Privacy policy

The short version

The desktop app runs locally. Your interview audio is transcribed by a speech-to-text provider and your prompts are answered by an AI provider — on the free tier those are your accounts, using keys you supply, and nothing routes through us. We only receive data if you create an account, and only the data you choose to send.

We do not sell your personal information, we do not use your interview content to train models, and we never capture your screen.

What runs on your device

Audio capture, the overlay window and transcript display all happen on your machine. Audio is held in memory only long enough to be sent for transcription and is then discarded — it is not written to disk and not sent to us. Transcripts are stored locally and can be exported or deleted at any time. Uploading a session to your dashboard is opt-in and off by default.

On the free tier your API keys are stored on your device. See what leaves your machine for the itemised version.

What we collect

If you never create an account, we collect nothing. If you do, we process:

Why we may process it

For users in the UK and EEA, the UK GDPR and GDPR require a lawful basis for each purpose:

• Contract — running your account, syncing the context and sessions you ask us to store, provisioning managed keys, and metering your subscription.
• Legitimate interests — keeping the service secure, preventing abuse, and fixing faults from diagnostics.
• Legal obligation — tax and accounting records for purchases.
• Consent — anything genuinely optional, such as uploading a session. You can withdraw consent at any time by deleting the uploaded data.

Who else processes it

Rep-AI relies on a small number of providers. On the free tier the speech-to-text and AI providers are yours, under your own accounts and governed by their agreements with you rather than ours.

We will update this list before adding any provider that handles personal data.

How long we keep it

• Account data — until you delete your account, then removed within 30 days.
• Uploaded sessions and context — until you delete them, or until your account is deleted.
• Usage records — retained while needed to calculate your balance, then aggregated.
• Billing records — as long as tax law requires, typically seven years.
• Diagnostics — 90 days.

International transfers

Some providers listed above are based in the United States, so data may be transferred there. Those transfers rely on the European Commission's Standard Contractual Clauses or an equivalent approved mechanism.

Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or object to our processing of your personal data, and to receive a copy in a portable format. Most of this is self-service: you can edit or delete your CVs, vacancies, prompts and sessions from the dashboard, and delete your account outright from settings.

For anything you cannot do yourself, email support@repai.dev and we will respond within 30 days. If you are in the UK or EEA and think we have got something wrong, you may also complain to your local data protection authority.

California residents

We do not sell or share personal information as those terms are defined by the CCPA and CPRA, and we have not done so in the preceding twelve months. California residents have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising those rights. Use the same contact address above.

Children

Rep-AI is not intended for anyone under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

If we make a material change we will update the date at the top and, for account holders, tell you by email before it takes effect.

Contact

Email support@repai.dev with any privacy question, including data subject requests.

Controller details: the operating entity is being finalised. Until it is named here, correspondence to the address above reaches the people responsible for these decisions.