Privacy Policy
Elovix listens to your live conversations. That means being unusually specific about what leaves your machine, where it goes, and what is kept afterwards — so this policy describes the actual behaviour of the software rather than reserving the broadest possible rights.
1. Who we are
Elovix Technologies Pvt Ltd (“Elovix”, “we”) operates the Elovix dashboard, the macOS overlay application, and the services behind them. We are the data controller for the information described here.
4th Floor, Alpha Tower 72 MG Road Bengaluru, Karnataka 560001 India
Email support@elovix.tech, telephone +91 80 4718 2200. Full business details are on our Contact page.
2. What we collect
Account information
When you sign in with Google we receive your name, email address, and Google account identifier. We do not receive your Google password, and we do not request access to your Gmail, Drive, Calendar, or contacts.
Context documents
If you upload a résumé, job description, or notes, we extract the text and store that text so it can be included in the prompt for every answer. This is the only substantial content we retain. You can view, disable, or delete any document at any time from the dashboard; deleting it removes it from our database.
Interview audio and transcripts
During a live session, system audio is streamed to our speech-to-text provider and the resulting transcript is held in memory only, for the duration of that session. Audio is never written to disk by us. Transcripts are never written to a database. When the session ends — you close the overlay, or the connection drops — the transcript is gone.
Screen captures
When you press the screen-reading key, a single downscaled image of the display under your cursor is sent to the AI model that answers. It is held in memory for that answer and up to three typed follow-ups, then discarded. We do not store screenshots. The overlay itself is excluded from these captures at the operating-system level, so its contents are not in the image.
Usage and billing records
For each answer we record the model used, token counts, what it cost, what you were charged, and a session identifier. We do not record the question or the answer. These records are what your balance and statement are built from, and we keep them as accounting records.
Payment information
Card details are entered on our payment provider’s own hosted checkout and are never transmitted to or stored on our servers. We receive and store a customer reference, the amount, the currency, and whether the payment succeeded.
Device pairing
Pairing your Mac stores a device record with a name, timestamps, and a SHA-256 hash of the pairing token. The token itself is shown to the desktop app once and never stored by us, so a copy of our database does not let anyone impersonate your device.
3. What we do not collect
- Your microphone. Elovix listens to system audio, not to you.
- Camera or video of any kind.
- Keystrokes, browsing history, or the contents of other applications.
- The questions put to you, or the answers generated for you.
- Card numbers, CVVs, or bank credentials.
4. Why we process it, and on what basis
| Data | Purpose | Lawful basis |
|---|---|---|
| Account information | Authenticate you; contact you about your account | Performance of a contract |
| Context documents | Ground answers in your real background | Performance of a contract |
| Audio and transcript | Turn speech into the question being answered | Performance of a contract |
| Usage and billing records | Meter usage, bill accurately, meet tax obligations | Contract; legal obligation |
| Security and error logs | Keep the service working and abuse-free | Legitimate interests |
5. Who we share it with
We do not sell personal data and we do not share it for advertising. We use these processors, each for one narrow purpose:
| Processor | What they receive |
|---|---|
| Google (sign-in) | Authentication only — we receive your profile, they receive nothing from us |
| Speech-to-text provider | The session audio stream, in real time |
| AI model providers (Anthropic, OpenAI, Google, Moonshot) | The prompt for each answer: your context documents, the recent transcript, and any screenshot you sent |
| Payment provider | Your email and the amount, so it can take the payment |
| Hosting and database provider | Everything we store, as infrastructure |
Model providers process a prompt to produce a response. Requests are sent under our commercial accounts, which are configured not to permit training on submitted data; their own retention windows for abuse monitoring apply and are set by them, not by us.
Many users share the same provider accounts. Each session is isolated in its own process state — your context, transcript, and answers are never mixed with another user’s, and no conversation is held on the provider’s side between requests.
6. How long we keep it
| Data | Retention |
|---|---|
| Interview audio | Not stored |
| Transcripts | In memory for the session; not stored |
| Screen captures | In memory for a few answers; not stored |
| Context documents | Until you delete them, or until your account is deleted |
| Account and device records | Until your account is deleted |
| Billing and usage records | Retained after account deletion where tax and accounting law requires it |
7. Your rights
Depending on where you live, you may have the right to access, correct, export, delete, or restrict processing of your personal data, and to object to processing based on legitimate interests. Most of this is immediate and self-service in the dashboard: context documents can be deleted, devices revoked, and your account closed.
For anything else, write to support@elovix.tech and we will respond within 30 days. If you believe we have handled your data improperly you may complain to your local data protection authority.
8. Security
All traffic is encrypted in transit. Pairing tokens are stored only as SHA-256 hashes. Service-to-service calls require a shared secret and the billing service is not reachable from the public internet except for the payment provider’s signed webhook. We hold no card data at all, which is the most effective control available to us.
No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant authority as required by law.
9. Children
Elovix is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact support@elovix.tech and we will delete it.
10. International transfers
Our providers operate globally, so your data may be processed outside your country. Where required, transfers rely on standard contractual clauses or an equivalent safeguard.
11. Changes
We will update this page when our practices change and revise the date below. Material changes will be notified by email or in the dashboard before they take effect.
Last updated 30 July 2026.