Privacy Policy

1. Introduction

WispherFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use our AI Interview Copilot service, including our website and desktop application (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

We collect the following types of information to provide and improve the Service:

• Account information: Your name, email address, and authentication credentials when you create an account.
• Uploaded documents: Resumes, cover letters, and job descriptions you choose to upload.
• Session metadata: Basic information needed to operate the Service (such as session timestamps and counts). We do not record or retain audio, video, or transcripts of your sessions, and we do not store browser or device fingerprints.
• Payment information: Billing details processed through our third-party payment processor. We do not store full payment card numbers on our servers.

3. How We Use Your Data

We use the information we collect for the following purposes:

• Providing AI assistance: Processing your inputs in real time to generate helpful AI-powered responses and suggestions. We do not retain session audio, video, or transcripts.
• Improving the Service: Analyzing usage patterns and feedback to enhance features, fix bugs, and develop new capabilities.
• Account management: Authenticating your identity, managing subscriptions, and communicating important account updates.
• Customer support: Responding to your inquiries and resolving issues.
• Referral program: Tracking referral links and attributing commissions to creators in our referral program.

4. Data Storage and Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption.
• Data is hosted on secure, SOC 2-compliant cloud infrastructure.
• Access to user data is restricted to authorized personnel on a need-to-know basis.
• We conduct regular security audits and vulnerability assessments.
• Session content is processed in memory only and is not stored or recorded by the Service.

5. Third-Party Services

We use the following categories of third-party services to operate and improve the Service:

• Payment processors: To securely handle subscription billing and payment transactions.
• AI and language model APIs: To power the real-time assistance features. Inputs are processed transiently and are not stored by us.
• Analytics providers: To collect anonymized usage data and understand how the Service is used.
• Cloud hosting providers: To host the Service infrastructure and store data securely.

We require all third-party providers to maintain appropriate security standards and to process your data only as instructed by us.

6. Cookies

We use cookies and similar tracking technologies for the following purposes:

• Session cookies: Essential cookies that keep you logged in and maintain your session state. These expire when you close your browser or after a set period of inactivity.
• Referral tracking cookies: When you visit WispherFlow through a creator's referral link, we store a cookie (lasting up to 30 days) to attribute your signup to the referring creator for commission purposes.
• Preference cookies: To remember your settings and preferences across sessions.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use the Service.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of any inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, including uploaded documents and account information.
• Data portability: Request a machine-readable copy of your data to transfer to another service.
• Objection: Object to certain types of processing, such as marketing communications.
• Withdrawal of consent: Withdraw consent for data processing at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the information below. We will respond to your request within 30 days.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes).

9. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Privacy & Data Requests: privacy@wispherflow.com
Security Disclosures: security@wispherflow.com
Legal Inquiries: legal@wispherflow.com
Billing Inquiries: billing@wispherflow.com
General Support: support@wispherflow.com
Enterprise Customers: enterprise@wispherflow.com
Website: wispherflow.com