Privacy Policy

Lobbyee is a training and hiring tool for hospitality teams. Staff practice guest conversations against an AI guest and get coaching feedback; employers can also invite job candidates to complete scored practice conversations. This policy explains what we collect, why, and who sees it, in plain language.

What we collect

• Account details. Your name, email address, and workspace membership when you sign up or accept an invite.
• Training content. The guests, situations, and settings your workspace creates, and the full transcript of every practice session, including the coaching feedback generated for it.
• Voice audio (staff training only).Voice sessions are a staff training feature. Hiring assessments are typed, so a job candidate's microphone is never used. In a staff voice session, the trainee's microphone audio is streamed to our speech providers to be transcribed and to generate the guest's voice, in real time. We store the text transcript, not the audio recording.
• Candidate assessment data. If you complete an assessment as a job candidate: the name and email you enter, your conversation transcripts, and the scores generated from them.
• Payment status. Subscriptions are processed by Dodo Payments, our merchant of record. We never see or store card numbers.
• Basic logs. Standard server logs (IP address, timestamps, errors) used for security, rate limiting, and debugging.

How AI is involved

Conversations are generated and scored by AI models (currently Google Gemini for the guest, mood, and coaching scores; Deepgram for speech to text; Cartesia for text to speech). Your conversation content is sent to those providers to run each session. We do not sell your data or use it to train our own models. AI scores are automated assessments and can be imperfect; in hiring, they are decision support for a human reviewer, never an automatic decision.

Who sees what

• Staff sessions: you, and the managers and owners of your workspace.
• Candidate assessments: the employer who invited you sees your name, email, transcripts, and scores. Lobbyee does not use candidate data for anything else and does not contact candidates.
• Nobody else. We do not sell or share personal data with advertisers or data brokers.

Service providers

We run on Vercel (hosting), Supabase (database and authentication), Google Gemini, Deepgram and Cartesia (AI processing), Hugging Face (voice session infrastructure), Resend (email), Dodo Payments (billing), PostHog (product analytics), and, when enabled, Sentry (error monitoring, with personal data scrubbed). Each receives only what it needs to do its job. A current list of sub-processors is available on request.

Our analytics run server-side only: we send PostHog anonymous user and workspace identifiers and simple event counts, never names, email addresses, conversation transcripts or scores. Because no analytics script runs in your browser, we set no tracking or advertising cookies, only the cookies strictly required to keep you signed in.

Retention and deletion

Workspace data is kept while the workspace is active. Deleting your workspace deletes its sessions, transcripts, and assessments. Candidate assessment data is kept for up to 12 months after the assessment closes, unless the employer asks us to delete it sooner.

To exercise any data right, meaning access, correction, or deletion, including candidate data from an assessment you took, email support@lobbyee.com. We respond within 30 days.

Security

Data is isolated per workspace at the database level, encrypted in transit, and access to candidate and staff records is restricted to the people described above. Assessment invite links use unguessable tokens stored only in hashed form.

Children

Lobbyee is a workplace tool and not intended for anyone under 16.

Changes

If this policy changes in a meaningful way, we will note the new date at the top and, for significant changes, tell workspace owners by email.

See also our Terms of Service.