Privacy Policy

Lobbyee is a training and hiring tool for hospitality teams. Staff practice guest conversations against an AI guest and get coaching feedback; employers can also invite job candidates to complete scored practice conversations. This policy explains what we collect, why, and who sees it, in plain language.

What we collect

• Account details. Your name, email address, and workspace membership when you sign up or accept an invite.
• Training content. The guests, situations, and settings your workspace creates, and the full transcript of every practice session, including the coaching feedback generated for it.
• Voice audio. Some practice conversations are spoken rather than typed. When one is, your microphone audio is streamed in real time to our speech providers (Deepgram to turn speech into text, Cartesia to generate the guest's voice) over our voice infrastructure at Hugging Face. What we keep is the text transcript. The audio itself is never written to storage and no recording of your voice is kept.
• Voice audio in a hiring assessment. A job candidate's microphone is used only for an exercise the employer marked as spoken, and only after the candidate has been shown that specific modality and consented to it. Before a spoken exercise begins we tell the candidate that speech recognition transcribes them first and that it is less accurate for some accents and ways of speaking than others, so it can mishear them. A typed exercise is always available instead: a candidate can ask the employer for it without giving a reason, and asking is not held against them. As with staff sessions, only the text is stored and no recording is kept. The version of the notice each candidate agreed to is recorded with their consent, so the record shows the exact wording they saw.
• Candidate assessment data. If you complete an assessment as a job candidate: the name and email you enter, your conversation transcripts, and the scores generated from them.
• Payment status. Subscriptions are processed by Dodo Payments, our merchant of record. We never see or store card numbers.
• Basic logs. Standard server logs (IP address, timestamps, errors) used for security, rate limiting, and debugging.

How AI is involved

Conversations are generated and scored by AI models (currently Google Gemini for the guest, mood, and coaching scores; Deepgram for speech to text; Cartesia for text to speech). Your conversation content is sent to those providers to run each session. We do not sell your data or use it to train our own models. AI scores are automated assessments and can be imperfect; in hiring, they are decision support for a human reviewer, never an automatic decision.

Who sees what

• Staff sessions: you, and the managers and owners of your workspace.
• Candidate assessments: the employer who invited you sees your name, email, transcripts, and scores. Lobbyee does not use candidate data for anything else and does not contact candidates.
• Nobody else. We do not sell or share personal data with advertisers or data brokers.

Service providers

We run on Vercel (hosting), Supabase (database and authentication), Google Gemini, Deepgram and Cartesia (AI processing), Hugging Face (voice session infrastructure), Resend (email), Dodo Payments (billing), PostHog (product analytics), and, when enabled, Sentry (error monitoring, with personal data scrubbed). Each receives only what it needs to do its job. A current list of sub-processors is available on request.

Our analytics run server-side only: we send PostHog anonymous user and workspace identifiers and simple event counts, never names, email addresses, conversation transcripts or scores. Because no analytics script runs in your browser, we set no tracking or advertising cookies, only the cookies strictly required to keep you signed in.

Retention and deletion

Workspace data is kept while the workspace is active. Deleting your workspace deletes its sessions, transcripts, and assessments. Candidate assessment data is kept for up to 12 months after the assessment closes, unless the employer asks us to delete it sooner.

To exercise any data right, meaning access, correction, or deletion, including candidate data from an assessment you took, email support@lobbyee.com. We respond within 30 days.

Security

Data is isolated per workspace at the database level, encrypted in transit, and access to candidate and staff records is restricted to the people described above. Assessment invite links use unguessable tokens stored only in hashed form.

Children

Lobbyee is a workplace tool and not intended for anyone under 16.

Changes

If this policy changes in a meaningful way, we will note the new date at the top and, for significant changes, tell workspace owners by email.

See also our Terms of Service.