Privacy Policy

Effective November 2, 2026 · Mostly Right Inc.

Operator and contact

Mostly Right Inc., 1111B South Governors Avenue, Suite 56114, Dover, DE 19904, United States, is responsible for this service's processing. For privacy requests, write to team@mostlyright.md. This notice covers aceyourcall at practice.mostlyright.md, separately from other Mostly Right products.

What we process

We process the application and notes you submit, optional interviewer details, participant display names, live audio for AI interaction, transcripts, scorecards, room identifiers, consent choices and usage/cost records. For public access, Cloudflare Turnstile checks for automated abuse. We use a signed browser cookie and hashed network identifiers for short-lived usage limits. Our hosting infrastructure may process network and security logs to deliver and protect the service.

Camera and microphone streams are relayed to room participants. Interview audio, application context, participant names and optional interviewer name/notes are sent to OpenAI to run the AI rehearsal and assessment. We do not record or store raw audio/video files in this service. OpenAI may retain data under its own API processing terms; our setting to disable stored API responses does not promise zero provider retention. When you enter an interviewer, their name and LinkedIn URL are sent to OpenAI web search to research public professional information. Applications and private preparation notes are not sent to web search. We cache the public profile summary and source links on our server, reuse fresh research for seven days, and delete unused research after thirty days.

Why we use it

We process your inputs to provide the rehearsal and feedback under our service agreement. We use proportionate security and cost controls for our legitimate interests in operating and protecting the service. We do not use your application or conversation for sales, marketing or human quality-review programmes in this version. We do not sell your content or publish it.

Who receives it

People with a valid room invite can access the call, transcript and scorecard. The room host can view and edit the submitted application. Authorized operators may access data where necessary to operate, secure or support the service, under the purposes described here.

Google Cloud hosts the service in the United States. OpenAI processes AI inputs and outputs. We use these providers under their applicable processing terms. Data may therefore be transferred outside your country, including outside the EEA or UK; applicable provider data-processing agreements and transfer safeguards govern those transfers. We may disclose data where legally required. We do not send your content to an external CRM.

Storage and retention

If you enable “Remember on this device”, your draft is stored in this browser. It is not an account or encrypted vault; others using the same browser may access it. Clear it using “Clear saved draft” or your browser settings. Clearing a browser draft does not delete an existing room or its transcript.

Raw applications and submitted notes are processed in temporary server memory, not saved to our database or files. To avoid repeating research, we save a derived business brief, question bank and public interviewer research for up to seven days. The brief may include facts from your application. Returning to the same room reuses this preparation; it is not used for sales or model training by us. This is server-assisted processing, not a direct browser-only connection to OpenAI.

Room invites expire after seven days. Transcripts, scorecards and consent records are retained for up to 30 days, with hourly cleanup. Transcripts and scorecards may contain information or brief quotations from your application discussed during practice; they are separate from the uploaded application itself. Minimal usage and cost records remain for accounting and abuse prevention.

This memory-only policy applies to our application handling. OpenAI and hosting providers have their own processing and retention terms. We do not promise zero provider retention or immediate physical removal from historical provider backup or recovery systems.

Withdraw, access or delete

Optional improvement and sales uses are disabled. If you previously gave an optional permission, contact us. Withdrawing does not affect the legality of earlier processing or prevent you from practicing.

You can request access, correction, deletion, portability or restriction, and object where applicable. Include your room ID if available; do not send API keys or passwords. We may need to verify your connection to the room before disclosing data. You can complain to your local data-protection authority. We review requests under the law applicable to you.

Usage analytics

We use PostHog to count visits, room joins, interviews and scorecard outcomes. We do not send application text, transcripts, names, room links or credentials to analytics. Browser analytics use a random identifier for the current page, without analytics cookies, persistent identifiers, session replay or automatic form capture. We honor Do Not Track and Global Privacy Control for browser events. Service outcome counts are measured separately.

Changes

We display the notice version when choices are recorded. New optional purposes require a new choice; a policy edit does not retroactively opt you in.

Terms · Privacy · Contact us