Privacy Policy

Last updated: 4 November 2026

This Privacy Policy explains how Glint ("we", "us" or "our") collects, uses, shares, stores and protects personal data when you use the Glint website, the Glint Windows app and the services behind them (together, the "Service"). It also explains your rights and how to contact us.

We process personal data in accordance with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Digital Personal Data Protection Rules, 2025. For the purposes of the DPDP Act, we are the Data Fiduciary for the personal data described in this policy. By signing in to or using the Service, you agree to this policy. If you do not agree, please do not use the Service.

1. Information we collect

Account information from Google sign-in. When you sign in with Google, Google shares your name, email address, profile picture and a unique Google account identifier with us. We request only the basic openid, email and profile permissions. We never receive your Google password, and we cannot access your Gmail, Drive, contacts or any other Google data.

Mobile number. Our payment processor requires a mobile number to create a payment. We save it to your account so you don't have to enter it again. You can change it in your account settings.

Purchase and payment information. Order ID, plan, amount, any coupon applied, payment status, the payment reference from Cashfree, and timestamps. Card numbers, UPI IDs, bank account details and other payment credentials are entered on Cashfree's secure checkout and are never sent to or stored by us.

Usage and balance information. Your remaining hours and their validity, hours added (purchases, the free trial and any adjustments), when live sessions start and end, seconds used, number of answers, the AI model used and the amount of text processed (token counts). We need this to meter your balance accurately and to bill you correctly.

Sign-in sessions and devices. For each browser or device you sign in on: a session token stored only in hashed (one-way encrypted) form, whether it is the website or the app, a short browser or device description (user agent), and when the session was created and last used. When you connect the Windows app to your account, a temporary pairing code links the two and expires within 10 minutes.

Technical information. IP address, request details (time, address requested, response status) and error logs, recorded by our servers and network providers for security, fraud prevention and troubleshooting.

Support communications. If you email us, we keep the correspondence so we can resolve your request.

Free-trial record. To make sure the free trial is granted only once per email address, we keep a one-way hash of your email address. It cannot be turned back into your email address.

2. Audio, screen and conversation content

To work, Glint handles content from your computer: microphone audio, system audio (which can include the voices of other people on your call or meeting), live transcripts, screenshots of your screen when you ask Glint to read it, questions you type, the session details you enter (for example a company, role or notes), and text from documents you attach (for example your resume). This is how that content is handled:

• It is captured only while a live session is running, or when you ask for an answer.
• It is sent over an encrypted connection to our server, which passes it to our AI provider, OpenAI, to produce the transcription and the answer, and sends the result back to your app.
• It is processed in memory only. We do not save audio, transcripts, screenshots, questions, answers, session details or document text in our database or logs.
• Documents you attach are read on your PC. Only their text is kept, in the app's settings on your PC, and it is sent with your questions so answers can use it. You can remove a document in the app at any time.
• Transcripts are kept in the app on your PC for the current session only.
• OpenAI processes this content as our service provider under its API data policies: data sent through its API is not used to train OpenAI's models, and may be retained by OpenAI for up to 30 days solely to monitor for abuse before it is deleted.

Other people's voices. Because system audio can include other participants, you are responsible for telling them and obtaining their consent wherever the law or the rules of the meeting or platform require it. See section 3 of our Terms of Service.

3. How we use your information

• To provide the Service: create and secure your account, sign you in on the website and the app, and produce transcriptions and answers.
• To meter and bill: track your balance and usage, process payments, apply coupons and show your history.
• To support you: answer questions, and handle refund requests and grievances.
• To keep the Service safe: detect and prevent fraud, abuse, payment disputes and breaches of our Terms, including by suspending accounts.
• To operate and improve the Service: monitor reliability, speed and costs using aggregated usage data.
• To meet legal obligations: tax, accounting and other legal duties, and lawful requests.

We do not sell or rent your personal data, use it for advertising, build advertising profiles, or use your audio, screen or conversation content to train AI models.

4. Consent and legal basis

We process your personal data on the basis of the consent you give when you sign in to and use the Service, for the purposes described in this policy. Some processing is necessary for uses the DPDP Act permits without consent, such as complying with the law (for example, keeping payment records for tax purposes). You can withdraw your consent at any time, as described in section 11. Withdrawal does not affect processing that happened before it. Because the Service cannot work without some personal data, withdrawing consent may mean closing your account.

5. Google user data

• What we access: only your basic Google profile (name, email address, profile picture and Google account ID), through Google Sign-In.
• How we use it: only to create and identify your Glint account, sign you in, show your name and picture in the website and app, and contact you about your account or purchases.
• Sharing: we do not share it, except where needed to provide the Service (for example, your name and email go to Cashfree when you make a payment) or where the law requires it. We never sell it, use it for advertising, or use it to train AI models.
• Storage and deletion: it is stored in our database in India and erased when you delete your account.

Glint's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Glint's access at any time from your Google Account permissions.

6. Who we share data with

We share personal data only with service providers that process it on our behalf to run the Service, under terms that require them to protect it, and only as much as each one needs:

We may also disclose personal data:

• when required by law, a court order or a lawful request from a government authority;
• to protect the rights, property or safety of our users, the public or us, including to prevent fraud;
• as part of a merger, acquisition or sale of our business, in which case we will notify you and the new owner will be bound by this policy; or
• with your consent.

7. Where your data is stored

The account, usage and payment records we keep are stored on servers in India (Oracle Cloud, Hyderabad region). Some of our service providers, including OpenAI, Google, Vercel and Cloudflare, may process data outside India, including in the United States. The DPDP Act permits such transfers except to countries the Government of India has restricted, and we rely on our providers' contractual and security safeguards to protect your data.

8. Cookies and local storage

• We do not use advertising or analytics cookies, and we do not use third-party trackers.
• Website: your sign-in token is saved in your browser's local storage so you stay signed in. Signing out removes it.
• Google Sign-In and Cashfree checkout may set their own strictly necessary cookies when you use them, under their own privacy policies.
• Windows app: your sign-in token is stored on your PC, encrypted with Windows Data Protection (DPAPI) so only your Windows account can read it. Your settings, session details and attached document text are stored locally by the app. Signing out or uninstalling removes them.

9. How long we keep data

10. Security

We use reasonable security practices to protect personal data, including:

• encryption in transit (TLS/HTTPS) for all connections to the website, the app and our servers;
• storing session tokens only as one-way hashes, and encrypting the app's sign-in token on your PC with Windows Data Protection;
• leaving all payment credentials to Cashfree, a PCI DSS compliant payment processor;
• password-protected database access, restricted administrative access, and a log of administrative actions.

No system is completely secure. If a personal data breach occurs, we will inform the Data Protection Board of India and affected users as the law requires.

11. Your rights and choices

Under the DPDP Act, you have the right to:

• Access: get a summary of the personal data we process about you, the processing we do, and who we have shared it with;
• Correction: correct, complete or update your personal data;
• Erasure: have your personal data erased, unless we must keep it by law;
• Withdraw consent: as easily as you gave it;
• Grievance redressal: have your complaints about our handling of your data addressed; and
• Nominate: nominate another person to exercise these rights for you in the event of your death or incapacity.

How to exercise them.

• Yourself, at any time: on the website, open your dashboard to edit your name and mobile number, see and sign out your devices, or delete your account.
• By email: write to hafeez@strophic.in from the email address on your account. We may ask you to confirm your identity, and we respond within 30 days.

Deleting your account signs you out everywhere and erases your name, email address, picture and mobile number. Any remaining hours are forfeited. Payment records are kept as described in section 9. If you are not satisfied with our response to a grievance, you may complain to the Data Protection Board of India.

12. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If we learn that we have, we will delete it. If you believe a child has given us personal data, please contact us.

13. Third-party services

Google Sign-In, Cashfree checkout and other third-party services you use through Glint are governed by their own privacy policies, including those of Google, Cashfree Payments and OpenAI.

14. Changes to this policy

We may update this policy as the Service changes. We will change the "Last updated" date above and, for material changes, notify you by email or in the app before they take effect.

15. Contact and grievance officer

For questions, requests or complaints about your personal data, contact our Grievance Officer:

We acknowledge grievances within 2 business days and aim to resolve them within 30 days.