Privacy policy
The short version: audio is never stored, transcripts are deleted after your session, and nothing you give us trains a model.
What we collect
Audio
We never store it. AcePilot captures audio locally on your machine, streams it for transcription while a session is armed, and discards it. There is no recording, no archive, and no way for us to play back a call — including for ourselves.
Transcripts
Text of what was said is kept only long enough for you to read your debrief, then deleted automatically. You can also wipe everything from settings at any time.
Documents you give us
Your resume and the job descriptions you add are stored while your account is active so answers can be grounded in your own experience. Delete them individually or all at once from settings.
Account and billing
Email address, password hash, licence state, and the device fingerprints of the machines you have activated. Payment card details never reach us — they go directly to our payment processor, and we hold only the last four digits and the receipt.
Product analytics
Crash reports and coarse usage events (session started, answer requested, debrief opened). These carry an account id, never transcript content.
Cookies on the website
The AcePilot app sets no cookies at all. This website does — but only if you say yes. The banner on your first visit starts with everything switched off, and nothing that measures you loads until you press Accept. Declining costs you nothing: every page works exactly the same either way.
If you do accept, two things run:
- Google Analytics 4, delivered through Google Tag Manager — how many people visit, which pages they read, and which channel brought them here. We have switched off Google's settings for sharing your data with its own products, its advertising systems, and its benchmarking pool.
- The Meta pixel — tells us which of our ads actually led to a purchase, so we stop paying for the ones that do not. It sees the page you are on, and on a completed purchase the plan you chose and its price, so we can tell which ads paid for themselves. It never receives your transcripts, your resume, your job descriptions, or anything from inside the app.
Until you consent, both are withheld rather than quietly collected: we use Google's consent mode, so the denial is enforced in the tag itself. You can change your mind at any time with Cookie choices at the foot of any page, and withdrawing is as easy as agreeing was. With JavaScript switched off, nothing loads and nothing is asked.
What we never do
- We do not train on your data. Not your transcripts, not your resume, not your job descriptions — for our models or anyone else's.
- We do not sell or rent personal data. We buy ads to reach people, and we measure whether they worked. We do not sell what we know about you to anyone.
- We do not join or read your meetings. No bot, no participant, no meeting API, no calendar access.
- We do not read your screen. Coding mode reads the shared editor region you point it at, in the moment, and stores nothing.
Who processes data for us
We use a small number of sub-processors: a speech-to-text provider, a model provider, a payment processor, an email provider, and cloud hosting. All are bound by contract to the limits above, and none may use your content for training. Separately, if you accept cookies on this website, Google (Analytics and Tag Manager) and Meta (advertising measurement) process the website data described under “Cookies on the website” — never anything from inside the app. The current list is available on request.
How long things live
- Audio — never written to disk.
- Transcripts and debriefs — removed automatically after your session.
- Resume and job descriptions — until you delete them or close your account.
- Account and billing records — for as long as the account exists, then as long as tax law requires.
Your rights
Wherever you are, you can ask us for a copy of what we hold, correct it, or have it deleted, and we will act without undue delay and within the period the law requires. If you are in the UK, EU, or a jurisdiction with comparable law, you also have the right to object to processing, to restrict it, and to complain to your supervisory authority. Email support@acepilot.cloud. Closing your account erases everything except records we are legally required to retain.
Security
Everything is encrypted in transit. Transcripts are encrypted at rest for the day they exist. Access to production data is limited to the engineers who need it and is logged. If we ever suffer a breach affecting you, we will tell you what happened and what we are doing about it — directly, not through a press release.
Children
AcePilot is not for anyone under 16, and we do not knowingly hold their data.
Changes
If we change anything material we will email account holders before it takes effect. The date at the top always reflects the current version.
Questions: support@acepilot.cloud.