← Back to GhostPilot AI

Privacy Policy

Last updated: October 26, 2026

1. What GhostPilot AI Does

GhostPilot AI is a desktop application that captures and processes system audio from your video call application during interviews, transcribes it in real-time, and generates AI-powered suggested answers in a private overlay. This policy explains what data we collect, how we use it, and how we protect it.

2. Audio and Transcription Data

Audio captured from your video call application is processed in real-time and is never stored permanently on our servers. Audio is streamed directly to our third-party transcription provider and discarded immediately after processing. Transcription text is held in application memory during the active session only. When the session ends or the application is closed, transcription data is discarded.

We do not retain, store, or archive your interview audio or transcripts. Your audio and transcription data is never used to train AI models.

3. AI-Generated Answers

Detected questions from your transcription are sent to our third-party AI inference provider to generate suggested answers. These requests contain only the question text and any context you have provided (such as your resume or job description). Our provider processes these requests in real-time and does not store your data for training purposes.

4. Data Stored Locally

GhostPilot AI stores the following data locally on your device using secure local storage: your preferences and settings, license key and plan status, session history and saved answers (if you use the answer library feature), and mock interview session data.

This data stays on your device and is not transmitted to our servers unless required for license validation.

5. Payment Data

All payments are handled by Gumroad, acting as merchant of record. We never see, store, or process your credit card number or payment details. Gumroad collects your email address and payment information to process transactions. See their Privacy Policy for details.

6. Email Address

We collect your email address when you sign up for early access or purchase a plan. Your email is used for: delivering your license key, account-related communications (purchase confirmations, subscription updates), product updates and launch announcements, and responding to support requests.

You can unsubscribe from non-essential emails at any time. We do not sell or share your email address with third parties for marketing purposes.

7. Resume and Job Description Data

If you upload a resume or enter a job description for interview preparation, this data is stored locally on your device. When generating AI answers, relevant portions may be sent to our AI inference provider as context. We do not store your resume or job description on our servers.

8. The Interview Question Predictor

The question predictor at ghostpilotai.com/predict needs no account and no email for your first 20 questions. The job description you paste is sent to our AI inference provider to write the questions and is not stored: we keep a one-way hash of it, so the same job description gets the same questions back for 7 days without being sent again, and we keep the questions themselves for those 7 days. A practice answer written for one of them is kept for 7 days from when it is written. A shared results link carries only that hash: anyone you give it to sees the questions, the role, the company and the seniority until those 7 days are up, and nothing else. Each run of the predictor is counted: we keep the job description's hash (never its text), whether the questions came from the cache, the page's language and the visitor id from our site cookie, for 90 days.

If you ask for 20 more questions, you give us your email address and, if you like, the day of your interview. We then store: your email address, the role and company the questions are for, the length of the job description (not its text), the interview day if you gave one, when you asked, a keyed hash of your IP address (never the address itself) and your browser's user agent, and a record of which set of questions we emailed to which address and when.

Why: your email address is used to send you the questions you asked for, once. The hashed IP address, the user agent and the send record are used only to limit abuse: how many predictions one connection can run, and how many emails one address or one connection can be sent in a day.

Consent: only if you tick the box do we email you anything else, which is how to rehearse these questions and the odd useful email from GhostPilot. If you leave it unticked, the questions you asked for are the only email you get. Every email carries a one-click unsubscribe link, which stops all further emails from us. To have your predictor details deleted, email support@ghostpilotai.com.

9. Analytics and Usage Data

We may collect anonymized, aggregated usage data to improve the product, such as: which features are used most frequently, session duration and frequency, error rates and performance metrics, and general usage patterns.

This data is anonymized and cannot be used to identify you personally. We do not use advertising cookies, tracking pixels, or third-party analytics services that track you across websites. We set one first-party cookie of our own, gp_vid, a random id kept for a year, so we can count visits and see which page or campaign brought you here. It holds no personal data. We do not collect GPS location data.

10. License Validation

To verify your subscription or Session Pass status, the application periodically contacts our backend server with your license key and a device identifier. This check confirms your plan status and does not transmit any interview data, audio, transcripts, or personal content.

11. Third-Party Services

GhostPilot AI integrates with the following third-party services:

AI inference provider - Real-time audio transcription and AI answer generation. Audio, question text, and context are processed in real-time and not stored or used for training. A current list of our sub-processors is available upon request to support@ghostpilotai.com.

Gumroad - Payment processing. Handles all billing and payment data. See their Privacy Policy.

Email delivery provider - Sends the emails described in this policy, including the question predictor's, to the address you gave.

We do not share your data with any other third parties.

12. Screen Share Invisibility

GhostPilot AI operates in a private overlay that uses OS-level screen capture exclusion to remain invisible during screen sharing. Your AI-generated answers and notes are not visible to interviewers or other meeting participants during screen share. The application uses OS-level screen capture exclusion to keep the answer overlay private. No audio or visual data from the overlay is transmitted or stored.

13. Data Retention

Audio: Never stored. Transcriptions: Discarded when session ends. Locally stored data (settings, saved answers): Persists until you uninstall the application or clear local storage. Email address: Retained while you have an active account. Payment records: Managed by Gumroad per their retention policies.

Question predictor: the questions for a job description, 7 days; a practice answer written for one of them, 7 days from when it is written; the generation records used for rate limiting (a hashed IP address), 48 hours; the record of which questions we emailed to which address, 90 days; the count of predictor runs (the job description's hash, whether it came from the cache, the page's language and the visitor id from our site cookie), 90 days; your email address and the details you gave with it, until you ask us to delete them (unsubscribing stops every email straight away, and the record then only marks you as unsubscribed so we never email you again).

14. Your Rights

You can request access to, correction of, or deletion of your personal data at any time by contacting support@ghostpilotai.com. You can delete locally stored data by uninstalling the application. You can unsubscribe from marketing emails at any time.

15. Data Processing

Your data may be processed internationally through our third-party service providers (our AI inference provider and Gumroad). By using GhostPilot AI, you consent to this processing.

16. Children

GhostPilot AI is not intended for use by anyone under 18 years of age. We do not knowingly collect data from minors.

17. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of material changes via email or through the application.

18. Contact

For privacy questions or data requests:
support@ghostpilotai.com