Privacy Policy

What Merra Practice Is

Merra Practice is an AI-powered interview practice platform for individuals. You can practise mock interviews with a conversational AI, receive video recordings and transcripts, and get detailed feedback to improve your interview skills.

Who We Are

Merra Practice is operated by Merra Ai Ltd (Company No. 16470710), registered in England & Wales. For the purposes of UK GDPR / GDPR, Merra Ai Ltd is the Data Controller for the personal data collected through the Practice platform.

Data We Collect

How We Use Your Data

• Deliver the Service: Conduct AI interviews, generate feedback, store recordings and transcripts for your review.
• Process payments: Handle credit purchases and maintain purchase records.
• Improve the platform: Analyse usage patterns (in aggregate) to improve reliability and user experience.
• Communicate with you: Send purchase confirmations, service updates, and important notices.
• Ensure security: Detect and prevent fraud, abuse, and unauthorised access.

Legal Basis for Processing

• Contract: Processing necessary to deliver the Service you signed up for.
• Legitimate interest: Service improvement, security, and fraud prevention.
• Consent: Where required, such as for marketing communications.
• Legal obligation: Tax records, fraud prevention, and regulatory compliance.

Security Measures

• Encryption: TLS in transit and AES-256 equivalent at rest.
• Access control: Least-privilege access with role-based permissions.
• Secure payments: All payments processed via Stripe (PCI DSS Level 1 certified).
• Authentication: Secure authentication via Supabase Auth.
• Monitoring: Automated backups and anomaly detection.

Data Retention

• Account data: Retained while your account is active and for up to 30 days after deletion.
• Interview recordings (video/audio): Stored for your access; deleted upon account deletion.
• Transcripts & evaluations: Stored for your access; deleted upon account deletion.
• Payment records: Retained as required by tax and financial regulations (typically 6 years).

You can request deletion of your data at any time by contacting privacy@trymerra.ai.

Data Sharing & Sub-processors

We share your data only with trusted service providers necessary to deliver the Service:

• Cloud hosting & storage: For infrastructure and media storage (UK/EU regions).
• AI providers: For interview conversation and evaluation processing.
• Stripe: For secure payment processing.
• Supabase: For authentication and database services.
• Email provider: For transactional emails (purchase confirmations, etc.).

All sub-processors are bound by data processing agreements. We do not share your data with advertisers or data brokers.

Cookies & Analytics

We use essential cookies for authentication and session management. We use minimal analytics (Vercel Analytics) to monitor platform performance and improve the user experience. We do not use advertising or tracking cookies.

Your Rights

Under UK GDPR / GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Delete your data ("right to be forgotten").
• Port your data to another service.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact privacy@trymerra.ai. We will respond within 30 days.

International Data Transfers

We primarily store and process data in UK/EU regions. Where data is transferred internationally (e.g., to AI providers), appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and adequacy decisions.

Children's Privacy

Merra Practice is not intended for users under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware of such data, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-product notification. The "Last updated" date at the top reflects the most recent revision.