Privacy Policy

Last updated September 3, 2026

This is a plain-language template provided for transparency. It is not legal advice — please have it reviewed before relying on it.

GhostCue is a desktop app that helps you during live interviews. It listens to the call, transcribes it, and suggests answers when you ask. Doing that means some of your interview passes through our servers and through a small number of AI providers. This policy says exactly what goes where, how long we keep it, and how you delete it.

What we collect

  • Account information. Your email address and name. If you sign in with Google, we receive your basic Google profile (name, email, avatar).
  • Interview history. The transcript of each call, the answers GhostCue produced, the questions those answers were for, and when each call started and ended. The app syncs these from your computer to our servers so they appear in the History section of your dashboard. See the next section.
  • Documents you upload. Files you add on the dashboard, such as a résumé or job description, are stored on our servers. The desktop app downloads them when you sign in, keeps only the extracted text on that computer, and includes that text in the context sent to AI providers when you ask for an answer. Deleting a document on the dashboard, or signing out of the app, removes that text from the computer.
  • Usage and billing records. When a billing session starts and ends, how much active time it used, which AI provider and model answered each request, and your credit balance and grants. These do not include transcript text.
  • Device information. A device name, an install identifier, the app version, and when the device last checked in, so we can show you which computers are signed in.
  • Payments. Purchases go through Stripe. We store your Stripe customer id and a record of each purchase, refund, and subscription. We never see or store card numbers.
  • Crash and error reports. If the desktop app or the website hits an error, it sends a report with the error, the app or page version, and your operating system or browser to our error-tracking service. Reports do not include transcripts, answers, documents, or the text on your screen.
  • Product usage. Which pages of the site you visit, and a small set of named events from the app: it launched, a session started or ended, you asked for an answer, you read the screen, you bought credits. Events carry the app version and operating system, never the content of a call, a question, or your screen.

Your interview audio, transcripts, and screen

Audio is streamed live to our transcription provider and is not recorded or stored by us or by that provider on our behalf.

Transcripts and answers are written to a database on your computer first, and then synced to our servers under your account. The app keeps its local copy for up to 365 days. On our servers, a call stays until you delete it or your account, and your plan sets how far back History displays.

Screen reading happens on your computer. When you use Read screen, the app recognizes the text on your display locally and sends only that text, never a screenshot, to the AI provider. The text is not stored on our servers except as part of the question an answer was for.

Third-party processors

These companies process your data on our behalf so the service works. Each one handles data under its own terms and privacy policy.

  • Deepgram receives live interview audio and returns the transcript.
  • Anthropic, Google, OpenAI, and OpenRouter receive transcript text, on-screen text, your uploaded documents, and your prep notes to generate answers. Which provider answers depends on the model you chose and on availability; if the primary provider is down, the request is retried with another. When an answer needs current information, the provider may run a web search using the question text.
  • Stripe handles payments and stores your card details.
  • Resend delivers our account email (email verification and password reset). Stripe sends receipts.
  • Google, if you choose to sign in with it.
  • PostHog receives the product-usage events and page views described above, tied to your account id and email once you sign in. On the website it may record a session replay of the dashboard with everything you type masked.
  • Our servers, database, and error tracking run on infrastructure we operate.

We do not sell your data, and we do not use your transcripts or documents to train models.

Cookies and analytics

Our website sets a session cookie to keep you signed in, and PostHog sets a first-party cookie to tell one visit from the next. We do not use advertising cookies or cross-site tracking. Product analytics is for understanding how GhostCue is used, and nothing in it is sold or shared for advertising.

Data retention

  • Account data is kept while your account is active.
  • Interview history is kept on our servers until you delete a call from History or delete your account. On your computer, the app deletes calls older than 365 days.
  • Documents are kept until you remove them from your prep context or delete your account.
  • Billing and usage records are kept for as long as we need them for accounting and to resolve disputes.

Deleting your data

  • One call. Open it in History and delete it. That removes its transcript, its answers, and the call record from our servers in one step.
  • A document. Remove it from your prep context in the dashboard.
  • Your account. Email us from the address on the account. Deleting the account removes your profile, interview history, documents, devices, and usage records. Billing records required for accounting are kept in anonymized form.

Data already sent to an AI provider for a specific request is subject to that provider's own retention. We use their commercial APIs, not consumer products, and we opt out of training wherever the provider offers it.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing the address below. We answer within 30 days.

Security

All traffic between the app, the website, and our servers is encrypted in transit. The desktop app never holds an AI provider key; every request is authorized with a short-lived token tied to your account.

Changes to this policy

We may update this policy as the product evolves. When the change affects what we collect or who processes it, we will email account holders. We revise the "last updated" date above whenever we change it.

Contact

Questions about privacy? Email [email protected].