Privacy policy
NIEVA
Who is responsible for your data
Data controller: Miguel Ángel Nieva Guevara, taxpayer registry number (RFC) NIGM870623429, with address at Avenida Las Américas 140, interior 1401, colonia Las Américas, C.P. 94298, Boca del Río, Veracruz de Ignacio de la Llave, Mexico, referred to below as "NIEVA".
Privacy contact: m@nieva.team
Website: nieva.wislab.app
Effective as of: September 20, 2026
Data protection officer: Miguel Ángel Nieva Guevara, reachable at m@nieva.team, responsible for handling requests to exercise your rights.
What data we process
To provide the service, we process the following categories of personal data:
Identification and contact data: email address, first and last name, profile photo, username, biography, preferred time zone, phone number, links to your professional profiles and, if you choose to provide it, the address of your resume.
Academic data: your course progress, the assignments you submit, the private notes you write, the comments you post in the forum, and the certificates you earn.
Activity data: sign-in records, enrollments and operations carried out in your account, each with its date.
Artificial intelligence feature data: the conversations you hold with the lesson tutor and, where applicable, with practice interviews.
Billing data: your customer identifier with our payment processor and your purchase history. We do not store card numbers: they are processed directly by Stripe.
Who sees what
Within your cohort:
The teaching and administrative team sees your profile, your progress, your assignments and your enrollment history, so they can support and evaluate you.
The rest of your cohort sees what you post in the community and, if you take part with your camera or microphone on, your image and voice during sessions.
No one else sees your assignments, your evaluation comments or your private notes.
Your payment data is processed by Stripe. NIEVA does not store card numbers.
Recording of live sessions
Live program sessions may be recorded so that enrolled participants who could not attend can watch them later.
What is captured: the audio and video of participants who have their camera or microphone on, the name they connect under and, where applicable, any screen they share.
Why: solely so that people in that same cohort can watch the session inside the platform.
Your options: you may take part with your camera and microphone off without it affecting your evaluation. We will tell you at the start of each session when it is being recorded. If you appear in a recording and want that portion edited or removed, write to us at m@nieva.team.
What we do not do: we do not publish recordings outside the platform, and we do not use them for promotional purposes without your separate, express authorization.
How long we keep them: for as long as the cohort retains access to the program material.
Use of your image for promotion
Promotional use of image and testimonial
If you expressly and separately authorize us to do so, we may use your name, your image, your voice, your testimonial and the projects you completed during the program to promote our services.
This authorization is voluntary: it does not condition your access to the program or to any other service, and you may revoke it at any time by writing to m@nieva.team, without affecting materials already distributed.
Without that express authorization we do not use your image outside the platform, and session recordings remain accessible only to your cohort.
About your assignments
The work you submit as an assignment is yours. We keep it so we can review it, give you feedback and record your progress in the program.
If your assignments include other people's personal data, for example in a project using real data, you are responsible for having their consent. We recommend using fictitious or anonymized data.
What we collect
When you use the Technical Interview Club we process:
The full transcript of the conversation, including your answers and the questions you were asked.
Your voice, only in voice mode and only during the session, in order to convert it to text in real time.
The result: score, per-criterion assessment, a report of strengths and gaps, and the resulting study plan.
Usage data: date, active duration, mode, template used, attempt status and credits consumed.
Your rating of the service, if you choose to give one at the end.
We do not record or store the audio of your interviews. In voice mode, audio is transmitted directly from your browser to the provider that runs the conversation, converted to text in real time, and not retained on our systems. We also do not use your voice to identify you or to build a voiceprint.
What we use them for
Necessary purposes. Without these the service cannot be provided:
Holding the conversation and generating your evaluation and report.
Tracking the credits you hold and their validity.
Keeping your attempt history so you can review it and measure your progress.
Quality review by authorized NIEVA personnel, who may read the transcript and the score to verify that the system is evaluating correctly.
Optional purpose. You may object without it affecting the service:
Using transcripts dissociated from your identity to improve the rubrics and the quality of the questions.
Automated evaluation
Your interview is evaluated by an automated system that applies a predefined rubric and produces a score and a report. That score has no legal effect on you: it does not condition your access to any service, it is not shared with employers, and it does not determine the issuance of any certificate.
You may request human review of any score by writing to m@nieva.team.
Who else is involved
To provide this service we rely on artificial intelligence providers acting as data processors: they process the data solely on our instructions and are not authorized to use it to train their models.
In voice mode, audio is transmitted directly from your browser to that provider, without passing through our servers.
How long we keep them
Transcripts, scores and reports are kept for as long as your account is active and up to 12 months after it is closed, so that you can review your history and measure your progress. You may request their deletion before that period by exercising your ARCO rights.
What we use your data for
Necessary purposes
Without these we cannot provide the service:
Creating and managing your account, and verifying your identity when you sign in.
Giving you access to the courses, bootcamps and programs you are enrolled in.
Recording your progress and issuing your certificates.
Processing payments, subscriptions and refunds.
Receiving and evaluating your assignments, and giving you feedback.
Sending you operational communications: account confirmation, password recovery, receipts, class notices and changes to the service.
Handling your support requests.
Preventing fraud and abuse, and keeping the platform secure.
Meeting the tax and legal obligations that apply to us.
Optional purposes
You may refuse any of these without losing access to the service:
Sending you our newsletter and communications about new programs and promotions.
Displaying your profile publicly, if you turn that option on.
Analyzing in aggregate how the platform is used in order to improve it.
Using your testimonial or success story in promotional materials.
To refuse any of the optional purposes, write to us at m@nieva.team or use the controls in your profile.
Processors acting on our behalf
Providers that process data on our behalf
To provide the service we rely on providers that process personal data on our behalf and on our instructions, with no purposes of their own: Supabase (database and authentication), Vercel (hosting), Mux and Bunny (video), Upstash (caching and rate limits), Resend (transactional email), and OpenAI and Anthropic (artificial intelligence features). All of them operate under a contract requiring confidentiality, security measures, and deletion of the data when the relationship ends.
Transfers to third parties
Transfers to third parties
We do not sell your personal data. We transfer it only to our payment processor, Stripe, Inc., to the extent necessary to process your payments and for it to meet its own fraud prevention and financial regulatory obligations.
This transfer is necessary to perform the contract you enter into with us, so it does not require your additional consent. We inform you of it here nonetheless.
☐ I accept the transfer of my data on the terms described.
International transfers
Most of our providers operate outside Mexico, chiefly in the United States. When you use the platform, your data is processed in those countries under the contractual confidentiality and security obligations we have agreed with each of them.
How long we keep your data
We keep your personal data for as long as necessary to fulfill the purposes described and the applicable legal obligations:
Account, profile and contact data: while your account is active and for up to 12 months after it is closed.
Progress, assignments and feedback: while your account is active and for up to 12 months after it is closed.
Certificates issued: indefinitely, because their purpose is to be verifiable by third parties at any time. You may request revocation of a certificate, in which case it will no longer be available for verification.
Billing data and tax receipts: five years, as required by law.
Access and activity logs: up to 24 months, for security and fraud prevention.
AI feature and interview conversations: as stated in section 3.ter.5.
Live session recordings: as stated in section 3.bis.3.
Records of your consent and of the requests you send us: for as long as liability arising from the processing may be claimed.
Once these periods end, the data is deleted or irreversibly anonymized.
Your ARCO rights
At any time and at no cost, you may:
Access the personal data we hold about you.
Rectify it when it is inaccurate or incomplete.
Cancel it when you consider it is no longer necessary.
Object to our using it for specific purposes.
You may also revoke your consent with respect to the optional purposes, and limit the use or disclosure of your data.
How to exercise them. Write to m@nieva.team from the address associated with your account, stating your name, which right you are exercising and over which data. We may ask you to prove your identity.
Deadlines. We will respond within a maximum of twenty business days, extendable once by an equal period. Where the request is granted, we will give effect to it within the following fifteen business days.
If you are not satisfied with our response, you may turn to the Secretaría Anticorrupción y Buen Gobierno, the authority with jurisdiction over personal data protection in Mexico.
Cookies
We use only cookies that are strictly necessary for the platform to work: keeping you signed in, processing sign-in, and enabling password recovery. We do not use advertising or third-party tracking cookies.
Were this to change, we would announce it and request your consent before enabling them.
Security
We apply administrative, technical and physical measures to protect your data against damage, loss, alteration, destruction or unauthorized access:
Database-level isolation between academies, through row-level security policies rather than application logic alone.
AES-256-GCM encryption of stored credentials and secrets.
Encryption in transit over HTTPS and encryption at rest in the database.
Two-factor authentication available for your account.
One-time code verification at sign-up and password recovery.
Request rate limits to prevent abuse and brute-force attacks.
Audit logging of administrative actions.
No measure guarantees absolute security, but we review and update these controls regularly.
Security breaches
In the event of a security breach that significantly affects your financial or moral rights, we will notify you without delay at your account email address, stating what happened, which data was affected, what we recommend you do, and what corrective actions we have taken.
Changes to this notice
We will publish any change to this Privacy Notice on this same page, stating the date it was last updated. If the change involves processing your data for a purpose other than those set out here, we will inform you and request your consent before doing so.
Connecting AI assistants
NIEVA may offer you the ability to connect your account to third-party artificial intelligence assistants, so that you can consult from them the material you have access to.
That connection is enabled only if you request it, and it reaches only content you are already entitled to under your account. You may revoke it at any time from your profile.
When you use it we log, for security and usage control: the date and time of each query, which material was consulted, and the volume consulted. We do not receive or retain the content of your conversations with the assistant, which take place outside our platform and are governed by the privacy notice of whoever operates it.
When you connect an external assistant, the information it obtains from your account becomes subject to that third party's policies. We recommend reviewing them before authorizing the connection.