Privacy policy

Vayel is a small product with a small data surface. This page says exactly what leaves your machine, who touches it, and how long it lives. It applies to the desktop app and this site.

1. The short version

• Your résumé, job description, transcripts, and saved screenshots stay on your device.
• Audio is streamed for transcription; neither audio nor screenshots are stored by us after the request finishes.
• We store your email, licence, device identifiers, and billing IDs so the app can verify you.
• No advertising trackers, no data brokers, no selling anything.

2. What we collect

Account and licence. Email address, licence key, plan, device identifiers you generate, activation timestamps, and request counts used for rate limits.

Payment. Handled by Stripe. We receive a customer ID, subscription status, country, tax region, and the last four digits of the card. We never see the full card number.

Support. Whatever you send to support@vayel.ai, retained until the thread is resolved plus 12 months.

Site. Cloudflare serves the site and records aggregate request data (IP, user agent) for security and rate limiting. We use no analytics cookies. Stripe sets cookies during checkout.

3. How the app uses data

Screenshots you capture are compressed and sent to our inference proxy, then to Anthropic, to produce an answer. System and microphone audio is streamed to Deepgram for transcription and the resulting text is sent to the model. Text context (résumé, job description, prior turns) is sent only when you trigger an answer. Both providers process data under their API terms and do not train on it by default.

Locally, transcripts and a stripped conversation history are written to your app-data folder so a session survives a restart. You can delete them by removing that folder.

4. Processors

• Stripe — payments, tax, invoices, billing portal.
• Anthropic — language model inference.
• Deepgram — streaming speech-to-text.
• Cloudflare — DNS, CDN, rate limiting, email routing.
• Resend — transactional email (licence delivery, receipts).
• Hosting provider — the API server, in the EU or US.

Each is bound by a data-processing agreement. Where data leaves the EEA or UK, transfers rely on Standard Contractual Clauses or an adequacy decision.

5. Retention

• Licence and account records: while the licence is active, then 12 months.
• Invoices and tax records: 7 years, as required.
• API request metadata (no content): 30 days.
• Backups: rolling 30 days.

6. Your rights

Depending on where you live you can request access, correction, deletion, portability, or restriction, and can object to processing. Email support from the address on the licence. We answer within 30 days. EU/UK users may complain to their local supervisory authority; California users may exercise CCPA rights without penalty. We do not sell or share personal information for cross-context behavioural advertising.

7. Children

The app is not directed at children under 13 and we do not knowingly collect their data.

8. Security

TLS everywhere, hashed licence comparison where practical, least-privilege API keys, and no content at rest on the proxy. No system is perfect; if you find a hole, email support and we'll credit you.

9. Changes and contact

Material changes are announced by email to active licensees at least 14 days ahead. Vayel · support@vayel.ai