Last updated 18 October 2026

Security and data handling

The short version: your resume, notes and conversations stay on your computer. Call audio and questions pass through our server to be transcribed and answered, and are not stored. Your account holds your email, plan and credit usage, protected by encrypted connections and hashed passwords. This page explains each part in plain language; the privacy policy is the formal version.

  1. 01What stays on your computer

    Your profile, resume, job description, instructions, knowledge base files, conversation history and settings are saved only on your computer, in a separate folder for each account you sign in with. They are not uploaded to us. Deleting that folder removes them.

  2. 02What passes through our server

    While you are listening, the call audio playing on your computer is streamed through our server to our speech-recognition provider to be transcribed. When you ask a question, the question - with the parts of your profile or notes that help answer it, and a screenshot if you attached one - goes through our server to our AI provider.

    Our server passes these on and returns the result. It does not store audio, transcripts, questions, screenshots or answers. For each answer or listening session it records only how much credit was used, so your balance is right.

  3. 03What we store about your account

    Your account record holds only what is needed to run it:

    • Your email address, and your name if you sign in with Google
    • A one-way bcrypt hash of your password if you set one - never the password itself
    • Your plan, credit balance and the amount of credit each answer or listening session used
    • Payment records: the name entered at checkout, the plan, the amount and the payment reference
    • Copies of the account emails we sent you
    • One-way hashes that recognise your computer and browsers, for new-device alerts and the one-Free-account-per-computer rule - never your IP address or location

  4. 04Where it is stored

    Account data is kept in a managed PostgreSQL database hosted in Singapore (AWS ap-southeast-1). The desktop app's own files stay on your computer, wherever you are.

  5. 05How it is protected

    • Every connection between the app, the website and our server uses encrypted HTTPS
    • Passwords are stored only as bcrypt hashes
    • Sign-in and sign-up attempts are rate-limited to stop password guessing
    • You get an email when your account is signed in to from a new device or browser
    • Signing in to the desktop app through the website uses a one-time code that expires after two minutes and only works with that copy of the app
    • Payments are handled by Dodo Payments as Merchant of Record; we never see or store your card, UPI or bank details
    • Access to the database and admin tools is limited to the Cuelyte AI team

  6. 06During your calls

    No bot joins your meeting, and nothing is sent into your microphone - Cuelyte AI only reads the audio your computer is already playing. With Hide mode on, its window is left out of screen sharing and recordings while staying visible on your own screen. It is not hidden from someone looking at your screen.

  7. 07On the website

    The website uses Microsoft Clarity to see how pages are used. The sign-in and sign-up forms and the account, payment and admin pages are hidden from its recordings, so it does not see your password, email address, plan or receipts. The site sets no advertising cookies.

  8. 08Your controls

    • Ask us to export or delete your account at hello@cuelyte.com; deletion removes your email, name, Google account ID, usage records and stored emails (payment records required by tax law are kept)
    • Remove Cuelyte AI's access to your Google account from your Google Account settings, under Security, Third-party apps and services
    • Turn off tips and offers in your account settings, or use the unsubscribe link in any of them
    • Delete the app's folder on your computer to remove everything stored there

  9. 09What is not in place yet

    We would rather say this plainly than leave you to find out:

    • No third-party security certification (such as SOC 2) yet
    • The macOS and Windows installers are not yet code-signed, so your computer may warn about an unknown developer - download only from cuelyte.com
    • Single sign-on (SSO), team admin controls and audit logs are planned for Cuelyte for Teams, not available today

  10. 10Report a security problem

    If you find a security issue, email hello@cuelyte.com with the details. Please give us a reasonable time to fix it before sharing it publicly; we will reply and keep you updated.