Legal
Privacy Policy
Effective and last updated: August 16, 2026
1. Scope and Privacy Contact
This Privacy Policy explains how LeetSys ("LeetSys," "we," "us," or "our") collects, uses, discloses, and retains personal information when you use the LeetSys websites, applications, and related services (the "Service"). It also explains your choices and privacy rights. This policy does not cover third-party services that operate under their own policies.
Rohan Bajpai is the controller or business responsible for the personal information described here. Its mailing address is 816 Hampshire St, Apt D, San Francisco, CA 94110, United States. For a privacy request or question, email leetsys02@gmail.com.
Privacy at a Glance
- We do not sell personal information.
- We do not share personal information for cross-context behavioral advertising or use it for targeted advertising.
- Optional first-party analytics and attribution run only after you select "Allow analytics," and you can change that choice at any time.
- Voice mode sends microphone audio to Google's Gemini service in real time; LeetSys does not intentionally store raw microphone recordings in its application database.
- AI-generated scores and skill inferences are coaching tools and are not used to make employment, credit, housing, insurance, or other legally significant decisions.
- You can request access, correction, deletion, or a portable copy by emailing us.
2. Personal Information We Collect
The categories below describe information we have collected in the preceding 12 months and expect to continue collecting. We collect only what is reasonably necessary for the stated purposes.
| Category | Examples | Primary purpose |
|---|---|---|
| Identifiers and account data | Name, email address, internal user ID, Google account ID and profile image, password hash, authentication method, account dates, and session identifiers. | Create and secure accounts, authenticate users, provide support, and communicate about the Service. |
| Commercial information | Plan, subscription and payment status, Stripe customer and subscription identifiers, credits, passes, purchase history, and transaction status. Stripe collects payment-card and billing details; LeetSys does not store full card numbers. | Process purchases, manage entitlements and renewals, prevent fraud, maintain financial records, and provide support. |
| Practice and user content | Chat messages, voice transcripts, prompts, answers, whiteboard nodes and edges, notes, quiz answers, lesson choices, solution articles, shared content, and support messages. | Deliver practice sessions and lessons, maintain continuity, generate feedback, save work, enable sharing, and respond to you. |
| Audio information | Microphone audio you choose to stream during voice interviews. We receive resulting transcripts and session events, but do not intentionally store raw microphone recordings in our application database. | Provide live voice interaction and create the transcript used for feedback. |
| Activity and technical data | Pages and features used, session and event timestamps, interview duration, browser and user-agent data, referrer, campaign and click identifiers, paths, logs, error and security events, and approximate network information made available to our infrastructure. | Operate, secure, troubleshoot, measure, and improve the Service; enforce usage limits; and understand signup attribution. |
| Performance data and inferences | Interview and quiz scores, feedback, strengths, improvement areas, skill level and summary, streaks, usage counts, readiness indicators, and AI-generated recommendations. | Provide personalized coaching, progress tracking, access decisions based on plan limits, and product improvement. |
| Communications | Support requests, feedback, email delivery status, and messages relating to your account, purchases, or use of the Service. | Respond to requests and send service, legal, and permitted marketing communications. |
| Sensitive personal information | Account login credentials. A payment provider may process financial account or card credentials. Voice content could include sensitive information if you choose to say it. | Authenticate accounts, process payments, and provide voice features. We do not use sensitive personal information to infer characteristics about you. |
We do not intentionally collect government identifiers, precise geolocation, health data, genetic data, or biometric identifiers. We do not use voice information to identify you. Please do not include unnecessary sensitive information or another person's personal information in practice content.
3. Sources of Personal Information
- You: when you register, practice, speak, draw, publish, purchase, or contact us.
- Your device and use of the Service: through cookies, browser storage, requests, and application events.
- Authentication providers: such as Google, when you choose social sign-in.
- Payment providers: such as Stripe, which sends us transaction, customer, and subscription status.
- AI and infrastructure providers: which return transcripts, generated responses, operational data, and error information.
- Advertising links and referral sources: when a URL or referrer contains campaign or click identifiers.
4. How and Why We Use Information
We use personal information for the following purposes and, where EEA or UK law applies, on the listed legal bases:
- Perform our contract: create and authenticate your account; provide lessons, voice or chat sessions, whiteboards, quizzes, feedback, progress history, sharing, paid features, billing, and support.
- Our legitimate interests: secure and troubleshoot the Service; prevent abuse and fraud; maintain necessary operational records; improve usability and reliability; and protect our rights and users, where those interests are not overridden by your rights.
- Consent: access your microphone; use optional first-party analytics and attribution technologies; or send marketing where required. You may withdraw consent at any time without affecting earlier processing.
- Legal obligations: keep required tax and transaction records, respond to lawful requests, protect legal rights, and comply with applicable law.
- Vital interests: in rare circumstances, protect someone's life or physical safety.
If we ask for information needed to create an account, deliver a requested feature, or complete a purchase, you may choose not to provide it, but the relevant feature may not work. We do not use solely automated processing to make decisions that produce legal or similarly significant effects about you.
5. AI Processing and Voice Mode
LeetSys uses Google Gemini for live voice interaction and OpenAI for chat interactions, content generation, quizzes, and interview evaluation. To provide these features, we send relevant instructions, messages, transcripts, problem context, whiteboard context, lesson state, and related session information to those providers. Do not submit secrets or information you are not authorized to disclose.
In voice mode, your browser requests microphone permission and streams audio to Google Gemini using a short-lived access token. Gemini returns live audio and transcriptions. LeetSys uses the transcript, rather than a saved raw recording, to maintain the session and generate evaluation and coaching. You can use chat mode instead or revoke microphone permission in your browser.
AI providers process data as service providers or processors for these requested features under the applicable service terms and data-protection commitments. AI output may be inaccurate. Your scores, inferred skill level, and recommendations are for educational coaching only and are not supplied by LeetSys to employers to make hiring decisions, unless you choose to publish or share content that includes them.
6. Cookies and Browser Storage
LeetSys uses the following technologies:
- Authentication and security cookies keep you signed in, protect sessions, and support account security. They expire based on the login session or when you sign out.
- Privacy preference cookie remembers your optional analytics choice for up to 180 days so we can honor it across visits.
- Optional analytics and attribution record first-party product events and use cookies to remember first- and last-touch campaign, referral, and click information for up to 30 days. These operate only after you select "Allow analytics."
- Session storage may temporarily keep draft article or browser-view state until the tab or browser session ends.
- In-memory storage may keep interview and whiteboard state during the current browser session and is cleared when you sign out or close the session.
Use the "Privacy choices" control available on every page to allow or stop optional analytics. If you select "Essential only," we stop optional browser analytics and delete existing attribution cookies. You can also block or delete cookies using browser settings, but authentication and other requested features may stop working. Browsers may send a "Do Not Track" signal; because there is no uniform DNT standard, we do not respond to DNT separately. We honor legally required opt-out preference signals, such as Global Privacy Control, for processing to which they apply. We currently do not sell or share data for behavioral advertising. We do not knowingly permit third parties to track your activity through LeetSys over time and across unaffiliated services for those third parties' own advertising purposes.
7. How We Disclose Information
We may disclose personal information to:
- AI providers for voice, chat, generation, quizzes, and evaluation.
- Authentication providers when you use social sign-in.
- Payment providers to process purchases, subscriptions, fraud checks, refunds, and billing support.
- Hosting, database, security, analytics, and email providers that help operate and protect the Service and communicate with you.
- Other users or the public when you choose to publish or share an article, profile attribution, or link.
- Authorities and affected parties when reasonably necessary to comply with law, respond to legal process, protect rights or safety, investigate fraud or security incidents, or enforce our agreements.
- Transaction participants in connection with financing, diligence, merger, acquisition, reorganization, bankruptcy, or sale of some or all of our business, subject to appropriate safeguards.
- Others at your direction or with your consent.
Service providers are authorized to process information for contracted business purposes. We may also use or disclose aggregated or deidentified information that cannot reasonably be linked to you, and we commit not to attempt to reidentify it except as permitted by law to test our deidentification process.
8. United States State Privacy Disclosures
Depending on where you live and whether an applicable law covers LeetSys, you may have rights to know, access, confirm, correct, delete, or obtain a portable copy of personal information; opt out of sale, targeted advertising, or certain profiling; limit certain uses of sensitive personal information; appeal a denied request; and receive equal service without discrimination for exercising a right.
In the preceding 12 months, we have collected the categories described in Section 2. For business purposes, we have disclosed identifiers; commercial information; internet or other electronic network activity; audio information; user content; professional or education-related context you choose to provide; inferences; and sensitive account credentials to the provider categories described in Section 7. We have not sold personal information or shared it for cross-context behavioral advertising, and we have no actual knowledge that we sold or shared personal information of anyone under 16.
We use sensitive personal information only to provide requested services, authenticate accounts, process payments, maintain security, and perform other purposes permitted without a right to limit. We do not offer financial incentives for personal information. California's "Shine the Light" law may allow residents to ask about disclosures for third parties' own direct marketing; we do not make such disclosures.
To exercise a right, email leetsys02@gmail.com with the subject "Privacy Request" or use available account controls. Describe your request and the email associated with your account. We will verify requests proportionately, such as by requiring a reply from your account email or a signed-in action. An authorized agent may submit a request where allowed, but we may require proof of authority and direct identity verification. To appeal a decision, reply with the subject "Privacy Appeal."
9. EEA, UK, and Swiss Privacy Rights
Where applicable, you may request access, correction, deletion, restriction, objection, or data portability; withdraw consent; and complain to your local data-protection authority. You may object at any time to direct marketing and may object to processing based on legitimate interests based on your circumstances. Consent withdrawal does not affect processing already completed.
LeetSys and its providers may process information in the United States and other countries whose laws may differ from those where you live. Where required, we use an adequacy decision, approved standard contractual clauses, or another lawful transfer mechanism and supplementary safeguards. Contact us to request information about the relevant safeguards.
You may exercise these rights using Section 8's instructions. You also have the right to lodge a complaint with the supervisory authority where you live, work, or believe a violation occurred.
10. Retention
We use the following retention periods or criteria:
- Account, practice, content, and performance data: generally for the life of the account or until you delete the content, then only as needed for backups, dispute resolution, security, fraud prevention, or legal compliance.
- Live voice audio: streamed for real-time processing; LeetSys does not intentionally retain raw recordings in its application database. Transcripts and resulting evaluations follow the practice-data period above.
- Payment and transaction records: for the subscription relationship and afterward for the period required by tax, accounting, payment-dispute, anti-fraud, and other legal obligations.
- Analytics, attribution, support, security, and technical logs: for the shortest period reasonably necessary to analyze the Service, support users, enforce limits, prevent abuse, and document incidents or claims. Attribution cookies last no more than 30 days unless cleared sooner.
- Temporary evaluation and security records: until their configured expiration or while needed to prevent duplicate actions, investigate abuse, or preserve system integrity.
We consider the amount, nature, sensitivity, purpose, risk, and legal requirements for each record and do not retain identifiable information longer than reasonably necessary for the disclosed purpose. Deletion from backups may take additional time until they cycle out. We may retain deidentified information.
11. Security
We use reasonable administrative, technical, and organizational safeguards designed for the nature of the information, including hashed passwords, access controls, short-lived tokens for live AI sessions, and transport encryption where supported. No system is completely secure. You are responsible for protecting your credentials and should contact us promptly if you suspect unauthorized access.
12. Your Choices
- Use chat instead of voice, deny microphone permission, or revoke it in browser settings.
- Do not publish an article or revoke sharing where the feature permits.
- Block or delete cookies and browser storage, recognizing that some features may stop working.
- Use the unsubscribe link in marketing email or contact us. You will still receive necessary account, transaction, security, and legal notices.
- Request account or content deletion. Some information may be retained for the reasons in Section 10.
13. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect their personal information. Users must be at least 16 unless a higher age is required locally, and a minor who can use the Service only with a parent or guardian's authorization must obtain it. If you believe a child has provided information contrary to this section, contact us so we can investigate and delete it as required.
14. Changes to This Policy
We may update this policy to reflect changes to the Service, our practices, or law. We will post the new version and update the date above. If a change materially affects your privacy rights, we will provide additional notice through the Service or by email and request consent where required. We will not apply materially different practices retroactively without an appropriate legal basis.
15. Contact Us
Rohan Bajpai
816 Hampshire St, Apt D, San Francisco, CA 94110, United States
For privacy questions, complaints, or rights requests, email leetsys02@gmail.com. Please do not send sensitive identity documents unless we specifically request them through a secure method. We will respond within the period required by applicable law.