Privacy Policy

Overview

Noter ("Noter," "we," "us," or "our") operates the Noter application and the noter.so website.

We help users prepare for, record, transcribe, summarize, and manage meetings. This Privacy Policy explains what information we collect, how we use it, how we share it with service providers, and the choices you have.

Information We Collect

Account Information

When you sign in with Google, we collect basic account information, including your name, email address, and profile picture.

Google Calendar Data

If you connect Google Calendar, we read information from your primary calendar, including meeting titles, times, locations, video-conference links, and attendee names and email addresses.

We use this information to show your upcoming meetings, let you start recording quickly, identify meeting context, and prepare meeting-related briefs.

Google Contacts and Directory Data

If you grant access, we may read names, profile photos, job titles, companies, bios, and related profile information from your Google Contacts, auto-saved contacts, and, for Google Workspace accounts, members of your organization's directory.

We use this information to identify meeting attendees and prepare pre-meeting context.

Meeting Content

When you record a meeting with Noter, we may collect and process:

• Meeting audio
• Transcripts
• User-written notes
• AI-generated notes, summaries, action items, and related outputs
• Meeting context, including meeting title, attendees, calendar metadata, and associated company information

Analytics and Diagnostics

We use analytics and diagnostics tools, including PostHog and Sentry, to understand product usage, monitor errors, improve reliability, and debug issues.

Where possible, we limit or remove sensitive meeting content from diagnostic data.

Google API Data Use

Noter's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google user data only to provide and improve user-facing features in Noter, including:

• Signing you into your account
• Showing upcoming meetings
• Starting recordings from calendar events
• Identifying meeting attendees
• Preparing pre-meeting briefs
• Generating meeting notes and summaries

• We do not use Google user data for targeted or personalized advertising.
• We do not sell Google user data.
• We do not transfer Google user data to data brokers or information resellers.
• We do not use Google user data to determine credit-worthiness or for lending purposes.
• We do not use Google user data to train generalized AI or machine-learning models, and we do not transfer Google user data to AI tools or providers that use it to train generalized AI or machine-learning models. Our AI provider (OpenAI) processes data under API terms that prohibit training on submitted content.

How We Use Information

We use the information we collect to:

• Authenticate users and manage accounts
• Display upcoming meetings
• Enable one-click meeting recording
• Identify meeting attendees
• Prepare meeting briefs
• Record, transcribe, and summarize meetings
• Generate notes, action items, follow-ups, and related meeting outputs
• Improve product performance and reliability
• Provide support
• Send product updates, where you have opted in to receive them
• Protect against misuse, security issues, and abuse

How We Share Information

We do not sell, rent, or trade your personal data.

We share information only with service providers that help us operate Noter. These providers may process data only to provide services to us and are not permitted to use the data for their own independent purposes.

Service Providers

We may share data with the following categories of providers:

• Cloud infrastructure: Supabase and related infrastructure providers for hosting, authentication, database, and file storage.
• Recording and transcription: Recall.ai, Deepgram, AssemblyAI, or similar providers to capture, process, and transcribe meeting audio.
• AI note generation: OpenAI, via the OpenAI API, to generate meeting summaries, notes, action items, and related outputs. When AI processing is used, we may send the relevant transcript, user notes, meeting title, attendee names and email addresses, company context, and other meeting context needed to generate the requested output. Per OpenAI's API terms, data submitted through the API is not used to train OpenAI's models.
• Company information: Clearbit, logo.dev, or similar providers to identify company names, descriptions, and logos from attendee email domains. We do not send personal email content to these providers for this purpose.
• Error monitoring: Sentry or similar providers for diagnostics and error monitoring. We make reasonable efforts to avoid sending meeting transcripts, notes, and sensitive meeting content in error reports.
• Analytics: PostHog or similar providers for product analytics and usage measurement.
• Email delivery and communications: Email service providers to send sign-in messages, account-related messages, and product updates where users have opted in.

We may also disclose information if required by law, to protect our rights, to prevent fraud or abuse, or to protect the safety and security of users or others.

Meeting Recording and Consent

Noter records meeting audio only when a user starts a recording.

You are responsible for making sure you have the right to record a meeting and for notifying or obtaining consent from other participants where required by law, workplace policy, or platform rules.

Noter is a tool for capturing and summarizing meetings. It does not replace your obligation to comply with applicable recording, consent, confidentiality, employment, or privacy requirements.

Data Retention and Deletion

Account Data

We retain your account information for as long as your account remains active.

Meeting Content

Transcripts, notes, summaries, and related meeting records are retained in your account until you delete them or close your account.

Meeting audio may be streamed to recording or transcription providers to produce transcripts. Unless the product specifically states otherwise, Noter does not intentionally store meeting audio after transcription is complete.

Google User Data

If you revoke Noter's access through your Google account settings, we will delete Google-sourced data stored by Noter within 30 days, unless we are required to retain limited information for legal, security, or abuse-prevention purposes.

Revoking Google access may limit or disable calendar, contact, attendee-identification, and meeting-preparation features.

Account Deletion

You may request deletion of your account and associated data by contacting us at privacy@noter.so.

When you delete your account, we delete or de-identify your account data, meeting records, transcripts, notes, and summaries within 30 days, except where we are required to retain limited records for legal, security, abuse-prevention, or backup purposes.

Backup copies may persist for a limited period before being overwritten.

Data Security

We use reasonable technical and organizational safeguards to protect user data.

Data in transit is encrypted using TLS. Data at rest is encrypted where supported by our infrastructure providers. Access to user data is restricted to authorized personnel and service providers who need access to operate, secure, or support the product.

No system is perfectly secure, and we cannot guarantee absolute security.

Your Choices and Rights

You may:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data or account
• Revoke Google access at any time through your Google account settings
• Stop using Noter at any time

To exercise these rights, contact us at privacy@noter.so.

Children's Privacy

Noter is not intended for children under 13, and we do not knowingly collect personal data from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time.

If we make material changes to how we collect, use, or share your data, we will notify you by email, in the application, or through another reasonable method before the changes take effect.

Your continued use of Noter after the updated policy becomes effective means you accept the updated policy.

Contact

For questions about this Privacy Policy, contact us at privacy@noter.so.