Privacy Policy

1. Overview

Ellis Labs LLC ("we", "us", "our") operates InterviewWhisperer. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

The short version: InterviewWhisperer is designed to be privacy-first. Audio processing happens locally on your device. We do not store your interview transcripts, audio recordings, screenshots, or AI responses on our servers.

2. Data We Collect

2.1 Account and Payment Data

When you purchase a license, we collect:

• Email address (provided during checkout)
• Payment information (processed and stored by Stripe — we never see or store your card details)
• License key and activation status
• Plan type (monthly or quarterly)

2.2 Usage Data

When you use the application, our license server processes:

• License verification requests (on app startup)
• API requests routed through our proxy (transcription text, LLM queries, screenshot data) — these are processed in real-time and not stored

2.3 Data We Do NOT Collect

• Audio recordings from your microphone or system audio
• Interview transcripts or conversation history
• Screenshots captured during your sessions
• AI-generated answers or responses
• Documents you upload (resume, job descriptions)
• Browsing history, keystrokes, or screen recordings

Audio capture, transcription, document parsing, and answer generation all happen locally on your device. API calls to AI providers (Groq, OpenAI, Deepgram) are routed through our proxy server for license enforcement but are not logged or stored.

2.4 Anonymous Error Telemetry

When the app crashes or hits an unhandled error, a stack trace and the exception type are automatically sent to our error tracking service (Sentry) so we can diagnose and fix bugs. These reports do not include audio, transcripts, resume content, LLM responses, IP addresses, or any request body data — that content is stripped before transmission. Telemetry is limited to exceptions only; normal app usage is not reported.

3. How We Use Your Data

• To verify your license and provide access to the Service
• To process payments and manage subscriptions via Stripe
• To route API requests to AI providers on your behalf
• To communicate with you about your account (purchase confirmations, license key delivery)

We do not sell, share, or trade your personal data with third parties for advertising or marketing purposes.

We do not use your data to train AI models.

4. Third-Party Services

We use the following third-party services:

• Stripe — Payment processing. Subject to Stripe's Privacy Policy.
• Groq / OpenAI / Deepgram — AI model providers (LLM, speech-to-text, streaming transcription). API requests are routed through our proxy for license verification. We do not store the content of these requests.
• Sentry — Anonymous error tracking. Receives stack traces and exception types when the app crashes. Does not receive audio, transcripts, resume content, IP addresses, or request bodies. Subject to Sentry's Privacy Policy.
• Vercel — Website hosting and aggregate traffic analytics (anonymized page views, referrer domain, and country — no cookies, no cross-site tracking, no personal identifiers). Subject to Vercel's Privacy Policy.
• Railway — Server hosting for our license verification service.

5. Data Retention

We retain your account data (email, license key, plan type) for as long as your account is active or as needed to provide the Service. If you cancel your subscription, we retain your data for 90 days in case you resubscribe, after which it is deleted.

API request data (transcriptions, LLM queries, screenshots) is processed in real-time and not stored on our servers.

6. Your Rights

All Users

You have the right to:

• Request access to the personal data we hold about you
• Request deletion of your personal data
• Cancel your subscription at any time

California Residents (CCPA)

You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

European Residents (GDPR)

You have the right to access, rectify, erase, restrict processing, and port your personal data. Our legal basis for processing is contractual necessity (providing the Service you paid for) and legitimate interest (license verification).

To exercise any of these rights, contact us at privacy@ellislabs.io

7. Security

We implement reasonable security measures to protect your data, including encrypted connections (HTTPS/TLS), rate-limited API endpoints, and secure license key storage. However, no method of electronic transmission or storage is 100% secure.

8. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website. Continued use of the Service after changes constitutes acceptance.

10. Contact

For questions about this Privacy Policy, contact us at privacy@ellislabs.io