Privacy Policy

Last updated November 5, 2026

This is a plain-language template provided for transparency. It is not legal advice — please have it reviewed before relying on it.

GhostCue is a desktop app that helps you during live interviews. It listens to the call, transcribes it, and puts an answer on your screen: on its own while Auto answer is on, which it is at first (switch it off in the ⋯ menu), or when you press Answer, Screenshot or Chat. Doing that means some of your interview passes through our servers and through a small number of AI providers. This policy says exactly what goes where, how long we keep it, and how you delete it.

What we collect

  • Account information. Your email address and name. If you sign in with Google, we receive your basic Google profile (name, email, avatar).
  • Interview history. The transcript of each call, the answers GhostCue produced, the questions those answers were for, and when each call started and ended. The app syncs these from your computer to our servers so they appear in the History section of your dashboard. See the next section.
  • Documents you upload. Files you add on the dashboard, such as a résumé or job description, are stored on our servers. The desktop app downloads them when you sign in, keeps only the extracted text on that computer, and includes that text in the context sent to AI providers for each answer, whether Auto answer gives it or you ask for it. Deleting a document on the dashboard, or signing out of the app, removes that text from the computer.
  • Usage and billing records. When a billing session starts and ends, how much active time it used, which AI provider and model answered each request, and your credit balance and grants. These do not include transcript text.
  • Device information. A device name, an install identifier, the app version, and when the device last checked in, so we can show you which computers are signed in.
  • Payments. Purchases go through Stripe and are sold through Link, its merchant of record service. We store your Stripe customer id and a record of each purchase, refund, and subscription. We never see or store card numbers. If you ask Link to delete your data, Stripe cancels the subscriptions sold through it and deletes the related payment records it holds, including those in our Stripe account.
  • Crash and error reports. If the website hits an error, it sends a report with the error, the page version, and your browser to our error-tracking service, PostHog. If the desktop app hits an error, it sends a report with the error, the app version, and your operating system to PostHog and, until a 30-day changeover ends, also to our own error-tracking service (GlitchTip, which we host). Reports do not include transcripts, answers, documents, or the text on your screen.
  • Product usage. Which pages of the site you visit, and a small set of named events from the app: it launched, it installed an update, a session started or ended, you asked for an answer, you read the screen, you bought credits, and how many minutes of speech-to-text a call used. Events carry the app version and operating system, never the content of a call, a question, or your screen. For each answer, our server also records which AI model and route served it, how long it took and how many tokens it used. This is sent to PostHog with your account id, and never with the words of the question or the answer.

Your interview audio, transcripts, and screen

Audio is streamed live to our transcription provider and is not recorded or stored by us or by that provider on our behalf.

Transcripts and answers are written to a database on your computer first, and then synced to our servers under your account. The app keeps its local copy for up to 365 days. On our servers, a call stays until you delete it or your account, and your plan sets how far back History displays.

Screen reading happens on your computer. When you use Read screen, the app recognizes the text on your display locally and sends only that text, never a screenshot, to the AI provider. The text is not stored on our servers except as part of the question an answer was for.

Third-party processors

These companies process your data on our behalf so the service works. Each one handles data under its own terms and privacy policy.

  • Deepgram receives live interview audio and returns the transcript.
  • Anthropic, Google, OpenAI, and OpenRouter receive transcript text, on-screen text, your uploaded documents, and your prep notes to generate answers. Which provider answers depends on the model you chose and on availability; if the primary provider is down, the request is retried with another. When an answer needs current information, the provider may run a web search using the question text.
  • Stripe handles payments and stores your card details. Through Link, it also sends your receipts, handles tax, and can help you with orders, refunds and subscriptions. It uses your billing address and location to work out the tax.
  • Resend delivers our account email (email verification and password reset) and, unless you opted out, our tips and product news. For those it receives your email address and a few account events: that you created an account and how, that you verified your email, that you downloaded the app and for which system, when the desktop app first signed in, and when a session starts with how many free sessions you have left. Link sends receipts.
  • Google, if you choose to sign in with it.
  • PostHog receives the product-usage events, page views and error reports described above, tied to your account id and email once you sign in. On the website it may record a session replay of the dashboard. On signed-in pages it masks all text as well as everything you type.
  • Our servers, database, and error tracking run on infrastructure we operate.

We do not sell your data, and we do not use your transcripts or documents to train models.

Email

Account email (verifying your address, resetting your password, and notices about this policy or your account) always reaches you. Apart from that we send tips about getting started, reminders when your free sessions run low, and occasional news about GhostCue itself, never about anyone else's products.

We send these because you signed up to try GhostCue and didn't tick "Don't email me" on the signup page (UK PECR's soft opt-in, with legitimate interests as our lawful basis). If you created your account another way, you get none of them. You can object to these emails at any time, and we will stop: use the unsubscribe link at the bottom of any of them, or email us. Unsubscribing needs no sign-in. We keep a record of the choice you made, when, and the wording you saw.

Cookies and analytics

Our website sets a session cookie to keep you signed in, a short-lived cookie on the signup page that carries your email choice to the account it creates, and PostHog sets a first-party cookie to tell one visit from the next. We do not use advertising cookies or cross-site tracking. Product analytics is for understanding how GhostCue is used, and nothing in it is sold or shared for advertising.

Data retention

  • Account data is kept while your account is active.
  • Interview history is kept on our servers until you delete a call from History or delete your account. On your computer, the app deletes calls older than 365 days.
  • Documents are kept until you remove them from your prep context or delete your account.
  • Billing and usage records are kept for as long as we need them for accounting and to resolve disputes.
  • Product-usage events and request traces (which model and route served an answer, and how long it took) are kept by PostHog for as long as our PostHog plan allows, which is up to 7 years.

Deleting your data

  • One call. Open it in History and delete it. That removes its transcript, its answers, and the call record from our servers in one step.
  • A document. Remove it from your prep context in the dashboard.
  • Your account. Email us from the address on the account. Deleting the account removes your profile, interview history, documents, devices, and usage records. Billing records required for accounting are kept in anonymized form.

Data already sent to an AI provider for a specific request is subject to that provider's own retention. We use their commercial APIs, not consumer products, and we opt out of training wherever the provider offers it.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing the address below. We answer within 30 days. You can also object to our tips and product news at any time, and we will stop without asking why (see Email above).

Security

All traffic between the app, the website, and our servers is encrypted in transit. The desktop app never holds an AI provider key; every request is authorized with a short-lived token tied to your account.

Changes to this policy

We may update this policy as the product evolves. When the change affects what we collect or who processes it, we will email account holders. We revise the "last updated" date above whenever we change it.

Contact

Questions about privacy? Email [email protected].