Privacy Policy

Last updated: August 20, 2026

1. Introduction

Prompt AI ("Prompt AI," "we," "us," or "our") provides Prompt AI Interview Copilot, a Windows desktop application and related online services that help users prepare for and participate in job interviews using AI-assisted transcription, answers, and workspace tools.

This Privacy Policy explains how we collect, use, store, share, and protect information when you use:

• The Prompt AI desktop application (Windows)
• Our cloud backend services
• The checkout page at https://promptai.one/checkout

Our public website is https://promptai.one. By creating an account, signing in, or using Prompt AI, you acknowledge this Privacy Policy.

2. Information We Collect

Account and profile information. When you register or sign in, we collect your full name, email address, and password. Passwords are stored only as a cryptographic hash on our servers.

Authentication and session information. We process login credentials, one-time verification codes sent by email, server-side session records, and short-lived WebSocket access tickets. In the desktop app, bearer access tokens are kept in memory during an active session and are not stored in browser local storage. The app may store account identifiers, display name, email, login state, and a device identifier in local storage.

Resume, job description, and knowledge base content. If you upload materials, we extract text from resume files, job description files or text, and optional Knowledge Base documents. We do not retain original uploaded file binaries after text extraction. Typed job description text may be cached locally in the app.

Audio, transcription, and interview content. Prompt AI uses your microphone for Live Interview and Live Transcription. Audio is captured on your device, transmitted to our backend, processed for speech-to-text, and used to display transcripts and generate AI-assisted responses where you use those features. Live Transcription notes may be stored locally on your device. Prompt AI does not use your device camera for video capture.

Screen and window capture. When you use features that involve screen or window content, images may be sent to our backend for OCR and the extracted text may be used for interview-related responses. Capture-related chat content and optional screenshots may be stored locally on your device.

AI requests and responses. We send relevant content to AI service providers, including interview questions, transcripts, resume/job description/Knowledge Base excerpts, OCR images, chat messages, custom vocabulary terms, and text-to-speech input. Payment credentials are not sent to AI providers.

Mirror feature data. Mirror lets another viewer see transcript and status information using a join code. Mirror does not share your microphone audio with viewers. Visual frame data used in Mirror may be forwarded ephemerally and is not stored in our backend mirror state cache.

Payment and purchase information. Purchases are completed through Razorpay on our checkout page. We may prefill your email for checkout. Payment instrument details are processed by Razorpay; Prompt AI does not store full card, bank, or UPI credentials. We store purchase records, credits, and payment event metadata linked to your account.

Communications. We send transactional emails for verification and password reset through configured email delivery providers.

Logs and diagnostics. The app may store diagnostic logs, session records, preferences, and optional screenshots locally. Our servers generate operational logs that may include identifiers, timing metadata, and IP address information used for rate limiting.

Optional speech-to-text diagnostics. Server configuration may enable retention of certain failed or low-confidence speech-to-text samples and metadata for troubleshooting. If enabled, automatic deletion timing is not defined in application code.

3. How We Use Information

We use information to operate accounts, provide interview and transcription features, process AI requests you initiate, operate Mirror, process payments, send transactional emails, maintain security, and troubleshoot service issues. We do not sell your personal information.

4. Device Permissions

• Microphone — required for Live Interview and Live Transcription
• Screen or window capture — used when you choose capture-related features
• Internet access — required for backend, AI, payment, and related services

5. How We Share Information

We share information with service providers that process data on our behalf, including:

• OpenAI — speech-to-text, AI answers, OCR, text-to-speech
• Razorpay — payment processing
• Google Firebase / Firestore — account and purchase records
• Redis hosting provider — short-term session and feature cache
• Render — backend hosting
• Email delivery providers — transactional account emails
• promptai.one — checkout web experience

We may also disclose information if required by law or to protect rights, safety, and security.

6. International Processing

Prompt AI uses cloud infrastructure and third-party providers that may process information in countries other than your own, including the United States, depending on provider locations and configuration.

7. Data Retention

Documented retention periods in our systems include:

• Authentication sessions — about 24 hours unless revoked earlier at logout
• Email OTP codes — about 5 minutes
• Resume/job description server cache — about 90 minutes with sliding renewal during active use
• Knowledge Base server cache — up to 30 days
• Mirror join codes — about 10 minutes; mirror session state — about 80 minutes
• Checkout session tokens — about 30 minutes
• Temporary server audio files — deleted after speech-to-text processing in the normal path

Account and purchase records may be retained while your account remains active and as needed for billing and legal compliance. Local app data remains until you clear app data or uninstall. Server log retention depends on hosting settings. Logout clears certain server-side cached resume/job description data.

8. Your Choices and Rights

You may log out, uninstall the app, clear local application data, and choose whether to use optional features such as Knowledge Base uploads, Mirror, or screen capture. Prompt AI does not currently provide an in-app automated account deletion feature. Contact us below to request access, correction, deletion, or other privacy-related requests.

9. Security

We use measures such as Argon2 password hashing, hashed session secrets, HTTPS/WSS transport, Razorpay webhook signature verification, and authentication rate limiting. No method of transmission or storage is completely secure.

10. Children's Privacy

Prompt AI is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users under the age of majority in their jurisdiction should use the service only with appropriate parental or guardian permission where required by local law.

11. Third-Party Links and Checkout

Prompt AI may open external pages such as our checkout site and Razorpay payment interfaces. Payments for credits are processed outside Microsoft Store billing through Razorpay on our website checkout flow.

12. Changes to This Policy

We may update this Privacy Policy from time to time and revise the "Last updated" date above. Continued use after changes become effective constitutes acceptance of the revised policy, except where applicable law requires otherwise.

13. Contact Us

For privacy questions or requests regarding your information:

Support / privacy contact: support@promptai.one

Website: https://promptai.one