Security & privacy

What leaves your machine, and what doesn't.

Plain English. Exact wires. No marketing theatre. If you want the legal version, it's in the privacy policy.


The wire

What actually leaves your device during a session.

Step 01 / Your mic or loopback Audio captured locally via WASAPI loopback on Windows. No mic app. No bot. No recording stored on your disk by us.
Step 02 / Groq STT ~10-second audio chunks sent for transcription. Discarded at the API boundary per Groq's zero-retention API policy. We never receive the audio.
Step 03 / Your screen Questions + answers stored locally on your machine. Optionally synced to our Supabase (off by default). Privacy Mode disables the cloud entirely.
Three commitments

What we won't do.

Never
We will not train on your interview audio, transcripts, or answers. Not anonymized, not aggregated. If we ever want training data we'll build an opt-in program with clear compensation and say so in a release note.
Never
We will not sell, share, or resell your data. No affiliate deals, no data brokers, no recruiter contact lists, no "anonymized panel" research. Our revenue is $29/mo subscriptions and nothing else.
Never
We will not add server-side recording. Audio stays local. If we ever want to add optional cloud transcripts you'll get a release note explaining why, and an off-by-default toggle.
Subprocessors

Third parties that see any of your data.

Every company we send data to, and what they see.

Groq
Speech-to-text transcription. Receives ~10-second audio chunks. Discards them per their zero-retention API policy. Never sees your résumé, job description, or session history.
OpenAI
Quality-mode answer generation. Receives question text + relevant résumé/JD context. Zero-retention via the API tier we use. Does not see your audio.
Anthropic
Coding-round answer generation. Same shape as OpenAI: question text plus context, never audio. Zero-retention API.
Supabase
Cloud database for session sync (optional). Receives: license key, résumé, stories, session history. Off if you enable Privacy Mode. Hosted on AWS us-east.
Twilio
Phone-screen forwarding (only if you opt in). Provisions your personal forwarding number. Receives the call audio briefly while streaming it to Groq. No call recordings.
LemonSqueezy
Payments. Receives your email and card data directly. MeetHawk never sees your card number.

Questions about security?

Email hello@meethawk.com, a human reads every message, usually same day.

Last reviewed 2026-04-17.