Privacy policy.

Summary

Ghotly AI is a Windows desktop app and this website, run by Mahesh Shelke with the CloudBuild team in Pune, India. Your resume details, app settings and recent interviews are saved on your own PC and, encrypted, to your Ghotly AI account, so a new PC starts where the old one stopped; only your signed-in account can read them. Your API keys stay on your PC, and when you press Test on one an encrypted copy is saved to your account. We also keep a small account record, your sign-in history, your plan and payments, how much interview time you used, and error reports. The AI and speech providers you connect receive the data you send them. This page explains each case, and how to switch it off or delete it.

On your PC and in your account

The desktop app stores the following on your computer:

• Interview history: questions, answers, company, position, duration and features used.
• Your settings, hotkeys and resume details (the profile), including anything filled in from a resume you upload.
• The API keys you enter for Deepgram and your AI providers.

So that a new PC or a reinstall starts where the old one stopped, the app also saves these to your Ghotly AI account, encrypted (AES-256-GCM) on our server:

• Your resume details (name, contact details, summary, skills, experience, projects, education, certifications and links).
• The app settings that are safe to share between PCs (provider and model choice, language, opacity and similar). Hotkeys, your microphone choice and keys are not included.
• The text of your last 30 interviews: the questions and answers, company, position, duration and features used. Screen captures are never uploaded to us.

Only your signed-in account can read these. Our team can see that something is saved and how large it is, never what it says. You can switch the sync off in the app's settings, and you can download or delete everything we saved under Account > Privacy & data on this website (or with "Delete my saved data" in the app). Deleting removes it from our server; copies on your PCs stay until you clear them in the app, and older database backups are overwritten within 14 days.

A resume file you upload in Interview Setup is read on your device and sent only to the AI provider you chose, using your own key; we do not receive the file. The API keys stay on your PC, apart from the encrypted copy described under "What we collect".

What we collect

When you sign in with Google we receive and store:

• Your name, email address, profile picture and Google account identifier.
• Your account status (active or blocked) and activity timestamps, such as when you first signed in and were last active.

While you are signed in, the desktop app sends a heartbeat about once a minute containing your account token, the app version, the platform (Windows) and 60 seconds of active time. We use it to see how many people use the app and to keep it working.

We also record each sign-in (the time, whether it was from the app or the website, the IP address and the browser or app version) and, per day, how many times you signed in or opened the app and for how long. This helps us keep accounts safe (for example, to look into a sign-in you did not make) and to understand how the service is used. Sign-in rows and daily totals are deleted after about 13 months.

Our team uses an internal control center protected by a password and a second factor. Customer e-mail addresses are hidden from most roles, every look at a customer and every change is written to a tamper-evident log, and the log names the person and the reason.

When you press Test next to an API key (a Deepgram key, or a key for Groq, Gemini, OpenRouter, NVIDIA, OpenAI, Anthropic or Grok), the app also saves that key to your Ghotly AI account, together with the test result (valid or invalid), the model name, the app version and the time. The key is stored encrypted (AES-256-GCM) and only its last four characters are readable without the encryption secret, which is held separately from the database. We keep it for account support and troubleshooting. Testing the same provider again replaces the earlier copy.

To measure interview time (free minutes and plans), the app tells our servers when an interview starts, every 30 seconds while it runs, and when it ends, together with a device identifier and a name for your PC. The identifier is a one-way hash made on your PC, so we do not receive the raw hardware details; we use it to apply the two-PC limit of a plan and to give free minutes once per PC.

If you buy a plan we store the plan, the amount, the dates and the Razorpay order and payment identifiers. Card, UPI and bank details go to Razorpay only; we never receive them.

When something goes wrong in the app or on this website, an error report is sent to us: the error message, technical details such as the app version and the page, and your account identifier if you are signed in. API keys and sign-in tokens are removed from reports before they are stored. We keep error reports for 30 days.

If you send a support request we store its category, subject, message, the steps you describe, your name and email, and the app version if it was sent from the app.

We send you e-mail about your account: a notice when you sign in, a receipt when you buy a plan, replies to your support requests, and reminders as a plan is about to end. We also send a daily job alert (the newest jobs from our jobs page, at most one a day for Pro members and one every few days for free members) and occasional news or offers. Every such mail carries an unsubscribe link; unsubscribing stops them all, and we then keep your address on a do-not-mail list so that nothing is sent again. Receipts for payments and replies to a support request you sent are still delivered. To send the right mail to the right people, the mail tool on our own server holds your name, your e-mail address, whether you have a plan, and how recently you used the app, and it records whether a mail was opened or a link in it was clicked.

The app also fetches sponsor ad content from our servers and shows it before a session. An ad may load content from the advertiser or an ad network, which can see your IP address.

This data is stored on our account service (api.ghotlyai.in), which only our team can access.

Third parties you connect

Ghotly AI passes data to services you choose, using your own keys:

• Deepgram receives the audio the app captures so it can transcribe it.
• Your AI provider (Groq, Gemini, OpenRouter, NVIDIA, OpenAI, Anthropic or Grok) receives transcripts, screenshots, your custom instructions and your candidate profile when they are part of a request.

Those services handle the data under their own terms and privacy policies. Check them before you use a provider in a real conversation, especially if other people's voices or information are captured.

Other services involved: Razorpay, which processes payments for plans; Google, for sign-in; GitHub, which hosts the installers and update files; YouTube, which plays the demo video on the home page through its privacy-enhanced embed. The video starts by itself a moment after the page opens (only when you press play if your device asks for reduced motion or Data Saver), so YouTube receives your IP address and may set its own cookies or similar storage, under its own policy; Amazon Web Services, which hosts the website and, through Amazon SES, delivers part of our e-mail.

On this website

When you log in, your Google sign-in token and profile are kept in your browser's local storage so the site can recognise you. Logging out removes them. We remember the dismissal of the job-portal notice in local storage for 24 hours. We do not use advertising or analytics cookies on this website.

Your choices

On this website, under Account > Privacy & data, you can download a copy of what we hold about you, delete the resume details, settings and interviews saved to your account, delete a saved API key, and sign out of every device. In the app you can switch the sync off or delete your saved data, and uninstalling the app or clearing its history removes the copies on your PC. To ask us to delete your whole account record, or anything else we hold, email support@ghotlyai.in from the address on your Google account.

Blocked accounts may be kept on record so that a block continues to apply.

Responsible use

Ghotly AI is intended for interview preparation and practice. Many companies, exams and platforms prohibit outside assistance. You are responsible for following their rules. See the terms of use.

Changes and contact

If we change how we handle data we will update this page and its date. Questions go to support@ghotlyai.in.