Privacy policy
Draft version: this text will still be reviewed by a professional before launch and may change.
This policy explains what data Espertio and this website process, why, and what your rights are. Today the site collects the email you give for the waitlist (section 6) and, when you sign in, keeps your account email and your balance (section 3). The app is not open to the public yet, and this policy will be updated before launch.
1. Controller
José N., responsible for Espertio. Privacy contact: privacy@espertio.com.
2. What stays on your computer
Your audio and files stay on your computer: transcription runs on your machine and the call audio is never sent anywhere. When you ask for a suggestion, only the text it needs (the question and the relevant parts of your résumé, the job description and your stories) goes to the AI, and Espertio doesn't keep that content on its servers; they hold only your email, subscription and balance.
Your résumé, job descriptions, notes, transcripts, stories and reports are stored on your computer. We do not send them to our servers for storage.
3. What we keep on our servers
Your email, the status of your subscription or licence, your minute balance and the usage log (amount used, without the content of conversations).
You sign in with a code sent by email or with your Google account. With Google sign-in, Google provides us your name and email; we never receive your password.
When you ask the AI we provide for a suggestion, the text it needs (the question and the relevant parts of your résumé, the job description and your stories) passes through our AI server only to be forwarded to the AI provider and to deduct the balance. The server does not keep that content: for each request it logs only measurements (model used, token count, cost, duration, mode and session), never the text.
4. Conversations with other people
When transcribing a call, the app handles other people's speech. You are responsible for informing them and for having consent or another legal basis where the law requires it. The app transcribes the audio as it happens and does not keep the call audio.
5. Who we share it with
We use providers to run the service: AI providers (such as OpenAI and, as a fallback, Google), voice services (such as OpenAI or ElevenLabs), Google account sign-in (Google), account and database (Supabase), email delivery, hosting for the site and the AI server (Cloudflare) and, once we charge, a payment provider.
Some of these providers are outside the European Union or your country; in those cases we use the safeguards provided by law, such as standard contractual clauses.
We do not sell your data or use it for advertising.
6. Waitlist
If you join the waitlist, we keep only your email to tell you when the app opens. You can ask us to remove it at any time.
7. Legal basis
We process data to perform the contract with you (account, subscription, balance), with your consent (waitlist), to comply with legal obligations (invoicing) and for legitimate interest (security and abuse prevention).
8. For how long
We keep account data while the account exists and afterwards for the period the law requires for invoicing records. The usage log and the measurements of AI requests (without content) stay linked to the account for the same period, for balance, invoicing and abuse prevention. Waitlist emails are kept until launch or until you ask for removal. When you delete your account, we remove the account data, except what the law requires us to keep.
9. Your rights
You can ask for access, correction, deletion, portability of your data, or object to certain processing, by writing to privacy@espertio.com. You can also complain to the data protection authority in your country (for example, the ANPD in Brazil or the national authority in the European Union).
10. Cookies and local storage
This site stores your language and theme preferences in your browser and, when you sign in, the session data that keeps you signed in. We do not use tracking or advertising cookies.
To count visits we use Cloudflare Web Analytics, which sets no cookies and does not identify you: the numbers are aggregated (page views, country, device type) and keep no record of who visited.
11. Security and minors
We use reasonable technical and organizational measures to protect data, but no system is completely secure. The service is not intended for people under 18.
12. Changes
We may update this policy and will notify you of relevant changes.