Core trust links
Current security practices
CrackInterviewAI uses managed services for authentication, database, payments, email, hosting, and AI processing. The current public policies mention encrypted connections, access controls, managed cloud services, and operational safeguards.
Manual input required: publish a maintained security inventory that lists production providers, admin access controls, backup practices, incident response owners, and security review cadence.
- HTTPS for website and API traffic.
- Razorpay handles payment credentials.
- Admin access should be limited to authorized operators.
- Secrets should live in server environment variables, not client code.
Secure communication
Website and application traffic should use encrypted HTTPS connections. Users should download the app only from official CrackInterviewAI links and should not share OTPs, passwords, payment credentials, or API keys in support messages.
Authentication overview
Account access uses the product authentication flow to identify the user and connect paid time or product access to the correct account. Manual input required: confirm active authentication provider, session lifetime, password reset flow, and admin-access review cadence before publishing deeper details.
Windows permissions explanation
Voice and screenshot workflows may require Windows microphone, audio-device, screen-capture, network, and app-launch permissions. Corporate laptops can block these permissions through device policy. Users should test permissions before a paid or high-stakes interview session.
Responsible disclosure
Security researchers and users can report suspected vulnerabilities through support@crackinterviewai.in. Include reproduction steps, affected page or workflow, device/browser details, and impact. Do not test against other users, perform destructive actions, or include secrets in the report.
Security best practices for users
- Use a trusted personal device when possible.
- Keep Windows and the browser updated.
- Download only from official links.
- Test the app before a real interview.
- Avoid uploading confidential employer, client, or assessment data unless you have permission.
- Contact support if login, payment, or permission behavior looks unexpected.
What is not currently claimed
No public SOC 2, ISO 27001, HIPAA, PCI DSS merchant certification, or GDPR certification is documented in this repository. The website should not imply those certifications.
If any certification is later obtained, add audit dates, certifying body, scope, and evidence links before using certification badges.
Security contact
For security issues, email support@crackinterviewai.in. Include affected route, account email if relevant, reproduction steps, and impact. Do not send passwords, OTPs, API keys, or payment credentials.
Why trust CrackInterviewAI
CrackInterviewAI is documented as a Windows AI interview assistant focused on preparation, mock interviews, and permitted live support. The product pages now separate verified product facts from placeholders that require measurement or manual confirmation.
The site does not claim SOC 2, ISO 27001, GDPR certification, guaranteed hiring outcomes, or universal platform compatibility. Where those details are unavailable, the documentation says so directly.
- Clear intended-user and not-recommended-for guidance.
- Dedicated privacy, security, AI model, benchmark, and responsible-use pages.
- FAQ and schema coverage for common candidate questions.
Limitations
AI answers can be incomplete, too generic, or technically wrong. Candidates remain responsible for understanding, checking, and adapting every answer.
Formal interview rules vary. CrackInterviewAI should be used during a formal interview only when the interviewer, employer, or assessment platform permits assistance.
Frequently asked questions
Does CrackInterviewAI claim SOC 2 or ISO 27001 certification?
No public SOC 2 or ISO 27001 certification is documented. The site should not claim those certifications unless formal audits are completed and verifiable.
How can I report a security concern?
Email support@crackinterviewai.in with a clear subject, affected page or workflow, reproduction steps, and any relevant screenshots. Do not include secrets, passwords, or payment credentials.
Are payment credentials stored by CrackInterviewAI?
The existing legal policy states that card, UPI PIN, and banking credentials are processed by Razorpay and are not stored by CrackInterviewAI.