Privacy policy

What we store

• The two names you give, which can be first names only, and where each of you lives if you choose to say.
• Which kind of interview you are preparing for, and your interview date if you choose to give it.
• Your answers, the comparisons made of them, and a history of earlier versions of your answers so nothing is lost by accident. Timed mock interviews are stored the same way, including how long each answer took.
• Which flagged questions you have marked as talked about, tested again or resolved.
• If you use the free USCIS case reader: a copy of each case it reads, meaning its form, its steps and their dates, to show what usually comes next in cases like it. Your name, address, A-number, email and anything else that identifies you are removed before it is stored, and the receipt number is kept only as a one-way code. The extension that reads your case never sees your USCIS password.
• If you set a shared secret, only as a salted, stretched hash. We cannot read it.
• Your email address, and your spouse's if you give it. Your spouse's address is used only to send them their own link, and to send it again if they ask. Yours is used only to send you your own links, a payment confirmation and, if you leave it switched on, a note that a new comparison is ready. That note never contains a question, an answer or a verdict, and you can turn it off in your control panel. Your address is never used for marketing and never shared.
• When you use a share button to send a link or a nudge to your spouse, the message goes from your device to the app you choose. We record only that a nudge was sent, not what it said or to whom.
• If you pay: Stripe's reference for the payment and the amount. We never receive or store card details.
• Anonymous counts of events such as “a couple signed up” or “a report was viewed”, with no answer text and no address attached.
• To stop guessing and abuse: short-lived counters keyed by a one-way hash of your network address. The address itself is not stored.

Cookies and tracking

Only cookies that sign you in and remember a step you are part way through. There are no advertising cookies, no third-party analytics and no tracking pixels.

• stokes_session: which case you opened, with your private link or by signing in. It lasts 90 days. For an asylum case it lasts until you close the browser, unless you tick “Keep me signed in on this device”.
• stokes_account: that you signed in to your account. It lasts as long as stokes_session.
• stokes_keep: that you ticked “Keep me signed in on this device”. 90 days, or until you sign out.
• stokes_link: an asylum case's private link, opened and waiting for you to press Continue. It goes when you close the browser and is used for 30 minutes at most.
• stokes_start: the kind of case you picked before signing in. One hour.
• stokes_signin: that this browser asked for a sign-in email, so its link signs you in here. 30 minutes.
• stokes_oauth: a Google or Facebook sign-in in progress. 10 minutes.

Your browser also keeps, on this device only, a USCIS receipt number you save on the control panel (an asylum case keeps it with the case instead), and whether the documents page's side panel is open. Quick exit, on an asylum case's pages, signs this browser out and removes all of the cookies above.

Who processes your data for us

• Railway hosts the site.
• Supabase hosts the database.
• To compare them, your answers are sent to an AI model provider we contract with, on a paid plan whose terms do not allow the provider to use them to train or improve its models.
• Stripe takes payments, if you pay.
• Resend delivers email, if you give an address.
• Cloudflare checks that a person, not a script, is using the sign-up and lost-links forms. It sees your browser and network address on those two pages, and nothing you type into them.
• ElevenLabs reads the questions aloud in spoken and video practice. It is sent the words of each question, never your answers.
• Simli shows the practice officer's face in video practice. We send it the officer's voice only, never your voice, your camera or your answers. Your browser connects to it directly, so it sees your network address.
• Discord carries short alerts to the people who run the service, such as a new sign-up or a payment: never a name, an address or an answer, and for an asylum case not which interview it is. An alert names a short part of the case's internal number.

We do not sell your data, and we do not share it with anyone else unless the law requires it.

Who can read your answers

The two of you, through your private links. The console used to run the service shows that a couple exists and how much they have answered, not what they wrote. Your answers are stored in our database in readable form so they can be compared and shown back to you, which means a database administrator is technically able to access them. We do not, except where needed to fix a fault you have reported or where the law compels it.

If a law firm or organization set up your case for you, the staff who sign in to that organization see the same things your own control panel shows: which questions each of you has answered, and the matched answers once you both have. They do not see an answer before both of you have given one.

How long we keep it

On the free plan, everything is deleted 30 days after your last activity. On the paid plan, 30 days after your access ends or your last activity, whichever is later. Your control panel shows the date. Deletion removes your names, email address, answers, comparisons, history and links. Deleted data cannot be recovered by us or disclosed to anyone, which is one reason we delete it promptly.

A case that a law firm or organization set up for you is not deleted on that schedule. It is kept for as long as the organization's account with us is open, or until the organization or you delete it. If the organization's account is closed, the case falls under the ordinary rule above.

You can delete everything immediately, yourselves, from your control panel. You do not need to ask us.

The case reader's copies, which carry nothing that identifies you, are kept for that analysis. A copy made while you were signed in is linked to your account and is deleted when your account is deleted.

Your choices

You can download your answers as a file, reset them, or delete everything from your control panel. Deleting your session removes your email address with it.

Children

The service is for adults. It is not directed at anyone under 18.

Contact

Privacy questions and requests: support@oathsure.com.