Privacy Policy

1. Who we are

Acemode is an AI-powered interview assistant application. In this Privacy Policy, "Acemode", "we", "us", or "our" refers to the operator of the Acemode service, reachable at privacy@acemode.app.

This Privacy Policy applies to:

• The Acemode website at acemode.app
• The Acemode desktop application (Mac, Windows, Linux)
• All communications we send you

2. What information we collect

Information you provide directly

• Email address: when you request access to Acemode
• Operating system: so we send you the right download file
• Resume content: if you choose to upload your resume inside the app (optional)
• Payment information: processed by Razorpay. We never see or store your card details.

Information collected automatically

• Device identifier: a hashed fingerprint of your device, used to manage your license. We never store your raw device ID.
• IP address: hashed and used only for rate limiting. We do not store raw IP addresses.
• App usage data: session count, scan count, platform type. No content of your scans is stored.
• Website analytics: page views, button clicks, scroll depth via Google Analytics 4. See the Cookies section for details.

What we do NOT collect

• The content of your screen captures; screenshots are processed in real time and never stored
• Your voice recordings; audio is transcribed and immediately discarded
• The coding problems or interview questions you solve
• The AI-generated answers you receive
• Your name, phone number, or any government ID

3. How we use your information

• To deliver the service: sending your download link and processing your license
• To provide AI answers: your resume (if uploaded) is injected into AI prompts to personalize behavioral answers
• To process payments: your payment details go directly to Razorpay; we only receive a confirmation
• To send transactional emails: download link, troubleshooting guide, license confirmation
• To send product updates: occasional emails about new features or improvements. You can unsubscribe at any time.
• To prevent abuse: rate limiting and fraud prevention using hashed IPs
• To improve the product: aggregate, anonymized usage analytics

We do not use your data for advertising, profiling, or selling to third parties.

4. Legal basis for processing

Under GDPR and applicable data protection laws, we process your personal data on the following legal bases:

• Contract performance: processing necessary to deliver the service you requested (email, download, license)
• Legitimate interests: analytics, fraud prevention, and product improvement where our interests don't override your rights
• Consent: for optional product update emails, which you can withdraw at any time
• Legal obligation: where required by applicable law

5. Where your data is stored

Your data is stored on the following infrastructure:

• Supabase (PostgreSQL): email, OS, device identifier, session data. Hosted on AWS in the US East region. Supabase is SOC 2 Type II compliant.
• Vercel: our API backend. Serverless functions in the US region.
• Resend: email delivery. Your email address is shared with Resend solely to deliver emails.
• Razorpay: payment processing. Razorpay is PCI DSS compliant. We never see your card data.

All data is encrypted in transit (TLS 1.2+) and at rest.

6. Who we share data with

We share your data only with the service providers necessary to operate Acemode:

• Supabase: database storage
• Vercel: API hosting
• Resend: transactional email
• Razorpay: payment processing
• Google Analytics: anonymized website analytics (no personally identifiable information)
• OpenAI / Anthropic: AI model providers. Your resume text (if uploaded) and screen content are sent to these providers for processing. They are bound by their own privacy policies and data processing agreements.

We do not sell, rent, or trade your personal data to any third party for marketing purposes, ever.

We may disclose your information if required by law, court order, or to protect the rights and safety of Acemode and its users.

7. Resume data

Uploading your resume is entirely optional. If you do:

• Your resume text is stored encrypted in our database, tied only to your hashed device identifier
• It is used solely to personalize AI-generated answers during your sessions
• It is never returned to the app in any API response; it is only injected server-side into AI prompts
• It is never shared with third parties except the AI model provider processing the prompt
• You can delete it at any time by emailing privacy@acemode.app
• You can overwrite it at any time by uploading a new version in the app

8. Cookies and analytics

Our website uses Google Analytics 4 to understand how visitors use our site. GA4 collects:

• Pages visited and time spent
• Buttons clicked (download, pricing, FAQ)
• Approximate geographic location (country/city level)
• Device type and browser
• Traffic source (how you found us)

We have enabled IP anonymization. GA4 data is aggregated and does not identify you personally.

The Acemode desktop app does not use cookies. It communicates with our backend API using a device-specific signed token.

You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.

9. How long we keep your data

• Email and OS: kept until you unsubscribe or request deletion
• Resume: kept until you delete it or request deletion
• Device identifier: kept for the lifetime of your license
• Payment records: kept for 7 years as required by Indian tax law
• Rate limiting data: deleted after 24 hours automatically
• Analytics data: retained per Google Analytics' retention settings (14 months by default)

10. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Rectification: correct inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: unsubscribe from emails at any time via the link in any email
• Restriction: request that we limit how we process your data

To exercise any of these rights, email us at privacy@acemode.app. We will respond within 30 days. Deletion requests are processed within 7 business days.

11. Children's privacy

Acemode is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. India-specific disclosures

For users in India, the following applies under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:

• We collect and process sensitive personal data (email address, payment information, resume content) only with your consent and for the purposes described in this policy
• We implement reasonable security practices including encryption in transit and at rest
• You have the right to withdraw consent at any time by contacting us
• We do not transfer your data outside India except to the service providers listed in Section 6, each of which maintains adequate security standards
• Payments in India are processed by Razorpay Software Private Limited, a PCI DSS-compliant payment gateway regulated by the Reserve Bank of India

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you have the right to access, correct, and erase your personal data. Contact us at privacy@acemode.app to exercise these rights.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we will notify you by email.

Continued use of Acemode after changes are posted constitutes acceptance of the updated policy.

14. Contact us

For any privacy-related questions, requests, or concerns:

If you are in the EU and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.