Privacy Notice

1. Scope

This Privacy Notice explains how PeakRound AI collects, uses, shares, and protects personal information when you use our website, account portal, Windows application, AI assistance, and related services.

2. Information we collect

• Account information: email address, password-derived security data, verification state, and account identifiers. If you choose Google sign-in, Google provides your email address, verified-email status, and a stable Google account identifier; PeakRound AI does not receive your Google password.
• Subscription and billing records: plan, status, provider customer and subscription identifiers, invoices, payment outcomes, and tax or billing metadata supplied by the payment provider applicable to your purchase. Current eligible purchases use Stripe Managed Payments and Link; Paddle may service legacy or fallback transactions. PeakRound AI does not receive or store your full payment-card number.
• Usage and device information: included and consumed time, renewal period, authorized device identifiers, application version, and activation records.
• Conversation content: audio sent for real-time transcription, recent transcript context, questions, and generated answers. Audio is not stored by PeakRound AI by default.
• Career Profile documents: filenames, page counts, SHA-256 values, and bounded text extracted from a required resume and an optional supplementary PDF. Extraction occurs in your browser and the original PDF files are not uploaded to PeakRound AI.
• Optional source context: relevant read-only excerpts selected locally from a source folder you choose. We do not expose a write endpoint for that folder.
• Technical and security data: IP address, request timing, browser or device information, operational logs, error data, abuse-prevention signals, and security events.
• Support communications: information you choose to provide when asking for help or exercising a privacy right.

3. How we use information

We use information to provide and secure accounts, including signing you in and preventing duplicate or unauthorized account linking; authenticate devices; store your Career Profiles; process authorized audio, extracted document text, and source context; generate answers; enforce plan, usage, and device limits; operate subscriptions; deliver account emails; diagnose failures; prevent fraud and abuse; provide support; meet legal and accounting obligations; and improve reliability and safety.

4. Service providers and disclosures

We disclose information only as needed to vendors that help operate the Service, including cloud hosting and databases, email delivery, authentication, transcription, AI inference, download delivery, monitoring, and payment providers. Google provides optional sign-in and processes that interaction under Google's own privacy terms. Stripe and Link provide Managed Payments, merchant-of-record, tax, subscription, fraud, dispute, and transaction-support services for current eligible purchases; Paddle may process legacy or fallback billing records and transactions. These providers process information under their own contractual and legal obligations.

We may also disclose information when required by law, to protect users or the Service, in connection with a business transaction, or with your direction or consent. We do not sell personal information.

5. Legal bases and choices

Depending on where you live, processing may be based on performance of our contract, legitimate interests in operating and securing the Service, consent, or compliance with legal obligations. You may choose not to provide optional source context. You may stop audio processing by closing or disabling capture in the application.

6. Retention

We retain account, Career Profile extracted text and metadata, subscription, metering, device, security, and transaction records for as long as reasonably needed to provide the Service, meet legal, tax, fraud-prevention, and dispute obligations, and resolve support issues. Deleting a Career Profile deletes its stored document text and metadata from active account storage, subject to backup and legal-retention requirements. Real-time audio is not stored by PeakRound AI by default. Operational logs and transient processing data are retained only as needed for security and service operation.

7. International processing

Our providers may process information in countries other than your own. Where required, we use contractual or other lawful safeguards for international transfers.

8. Your privacy rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Some billing, fraud-prevention, security, and legal records may need to be retained. Send requests to [email protected]. We may need to verify your identity before acting.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encrypted transport, hashed credentials and account capabilities, signed billing webhooks, and read-only source access. No system can guarantee absolute security.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. Contact us if you believe a child provided information without appropriate authorization.

11. Changes and contact

We may update this notice and will post the new effective date. Privacy questions and requests may be sent to [email protected].