YOUR DATA
What stays on your Mac, what goes to OpenAI, ElevenLabs and Simli, and what LensAid’s own service keeps.
Your CV, the jobs you add and the facts you confirm stay in your workspace on your Mac. To create a Job match, drafted answers, a mock interview plan or a report, LensAid sends the job and your CV to OpenAI. Your camera image is never sent anywhere.
Live assist turns the call into text on your Mac. To suggest answers it sends the relevant text of the call to OpenAI, and a screenshot only when you take one.
A mock interview sends your voice to ElevenLabs, which runs the interviewer’s speech recognition, replies and voice; with the realistic video interviewer, Simli animates the interviewer’s face from the interviewer’s voice only — your voice and camera image are never sent to Simli. The interview plan sent to ElevenLabs is generated from your saved opportunity and CV. Your camera image stays on your Mac and is never recorded or uploaded. The transcript and report are saved in your workspace on your Mac; ElevenLabs keeps the conversation record for up to 30 days without storing your voice recording, and LensAid’s service stores the interview’s settings, timing, provider conversation reference, duration and cost — never the transcript or audio.
Optional usage sharing is on by default. Once a day the app sends counts of the features you use, duration and latency ranges, transcription and answer timings, and the app version, macOS version and Mac model class, under a random installation identifier. It never includes audio, transcripts, AI answers, CV text, screenshots, names, redeem codes or hardware identifiers. Usage is kept for up to 400 days. Turn it off, reset the identifier, export or delete this data in Settings → Privacy.
We use your email to verify beta access, deliver your redeem code or invite you to the next beta session when you join the waiting list. Beta signup does not subscribe you to marketing. Delivery payloads are cleared after sending; an encrypted association between the email and redeem code is retained with the order or beta record for authenticated support and payment lookup until that record is deleted.
The app sends a billing-only device pseudonym derived locally from its hardware identifier. The raw identifier stays on your Mac. The service keeps a keyed fingerprint linked to your first free code in each campaign to prevent repeated activation from that campaign, including after reinstall. This is separate from optional usage analytics.
If LensAid crashes, the app shows what it would send and asks before sending; you can choose to send automatically or never. Error and freeze reports are sent automatically and can be turned off. Reports contain where in LensAid's code the problem happened, recent app steps, the app's technical log and your Mac's macOS version and model, never conversation content. Reports are kept for up to 18 months.
Feedback starts a private conversation, opened by a secret kept in your Mac's Keychain; no account is needed. You can choose to add a session transcript with AI answers, that session's technical report, and the app's logs and recent crash details. Only what you select is sent with your message. Session technical reports contain timings and allowlisted events, not conversation content, stay encrypted on your Mac for up to 7 days and are never sent automatically.
Crash reports, usage statistics and feedback are processed by VPO Labs on its own hosting, not by third-party analytics services.
You can optionally share aggregate page categories, section views, clicks, checkout outcomes and whether a page was actively viewed for 15 seconds. Off by default. For tagged marketing campaigns, we also count fixed campaign and creative labels with these interactions. These are aggregate observations, not unique visitors or confirmed installations. No email, credit codes, page URLs, advertising click identifiers or persistent visitor identifier are included. Statistics are sent only after you accept them. Counts are retained for up to 13 months. Your consent choice is stored for 6 months. Turning it off stops future collection and clears unsent events.
Essential storage supports security, the checkout attempt and order-access token in your browser tab, and your privacy preferences. Checkout recovery attempts expire after 30 minutes; access to an issued code lasts 24 hours. Order tokens are stored in session storage for the browser tab. Optional statistics are aggregated in memory before sending. Dodo Payments handles its own storage when you choose to open its hosted payment page.