Privacy Policy

1. Who We Are

NostrobeAI ("we", "us", "our") is a registered business operating from India. This policy explains how we handle your information when you use our desktop app or website at nostrobeai.com. For tax or invoice queries, email support@nostrobeai.com.

2. What We Collect

• Your email and a hashed password
• Interview transcripts and Q&A history from your sessions
• Optional résumé content you choose to upload
• Payment metadata (order ID, plan, amount) — never card or UPI details
• Standard usage analytics and device info for debugging

Raw audio is never stored on our servers. We never sell your data, and we never use your interview transcripts to train AI models.

3. How We Use It

To run the service, generate AI answers, process payments and GST-compliant invoices, debug issues, and improve product quality.

4. Service Providers

We share limited data with trusted service providers who help us deliver the product — including AI providers, a speech-to-text provider, a payment processor (Razorpay), and analytics / error-monitoring services. Each is bound by their own privacy terms and our agreements with them.

5. Email Communications

By creating an account on nostrobeai.com, you consent to receive transactional emails necessary for us to deliver the service. These are not marketing emails and include:

• Account verification and sign-in security alerts
• Password reset and account recovery
• Payment receipts and GST-compliant invoices
• Service status updates and account-related notifications
• AI-generated session summaries when you explicitly request one
• Material policy changes (per Section 10 below)

These messages are triggered by your direct actions in the product and are required to operate your account. They are exempt from the unsubscribe requirements of the CAN-SPAM Act because they are transactional, but each email still includes preference and contact links as a courtesy.

Optional marketing emails. If — and only if — you tick the optional, unchecked consent box on our signup form or prep-kit form, we may also send occasional interview tips, product updates, and offers. We record when and where you gave that consent. You can withdraw it at any time using the one-click unsubscribe link in any such email, or by emailing us; withdrawing does not affect the transactional emails above. We do not purchase, rent, scrape, or import third-party email lists.

Onboarding check-ins. In the weeks after you create an account we may send a small number of one-time, account-related check-in emails from the founder (for example, if setup looks stuck). Each includes a one-click unsubscribe that stops them permanently.

6. Cookies

Our website uses cookies for sign-in, analytics, and ad-campaign measurement. The desktop app does not use cookies. You can disable cookies in your browser, but this may break sign-in on the website.

7. Data Retention

• Account and session data: until you delete your account
• Payment and GST invoice records: 7 years, as required by Indian tax law
• Error logs: deleted after 90 days

8. Your Rights

You can access, correct, export, or delete your data at any time by emailing support@nostrobeai.com . We honor the GDPR (EU/UK), CCPA (California), and the Indian Digital Personal Data Protection Act, 2023 (DPDP Act) and its Rules. We respond within 7 business days.

Where you have given consent (for example, the optional marketing-email checkbox), you may withdraw it at any time, as easily as you gave it — via the unsubscribe link in any marketing email or by emailing us. Withdrawal does not affect processing that is necessary to provide the service or that occurred before withdrawal.

Grievance redressal (India). For any privacy grievance, contact our grievance officer at support@nostrobeai.com (attn: Grievance Officer — Amit Kumar). We acknowledge within 72 hours and aim to resolve within 7 business days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

9. Security

Data is encrypted in transit and at rest. Passwords are hashed. Access to production systems is restricted on a need-to-know basis.

10. Children

NostrobeAI is intended for users aged 18 and above. We do not knowingly collect data from children under 18.

11. Changes

We may update this policy from time to time. For material changes, we will notify you by email at least 14 days before they take effect.

12. Contact

Questions about privacy? support@nostrobeai.com