This Privacy Policy explains how inneedai (“inneedai”, “we”, “us”) collects, uses, and protects your information when you use our website, desktop application, and related services (the “Service”). inneedai is the data controller for the personal data described in this policy. By using the Service you agree to the practices described here.
1. Information we collect
We collect the following categories of information:
- Account information — your name, email address, and authentication details when you sign up or sign in, whether with Google or with a one-time code sent to your email. When you sign up, we also ask how you heard about us.
- Documents you upload — résumés, CVs, theses, papers, notes, agendas, and any other files you provide so we can ground the Service’s responses in your own material. We also derive information from them, such as a summary of your career history from a résumé, and key terms that help transcription recognise names and technical words.
- Audio and transcripts — during a live session, the desktop application captures the audio playing on your computer (the other side of the call), never your microphone, to generate a real-time transcript that the Service uses to produce answers. We process audio only to create the transcript and do not retain audio recordings. Transcripts, and the answers generated alongside them, are stored against your account so you can review past sessions, and you can delete them at any time.
- Screen captures — on plans that include screen capture, pressing the capture key takes an image of your screen, with the app’s own window left out, and sends it to the AI model so it can answer about what is shown. Screen captures are not stored.
- Messages and feedback — what you send us through support chat, the contact form, or email, and any rating or feedback you give after a session.
- Usage and device data — log data, app and feature usage, and how you interact with our website (pages viewed, clicks, scrolling); your device’s operating system, memory, app version, and a hashed hardware identifier; and details derived from your IP address: approximate location, internet provider, and whether the connection comes through a VPN or a data centre. We use these to operate, secure, and improve the Service, and to prevent fraud and abuse, including of the Free tier.
- Billing information — payments are handled by our payment processor, Paddle (see below). We receive order details such as the amount, date, and your email address, but we never receive or store your full card number or other payment credentials.
2. How we use your information
- To provide, maintain, and operate the Service.
- To transcribe live sessions and generate answers grounded in the material you provide.
- To manage your account, credit purchases, and support requests.
- To secure the Service and prevent fraud or abuse.
- To improve the Service. We do not sell your personal information, and we do not use your documents, transcripts, or screen captures to train AI models.
3. Legal bases
Where data-protection laws such as the GDPR apply, we process your information to perform our contract with you (providing the Service you signed up for); for our legitimate interests in securing the Service, preventing abuse, improving it, and understanding how our website is used; to meet legal obligations, such as keeping tax and accounting records; and with your consent where the law requires it, which you can withdraw at any time.
4. Service providers and sub-processors
We rely on trusted third parties to deliver the Service. Each processes data only as needed for its function and under its own terms and privacy policy:
- Supabase — authentication, database, and file storage.
- Amazon Web Services — hosting for our servers.
- Vercel — hosting for our website.
- Cloudflare — network security for our servers, and Turnstile, which checks that a sign-up comes from a person rather than a bot.
- OpenAI — on every plan: reading résumés and documents, indexing documents for search, and tuning transcription to your material; and generating answers when an OpenAI model is chosen or is the plan’s default.
- Anthropic, Google, DeepSeek and Groq — large language model processing used to generate answers, including answers about a screen capture. Which provider handles a given session depends on the model chosen for it, or on its plan’s default when none is chosen.
- AssemblyAI — speech-to-text transcription of session audio, along with key terms from your documents that help it recognise names and technical words.
- IBM (Docling for IBM watsonx) and Unstructured — reading the text, layout, tables, and figures of documents you upload. Which one reads a document depends on the option chosen when it is uploaded.
- Resend — sending our emails, and receiving email sent to our support address.
- ip-api.com — looking up the approximate location and network of an IP address, to prevent fraud and abuse.
- Paddle — our online reseller and Merchant of Record. Paddle processes your payment and billing data as an independent controller when you make a purchase, under the Paddle Privacy Policy.
- Google Analytics — website analytics: which pages are visited and how visitors find us. For visitors from the EEA, the UK, and Switzerland it runs without cookies.
- Microsoft Clarity — we partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay, to improve and market our products and services. Website usage data is captured using first- and third-party cookies and other tracking technologies to determine the popularity of products and services and online activity, and is also used for site optimization, fraud and security purposes, and advertising. What you type into forms is never captured, and in your signed-in dashboard all text is masked, so your transcripts, documents and session details are never sent to Microsoft. Clarity sets no cookies for visitors from the EEA, the UK or Switzerland. For how Microsoft collects and uses your data, see the Microsoft Privacy Statement.
Our servers and database are in Japan. Our website is served from the United States, and most of the providers above process data in the United States; DeepSeek processes data in China. Where required, we put appropriate safeguards in place for transfers outside your country of residence.
5. Data retention
We retain your information for as long as your account is active or as needed to provide the Service. We do not retain raw session audio or screen captures — they are processed in real time and then discarded. You may delete uploaded documents and session transcripts from within the Service, and you can request deletion of your account at any time. We may retain limited information where required to comply with legal obligations, resolve disputes, or enforce our agreements.
6. Security
We use technical and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at support@updates.inneedai.com. You may also have the right to lodge a complaint with your local data protection authority.
8. Cookies
Our website uses cookies and similar technologies for authentication, preferences, and analytics — Google Analytics and Microsoft Clarity (see section 4). Neither sets analytics cookies for visitors from the EEA, the UK, or Switzerland. You can control cookies through your browser settings; disabling some cookies may affect functionality.
9. Children’s privacy
The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last updated” date and, where appropriate, notify you of material changes.
Contact us
If you have any questions about this policy or need support, contact inneedai at support@updates.inneedai.com. We aim to respond to all inquiries within two business days.
For billing questions about an order processed by Paddle, you can also reach Paddle’s buyer support directly at paddle.net.