Privacy Policy

1. Overview

This Privacy Policy explains how Bouldr ("Bouldr," "we," "us," or "our") handles information when you use bouldr.dev, the Bouldr Windows application, and related services (collectively, the "Service"). Bouldr provides live transcription, AI-assisted interview coaching, session review, account, and billing features.

2. Information we collect

• Account information: your name, email address, password hash, account creation date, plan, subscription status, and authentication data.
• Billing information: Stripe customer and subscription identifiers, purchase status, credit balances, usage totals, and a limited credit transaction ledger. Payment card details are collected and processed by Stripe, not stored by Bouldr.
• Interview content: audio, transcripts, questions, resume or CV text, job descriptions, coaching preferences, and AI suggestions when you choose to use transcription, hosted AI, or session review.
• Technical information: IP address, request metadata, device or operating-system information, app version, error information, and security or rate-limit events that may be recorded by our hosting and infrastructure providers.
• Local app data: settings, resume or CV text, job descriptions, and session data may be stored on your device. Local settings are not a secure document vault and may be stored in plaintext; protect access to your Windows account and device.

3. How information is processed

When hosted speech-to-text is enabled, the desktop app sends audio to Deepgram using a short-lived access token. When hosted AI features are used, relevant questions, transcript excerpts, resume or CV text, job-description text, and preferences are sent through Bouldr's service to the configured AI provider, currently Groq or OpenAI. Session review may send transcript excerpts and suggestions to the same provider. These transfers happen only as needed to provide the feature you request.

Bouldr does not intentionally save interview audio, prompt content, or full transcripts to your Bouldr account. They may remain temporarily in app memory, on your device, in transit, or in limited provider security logs according to the provider's own terms and retention practices. Information you keep in the desktop app remains until you remove it or uninstall or reset the app.

4. How we use information

• Provide, personalize, maintain, and secure the Service.
• Authenticate accounts and connect the website with the desktop app.
• Generate transcripts, coaching suggestions, and session reviews.
• Process subscriptions, purchases, refunds, usage, and credits.
• Prevent abuse, enforce limits, diagnose failures, and improve reliability.
• Communicate about your account, transactions, support requests, and material Service changes.

We do not sell personal information or use your interview content to serve third-party advertising.

5. When we share information

We share information only as needed with service providers that support the Service, including Stripe for payments, Upstash for account and usage storage, Vercel for website and API hosting, Deepgram for speech recognition, and Groq or OpenAI for AI generation. We may also disclose information when required by law, to protect users or the Service, or as part of a merger, acquisition, financing, or sale of assets. Providers process data under their own terms and privacy notices.

6. Retention and security

We retain account, billing, and usage records while your account is active and afterward as reasonably necessary for legal, accounting, fraud-prevention, dispute-resolution, and security purposes. Short-lived sign-in handoff codes expire automatically. We use reasonable technical and organizational safeguards, including hashed passwords and encrypted network transport, but no system is completely secure.

7. Your choices and rights

You can edit or remove locally stored interview materials in the desktop app, manage billing through the account portal, and contact us to request access, correction, export, or deletion of your account information. Depending on where you live, you may have additional privacy rights and the right to appeal a request decision or complain to a data-protection authority. We may need to verify your identity before completing a request, and we may retain information where legally required.

8. International transfers and children

Our providers may process information in countries other than yours, including the United States. Where required, applicable safeguards are used for international transfers. The Service is not directed to children under 16, and we do not knowingly collect their personal information.

9. Changes and contact

We may update this policy as the Service or law changes. We will update the date above and provide additional notice when required. For privacy questions or requests, email hello@bouldr.dev.