This page explains what data we collect when you use MBB Ready, why we collect it, how long we keep it, and how to ask us to delete it. We try to do less than the law allows. If we ever need to do more, we'll say so before we do
What we collect
The least we can get away with. Specifically:
- Your name and email, so we can send you your case feedback and remember who you are when you come back
- Your case audio and transcript, so the AI coach can mark you against the rubric
- Your rubric score and the marking notes, so you can see them later
- Basic usage information (browser type, screen size, page paths) for fixing bugs. We do not use third-party advertising trackers
What we do not collect
- We do not require a payment method for your first case
- We do not sell your data, ever
- We do not use your case audio or transcript to train models for any other product
How long we keep it
Case audio is kept for 30 days, then deleted. The transcript and rubric score are kept while your account is active so you can refer to them. If you ask us to delete your account, both are erased within 14 days
Sharing
We use the following processors to run the product. Each is bound by a data-processing agreement and may only use your data to serve you.
- Supabase · authentication, database (EU/US regions). Stores your email, your name, your case sessions, transcripts, and feedback
- OpenAI · large language model for marking your case. Receives the case transcript for scoring; OpenAI's API policy excludes API data from model training
- ElevenLabs · voice agent platform powering Mira. Receives your voice during the live case and the transcript text Mira generates. Audio is kept for 30 days, then deleted
- Vercel · hosting and serverless compute, plus opt-in product analytics (loaded only if you accept analytics cookies)
Your rights
You can ask us to export, correct, or delete your data at any time. Send the request via the contact form and James or Peter will reply within two working days
Where we operate
MBB Ready is operated from the UK and the US. By using the product you accept that your data will be processed in those jurisdictions. We comply with GDPR for users in the UK and EU and with comparable state-level laws in the US