Privacy Policy

Privacy Policy

At HintLens, privacy is built into our core architecture—not added as an afterthought. We designed our native copilot specifically for high-stakes environments where discretion and absolute data security are non-negotiable.

Our commitment to you is simple: We do not run background spyware, we never continuously record your screen, and your personal data is never for sale.

1. Information We Collect

To provide, secure, and improve the HintLens copilot experience, we collect specific types of information. Because of our strict privacy-first architecture, we limit data collection to the absolute minimum necessary.

1.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you interact with our platform:

• Account Registration: Your email address and securely hashed password.
• Purchases & Subscriptions: Billing information and payment details (processed securely via third-party payment processors like Razorpay; we never store your full credit card data).
• Customer Support: Your email address, bug reports, and the contents of any messages you send to us.
• Active Service Usage: Code snippets, interview context, or direct queries you explicitly capture and submit to the AI for analysis. Note: This data is ephemeral unless you explicitly enable Cloud Sync.

1.2 Automatically Collected Information

When you use our native Windows application or web dashboard, we automatically collect strictly necessary diagnostic data:

• Device & OS Information: Basic hardware specifications and Windows OS versions to ensure our D3D11 rendering overlay remains stable and compatible.
• Security & Log Data: Your IP address, access timestamps, and error logs to monitor API abuse, prevent unauthorized access, and debug application crashes.
• Cookies (Web Only): Essential session cookies on our web dashboard to keep you logged in securely.

1.3 Information from Third Parties

We may occasionally receive data from trusted third-party partners:

• Authentication Providers: If you choose to log in using Google, we receive basic profile information (like your email address) to create your account.
• Payment Processors: Transaction confirmations, subscription statuses, and fraud-prevention alerts.

1.4 Sensitive Information

We do not intentionally collect sensitive personal data. However, because HintLens operates via manual screen capture, you may inadvertently capture sensitive information (such as passwords, financial data, or proprietary corporate code) present on your screen. You capture and submit visual context at your own discretion and risk. We highly recommend ensuring your screen is clear of confidential data before activating the capture hotkey.

2. How We Use Your Information

We use the information we collect for the following core purposes, always prioritizing your privacy and discretion:

2.1 Service Provision (Visual & Audio Data)

• Visual Data (Screenshots): When you capture a screenshot using our shortcut, that image is temporarily transmitted to our secure servers solely for AI analysis. Once the AI generates a response, the image is flushed from our active pipelines. We do not maintain a permanent visual log of your screen.
• Audio Data (Transcriptions): In Live Interview Mode, we instantly transcribe the interviewer's questions to generate suggested answers. We never store raw audio recordings, and your spoken responses are not continuously recorded or fed back into the AI.
• Account Management: To process your subscription transactions, authenticate your device, and manage your access to the Service.

2.2 Communication

• To send you essential service-related communications (such as billing receipts, password resets, and security alerts).
• To respond directly to your support tickets, troubleshooting requests, and inquiries.

2.3 Security and Compliance

• To detect and prevent API abuse, fraud, and unauthorized access (e.g., implementing rate limits).
• To enforce our Terms of Service and protect the integrity of the HintLens native application.
• To comply with legal obligations and regulatory requirements when strictly necessary.

2.4 Performance and Stability

• To track application stability and debug native rendering (D3D11) or connection crashes.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to fulfill our contract with you (providing the HintLens copilot service).
• Legitimate Interests: Processing necessary for our legitimate business interests (security, fraud prevention, and maintaining application stability).
• Consent: Where you have given explicit consent (e.g., enabling optional Cloud Sync).
• Legal Obligation: Processing required to comply with legal obligations.

4. How We Share Your Information

We do not sell your personal information. We only share your information in the following strictly limited circumstances:

4.1 Service Providers

• AI & Machine Learning APIs: We use enterprise-grade providers (like Groq, OpenAI, Anthropic) to process your visual/audio inputs. They are bound by zero-data-retention agreements and cannot train on your data.
• Cloud Hosting: For securing web dashboard accounts and optional Cloud Sync.
• Payment Processors: Such as Razorpay to securely handle transactions.

4.2 Business Transfers & Legal Requirements

If HintLens is involved in a merger or acquisition, your information may be transferred with prior notice. We may also disclose data to comply with legal obligations, enforce our Terms of Service, or protect the safety and rights of our users.

5. Cookies and Tracking Technologies

On our web dashboard, we use cookies primarily for authentication and session management (Essential Cookies). We may use minimal performance cookies to track website errors. We do not use invasive marketing pixels or cross-site tracking technologies within the HintLens native application.

6. Data Retention & Storage Choices

We believe you should own your history. By default, HintLens offers you a choice regarding your session history (prompts, AI responses, and code snippets):

• Local-Only Mode: Your session data is saved directly to your local hard drive. It never touches our databases.
• Cloud Sync (Optional): If enabled for cross-device access, your text data is encrypted at rest in our secure database. You can delete this data permanently with a single click in your dashboard.

Account and transaction records are retained for legal and accounting purposes (typically up to 7 years) after account closure. After retention periods expire, data is securely deleted.

7. Data Security & The Desktop Application

The HintLens native Windows app is designed for complete stealth and security.

• No Rootkits: It does not install rootkits, deep system hooks, or monitor keystrokes outside our dedicated interface.
• Stealth Rendering: It renders using native D3D11 overlays to ensure it bypasses screen sharing captures securely.
• Encryption: Data in transit is secured via TLS/SSL, and optional cloud data is encrypted at rest (AES-256).

While we implement industry-standard measures, no transmission method is 100% secure. You provide information at your own risk.

8. Your Privacy Rights

Depending on your location (including GDPR for the EEA/UK and CCPA for California), you have the right to:

• Access, Correct, or Delete: Request a copy of your data or permanently delete it. You can instantly wipe your data via the "Delete Account & Data" option in your settings.
• Opt-Out: Opt out of optional marketing communications.
• Non-Discrimination: Receive equal service regardless of exercising your privacy rights.

9. International Data Transfers

Your information may be processed in the United States and other jurisdictions. We implement appropriate safeguards (such as Standard Contractual Clauses) when transferring personal data internationally.

10. Children's Privacy

HintLens is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover a user is under 18, we will promptly delete their account and data.

11. Third-Party Services

Our Service may contain links to third-party websites or services. This Privacy Policy does not apply to third-party platforms, and we encourage you to review their specific privacy policies.

12. AI and Machine Learning

We utilize enterprise-grade AI APIs (such as Groq, Llama 3, and Gemini) to generate answers and transcribe audio. Your personal data, code snippets, and interview questions are NEVER used to train these base AI models. Our API partners are contractually bound to zero-data-retention policies for training purposes. We implement strict data isolation to ensure your inputs remain completely private.

13. Data Breach Notification

In the rare event of a data breach compromising your personal information, we will notify you and relevant authorities as required by applicable law, outlining the affected data and our mitigation steps.

14. Changes to This Privacy Policy

We may update this policy periodically to reflect technological or legal changes. Material changes will be communicated via the Service or email. Continued use of HintLens constitutes acceptance of the updated policy.

15. Do Not Track Signals

Currently, there is no industry consensus on "Do Not Track" (DNT) browser signals. Our web platform does not currently alter its behavior in response to DNT signals.

16. Contact Us

If you have any questions, privacy inquiries, or data deletion requests, please contact the HintLens Privacy Team at support@hintlens.com. We aim to respond to all inquiries within 30 days.

By using our services, you acknowledge you have read and understood this Privacy Policy.