Overview

Noter ("Noter," "we," "us," or "our") operates the Noter macOS application and the noter.so website. We use information to authenticate users, detect and record meetings when directed, transcribe and summarize conversations, prepare meeting briefs, identify possible commitments, provide an AI assistant, connect to tools chosen by the user, maintain the service, and provide support.

Noter does not sell personal information. We do not use attendee information for advertising or send it to third-party data brokers.

Information we collect and process

Account information

When you sign in, we process account details such as your name, email address, and profile image. We also maintain account settings, usage allowances, connected-app choices, and support communications.

Calendar, contacts, and relationship context

If you connect Google Calendar or Contacts, Noter may process meeting titles, times, locations, conference links, attendee names and email addresses, contact profiles, job titles, companies, and other details available through the scopes you approve. This information supports meeting awareness, speaker mapping, pre-meeting context, and the people and company views.

Meeting and work content

We process meeting audio, transcripts, typed notes, AI-generated notes, commitments, tasks, briefs, people and company records, agent conversations, saved facts, files you choose, and outputs generated or edited at your request.

Diagnostics and analytics

Noter uses Sentry for error monitoring and PostHog for product analytics, including session-replay capabilities. We use these services to understand usage, diagnose failures, enforce quotas, and improve reliability. We seek to keep unnecessary meeting content out of diagnostics, but diagnostic events may include identifiers and technical context needed to investigate a problem.

Meeting recording, transcription, and consent

Noter records only after a user starts recording. Automatic meeting detection can offer a one-click start but does not itself authorize recording. Direct capture processes microphone and system audio on the Mac; an optional Recall.ai mode uses a separate transcription path.

Meeting audio is transmitted to the selected transcription provider so it can produce a transcript. Transcripts, notes, and related records are stored in a local SQLite database on the Mac, with a server mirror used for sync and server-side processing. Therefore, "your data never leaves your device" would not be an accurate description of Noter.

You are responsible for ensuring that you have the right to record and for providing notice or obtaining consent when required by law, workplace policy, confidentiality obligations, or platform rules. The absence of a visible meeting bot does not remove those responsibilities.

Assistant context and files

When you explicitly summon the assistant, Noter can collect the frontmost app, window title, browser tab URL and title, and selected text. Depending on your Context capture setting, it may also use a screenshot for a deeper read. The context appears as a removable chip and capture can be turned off.

Noter does not continuously read every app or take ambient screenshots. Screenshots used for a deep read are summarized and destroyed rather than stored as part of your meeting or account history.

If you ask Noter to work with a file or folder, it processes the selected material to provide the requested review, generation, or edit. Supported edits are made on a copy rather than silently replacing the original.

Google API data

Noter’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Scopes and purpose

Google Calendar is read-only and supports meeting awareness, attendee context, and briefs.
Google Contacts is read-only and supports attendee and speaker identification.
Google Drive uses the drive.file picker scope. Noter can access files that you explicitly select for use with the app, rather than browsing your entire Drive.
Optional Gmail enrichment reads the thread associated with a meeting at brief time, for meeting participants, when the user has connected Gmail and opted in.

Attendee email addresses obtained through Google access are not sent to the web-search tool used for public company and person research. Noter does not sell Google user data, use it for targeted advertising, or send it to data brokers.

Service providers and subprocessors

Noter shares information with service providers only as needed to operate requested features, secure the service, communicate with users, or comply with law. The content sent depends on the feature used.

Anthropic: Agent reasoning, extraction, and meeting briefs through a direct provider relationship and Noter’s backend.
OpenAI: AI note generation through a direct provider relationship and Noter’s backend.
Deepgram: Default streaming transcription for direct capture.
AssemblyAI: Optional streaming transcription when selected as the provider.
Recall.ai: Optional transcription mode and fallback audio path.
Supabase: Authentication, backend functions, server data, storage, and sync infrastructure.
Composio: Connected-app authentication and tool access selected by the user.
Google APIs: Sign-in and connected Calendar, Contacts, Drive, and optional Gmail features.
Sentry: Error monitoring and diagnostics.
PostHog: Product analytics and session replay.

Provider terms, locations, and retention practices may change. This list should be reviewed when Noter adds or removes a provider.

How we use information

Authenticate users and maintain accounts and settings.
Detect meetings and provide recording controls.
Transcribe, summarize, search, and organize meetings and notes.
Prepare briefs, identify speakers, and build person and company context.
Extract commitment candidates and maintain confirmed tasks.
Answer assistant requests and prepare connected-app or file actions.
Enforce quotas, prevent abuse, monitor errors, and improve reliability.
Provide support and account-related communications.
Comply with legal obligations and protect users and the service.

Noter does not use personal information to train a generalized AI model operated by Noter.

Retention and deletion

Account information is retained while the account is active. Local notes, transcripts, meetings, tasks, people records, saved facts, and agent sessions remain on the Mac until deleted through the product or as part of account and application management. A server mirror retains corresponding data as needed for sync and server-side features.

Transcription and AI providers process content according to their applicable service terms and Noter’s provider configuration. This policy does not promise that meeting audio or model inputs remain only on the device.

You may request deletion of your account by contacting privacy@noter.so. Noter will delete or de-identify account data and server-side meeting records within 30 days, except for limited information that must be retained for legal, security, abuse-prevention, or backup purposes. Backup copies may persist for a limited period before being overwritten.

Revoking Google access stops future access and may disable related features. Google-sourced data stored by Noter is deleted within 30 days of an applicable deletion request or account closure, subject to the exceptions above.

Security

Noter uses technical and organizational safeguards intended to protect user information, including TLS for data in transit, server-side provider keys, session verification, rate limits, and restricted access to production systems. Data at rest is encrypted where supported by the relevant infrastructure provider.

No system is perfectly secure. Noter does not currently claim SOC 2, ISO 27001, HIPAA/BAA coverage, end-to-end encryption, regional data residency, or any other certification not expressly documented here.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to processing of, or delete personal information. You can also revoke Google access, disconnect integrations, adjust assistant context capture, remove saved agent facts, delete individual records where the product provides that control, or stop using Noter.

To make a privacy request, email privacy@noter.so. We may need to verify your identity before completing a request.

Children

Noter is a business productivity product and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy as the product, providers, or legal requirements change. The current version and effective date will appear on this page. When a change materially affects how we use personal information, we will provide notice through the app, email, or another reasonable channel.

Contact

For questions or privacy requests, contact privacy@noter.so. For product support, contact support@noter.so.

What Noter handles, and why.

Capture starts when you start it.

Selected providers do specific work.

Context and actions stay inspectable.