above are sent only with your explicit opt-in consent, withdrawable at any time.

5.5 Legal Obligations (Article 6(1)(c))#

We process personal data where necessary to comply with law - for example tax and accounting obligations relating to purchases, or responses to lawful authority requests.

6. Automated and AI Evaluation#

6.1 How Evaluation Works#

Challenge Submissions are evaluated automatically against pre-defined test cases in a sandboxed environment. Mock Interviews and DSA Rounds are conducted and evaluated using artificial intelligence models to generate interviewer responses, evaluations, Reports, and coaching. The providers involved are listed on our Subprocessors page.

6.2 No Legally Significant Automated Decisions#

These evaluations do not produce decisions with legal or similarly significant effects on you within the meaning of Article 22 GDPR. Your Results and Reports are self-assessment tools generated for you alone; Plaicer does not use them to make automated decisions affecting your legal rights or access to services.

We do not sell your personal data.

7.1 Service Providers (Processors) and Merchant of Record#

The current list of our service providers, each provider's role, and its location is maintained on our Subprocessors page. Purchases are processed by our merchant of record, Paddle.com Market Ltd ("Paddle"), which is an independent controller of the data collected at checkout (see Paddle's privacy policy: https://www.paddle.com/legal/privacy).

7.2 Educational Institutions#

If you access the Service through an educational institution's programme, separate terms and privacy information are presented within that programme's dashboard before any of your information is made available to the institution.

7.3 Legal and Safety Recipients#

We may disclose personal data where required by law, court, or regulator; to enforce our Terms; or to protect the rights, property, or safety of Plaicer, our Users, or others.

7.4 Corporate Transactions#

If Plaicer is involved in a merger, acquisition, reorganisation, or sale of assets, personal data may be transferred as part of the transaction; we will notify you and ensure equivalent protection.

7.5 What We Do Not Do#

We do not sell your personal data.
We do not share your personal data with advertisers for cross-context behavioural advertising.
We do not share your Results or Reports with employers or recruiters.
We do not use your Submissions, transcripts, or Reports to train AI models, and our AI provider is contractually prohibited from doing so.

8. International Data Transfers#

Your personal data is primarily stored and processed in the EU (AWS, Stockholm). Where a provider processes data outside the EEA (for example in the UK or the US), we rely on GDPR-permitted safeguards such as adequacy decisions, the EU-US Data Privacy Framework, or Standard Contractual Clauses. Details for any specific provider: privacy@plaicer.com.

9. How Long We Keep Your Data#

Our retention model is simple: your data lives as long as your Account does.

9.1 While Your Account Is Open#

We retain your Account details, Submissions, transcripts, Results, Reports, progress, Badges, and Certificates for as long as your Account exists - this powers your progress dashboard, your Report history, and coaching that reflects your development over time. Buying additional Passes (including repeat One-Time Passes) adds to this history.

9.2 When You Delete Your Account#

When you delete your Account (or we terminate it), all of the above is permanently and irreversibly deleted from our live systems, and purged from encrypted backups when backups are rotated (within seven (7) days). Deleted data cannot be recovered - by you or by us. A new Account created afterwards starts completely empty. Certificates and their verification links cease to exist on deletion.

9.3 What Survives Deletion#

Only:

Purchase and tax records, retained as required by Maltese tax and accounting law (up to ten (10) years);
Records needed to establish, exercise, or defend legal claims, kept only as long as necessary;
A minimal termination record (a hashed identifier and the reason) where an Account was terminated for attacks on or abuse of our systems, kept to prevent those users from returning; and
Support communications and security logs, kept up to 24 months for support, quality, and security purposes.

10. Cookies#

See our Cookie Policy for the cookies and similar technologies we use, what needs your consent, and how to change your settings at any time via the "Cookie settings" link in the footer.

11. How We Protect Your Data#

Hosting in a security-certified EU cloud environment (AWS).
Encryption in transit (TLS/HTTPS) and at rest.
Sandboxed, isolated execution of submitted code.
Access to personal data restricted to team members who need it, under confidentiality obligations.
Login-code authentication (no password reuse risk).
Regular review of security practices.

No system is 100% secure. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the IDPC and, where required by law, you - without undue delay.

12. Your Rights#

Under the GDPR and the Maltese Data Protection Act you have the rights of: access; rectification; erasure; restriction of processing; data portability; objection (including an absolute right to object to direct marketing); withdrawal of consent at any time; and complaint to a supervisory authority.

How to exercise them: most rights are available directly in Account settings - including full erasure via Account deletion. Otherwise contact privacy@plaicer.com; we respond within one month (extendable by two further months in complex cases, with notice). Exercising your rights is free, though we may charge or refuse manifestly unfounded or excessive requests.

Supervisory authority: Information and Data Protection Commissioner, Level 2, Airways House, High Street, Sliema SLM 1549, Malta. Tel: +356 2328 7100. Email: idpc.info@gov.mt. You may also complain to the authority of the EU Member State where you live or work.

13. Children#

The Service is not intended for children under 16, and we do not knowingly collect personal data from anyone under that age. Purchases additionally require the buyer to be 18 or to have parental consent. If you believe a person under 16 has provided us personal data, contact privacy@plaicer.com so we can delete it.

14. Changes to This Privacy Policy#

We may update this Privacy Policy from time to time. We will update the "Last updated" date, and for material changes we will notify you by email and/or a prominent notice in the Service before they take effect.

15. Contact Us#

Plaicer Tech Ltd Unit No. SG26 SOHO Savoy Gardens, Rue D'Argens, Gżira GZR 1362, Malta Email: privacy@plaicer.com