Privacy Policy

Last Updated: October 13, 2026

Spotlight Prep™ is operated by Natal Space LLC ("we," "us," or "our"), a company incorporated in the United States. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our AI-powered job interview preparation platform.

By creating an account or using the Service, you agree to the practices described in this Privacy Policy.

Who We Are

Natal Space LLC is the controller responsible for your personal data. Spotlight Prep is a US-based service. For any questions about this Privacy Policy or your personal data, contact us at spotlightprepgpt@gmail.com.

What Data Do We Collect

We collect and process the following categories of personal data:

Identity Data: your first name, last name, username, and password when you create an account.

Contact Data: your email address used to manage your account and send service-related communications.

Profile Data: your target job role, career level, industry preferences, and interview session results.

User Content: interview responses, resume bullets, and any written or spoken inputs you provide during practice sessions. Voice data is processed in real-time and not stored as raw audio.

Usage Data: how you interact with features, session duration, simulations completed, achievements earned, and progress over time.

Technical Data: IP address, browser type and version, device information, time zone, and performance logs collected automatically to operate and secure the platform.

Geographic Data: approximate country and region inferred from your IP address at account creation and during active sessions. Used for regional product decisions and compliance. We do not collect precise GPS location.

Push Notification Data: if you enable practice reminders, we store your push subscription token and notification preferences. Used solely to deliver the reminders you request. Revocable at any time in Settings.

We may also collect and process Aggregated Data: statistical or demographic data derived from your personal data in a de-identified form. This data is not considered personal data and may be used for product analysis and improvement.

How Do We Collect Your Data

  • →

    Direct interactions: When you create an account, enter interview responses, upload resume content, or contact us.

  • →

    Automated technologies: As you use the platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and, only if you accept analytics cookies, PostHog product analytics and session recordings.

  • →

    Third-party providers: We may receive data from authentication and payment processors when you sign up or subscribe.

What Do We Use Your Data For

We use your personal data only where the law allows. We process your data for the following purposes:

  • Provision of services: To operate your account, provide access to simulations, and administer your subscription.

  • Personalizing your experience: To calibrate AI feedback to your role, level, and performance history, and recommend relevant practice paths.

  • Customer support: To respond to your requests, account issues, and troubleshooting needs.

  • Communications: To notify you of account activity, service changes, and (with your consent) product updates.

  • Improving the platform: To analyze usage patterns, measure feature adoption, and improve our AI feedback systems using aggregated and de-identified data.

  • Safety and security: To detect fraud, abuse, or unauthorized access and protect the integrity of the platform.

  • Legal compliance: To meet our legal obligations or respond to lawful requests from authorities.

Legal Basis for Processing Your Data

If you are in the EU or UK, we process your personal data only when the law allows it. For each use, this is the basis:

  • Providing the service (your account, practice sessions, scores and history): contract.
  • Payments and tax records: contract and legal obligation.
  • Service emails (receipts, password resets, account notices): contract.
  • Reminder and tips emails: legitimate interest. Every email has an unsubscribe link.
  • Keeping the service safe and fixing bugs: legitimate interest.
  • Analytics, session recordings and Google Ads measurement: consent. These stay off until you click Accept, and you can withdraw consent any time in Cookie settings.

How Do We Store Your Data

We take reasonable technical and organizational precautions to protect your personal data, including storing it on secure, access-controlled servers. We limit access to your data to personnel with a legitimate need to process it.

We keep your account and practice data until you delete your account. When you delete it in the app, we cancel any subscription, remove you from our email list, and delete your profile and practice history. We keep payment records for as long as tax and accounting law requires. Product analytics are kept for up to one year, session recordings for up to 30 days, and email delivery logs for 30 days. In some cases, we may anonymize your data so it can no longer be associated with you, in which case it may be retained for research or improvement purposes.

Who We Share Your Personal Data With

We do not sell your personal data.

We share information only in these limited circumstances:

  • Trusted service providers who process data on our behalf under confidentiality obligations, including Google Gemini (AI processing), Supabase (database & auth), Stripe (payments), PostHog (analytics), Resend (email delivery), and Vercel (hosting).
  • Professional advisers such as legal counsel or auditors, when required.
  • Government or law enforcement authorities, only where required by law.
  • In connection with a corporate transaction, such as a merger or acquisition, with appropriate protections in place.

Provider details. To see how our providers handle data, read PostHog session recording retention, Supabase database backups and Resend security.

AI processing. We use Google's paid Gemini service. Google does not use your practice answers to train its models.

International transfers. We are based in the United States. If you use Spotlight Prep from the EU, UK or Canada, your data is sent to and processed in the United States by the providers above. We rely on those providers' standard contractual clauses or approved data-transfer frameworks to protect it.

Your Data Protection Rights

Depending on your location, you may have the following rights regarding your data:

  • Right to access: Request copies of your personal data.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data under certain conditions.
  • Right to restrict processing: Request that we limit how we process your data.
  • Right to object: Object to our processing of your data in certain circumstances.
  • Right to data portability: Request that we transfer your data to another organization or directly to you.

Signed-in users can download a copy of their data from the Account page ("Download my data") and delete their account there at any time.

To exercise any of these rights, contact us at spotlightprepgpt@gmail.com. We will respond within 30 days. If you are in the EU or UK and are not happy with our reply, you can complain to your local data protection authority.

Cookies

Essential cookies and storage. We use these to keep you signed in and remember settings like your theme. We also store a short-lived record of the link you arrived from (such as a campaign or partner link) so we can credit it when you sign up. These do not need your consent.

Optional cookies. Only if you click Accept on our cookie banner, we also use:

  • PostHog product analytics, to see which features are used and where people drop off.
  • Session recordings (PostHog), which replay clicks, scrolling and screens so we can find usability problems. We mask everything you type. Text shown on screen, such as questions and feedback, can still appear in a recording.
  • Google Ads measurement (Google tag), to learn whether our ads lead to sign-ups. This may set advertising cookies from Google, and Google may use your visit to personalize ads it shows you.

If you click Decline, none of these are turned on. You can change your choice at any time: .

If your browser sends a Global Privacy Control signal, we treat it as Decline. You can still choose Accept in Cookie settings.

Age. Spotlight Prep is for people aged 16 and over. We do not knowingly collect data from anyone younger. If you believe a child has given us data, contact us and we will delete it.

Your California Privacy Rights

If you live in California, the California Consumer Privacy Act (CCPA) gives you these rights:

  • Know what personal information we collect, use and share.
  • Delete the personal information we hold about you.
  • Correct personal information that is wrong.
  • Opt out of the sale or sharing of your personal information.
  • Not be treated worse for using these rights.

What we collect. In the last 12 months we collected: identifiers (name, email); account and profile details (target roles, experience level, interview date); your practice content (answers, transcripts, scores and feedback); purchase details (plan and status; card details are held by Stripe); device and usage data (browser, pages, clicks, and approximate location from your IP address); and, only if you accept analytics cookies, session recordings.

Why we use it. To run Spotlight Prep, give you feedback, take payments, keep the service safe, send the emails you asked for, and understand what to improve.

Sale and sharing. We do not sell your personal information for money. If you click Accept on our cookie banner, Google Ads and PostHog can receive data about your visit, and some laws treat that as "sharing" for advertising. If you click Decline, or your browser sends a Global Privacy Control signal, none of it is turned on. You can change your choice any time with Cookie settings in the site footer or on your Account page.

Sensitive information. We do not knowingly collect sensitive personal information as the CCPA defines it. Please do not enter health, financial account or government ID details in practice sessions.

How to use your rights. Download your data or delete your account from the Account page, or email spotlightprepgpt@gmail.com. We will confirm your request within 10 business days and respond within 45 days. We may need to confirm it is really you. An authorized agent can act for you with your written permission.

If You Are in Canada

We collect and use your personal information with your consent, for the purposes in this policy. You can withdraw consent, ask to see your information, ask us to correct it, and ask us to delete it. Your information is processed in the United States, so US courts and authorities may be able to access it under US law. You can complain to the Office of the Privacy Commissioner of Canada.

How to Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

Natal Space LLC (Spotlight Prep)

Email: spotlightprepgpt@gmail.com