Privacy Policy

This explains what ZoomGuru collects and what happens to it. The short version is at the top because it is the part that matters.

What we collect

• Account details. Your email, your name, and a hashed password. We never see the password itself.
• Subscription details. Your plan, its status and its dates, plus the Paystack references for your payments. Card numbers go to Paystack, never to us.
• Usage records. One row per request, holding your user ID, the type of request, and a timestamp. This is how we count usage and spot outages.
• Device keys. A public key for each computer you sign in on, used to verify requests really came from your app.
• Download counts. Platform, version and IP when the installer is fetched, so we know how many people are downloading it.

What we do not collect

• Recordings of your meetings or interviews, in any form.
• The questions you were asked, or the answers we produced.
• Screenshots you captured.
• Your CV or the job description — those stay on your own computer.
• Keystrokes, browsing history, or anything outside the app.

Where your audio goes

To produce an answer, your microphone audio is transcribed and the transcript is sent, with your CV and the job description, to the AI model that writes the reply. Screenshots follow the same path when you use the screenshot shortcut.

That happens over an encrypted connection, for the duration of the request only. We do not keep any of it afterwards. The providers we use for transcription and generation process it under their own terms and do not receive your name or email.

How we use what we do collect

• To run your account and check your subscription is active.
• To count usage against your plan.
• To send transactional email — receipts, password resets, expiry reminders.
• To find and fix faults.

We do not sell your data, and we do not use it to train AI models.

Email

We send account email you cannot opt out of while you hold an account: receipts, password resets, and notices about your subscription. Occasional product announcements have an unsubscribe link and honour it.

Third parties

• Paystack — payments. They hold your card details; we hold only a reference.
• AI providers — transcription and answer generation, per request, with no account identifiers attached.
• Resend — email delivery.
• Railway, Supabase and Cloudflare — hosting, database and downloads.
• Google Analytics — visitor statistics for this website only. It records which pages are read and roughly where visitors come from. It does not run inside the desktop app, and it never receives your name, your email, or anything from a meeting or interview.

Cookies

This website sets Google Analytics cookies to count visits and see which pages people actually read. That is the only thing cookies do here — there is no advertising network, no profile is built, and nothing is sold on. The desktop app sets no cookies at all. Blocking them in your browser costs you nothing on this site.

How long we keep things

Account and subscription records last as long as your account does. Usage rows are kept for reporting. Password reset tokens expire after an hour. Ask us to delete your account and we remove your personal data within 30 days, except where we must keep payment records for tax or legal reasons.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email [email protected] and we will respond within 30 days.

Security

Passwords are hashed with bcrypt. Traffic is encrypted in transit. Every AI request must be signed by a registered device key. Sessions expire after three hours, and completing a password reset signs every device out.

No system is perfectly secure. If we ever suffer a breach affecting your data, we will tell you.

Children

ZoomGuru is not for anyone under 18, and we do not knowingly collect their data.

Changes

If this policy changes materially we will tell you by email or in the app before it takes effect.

Contact

Privacy questions go to [email protected].