Privacy Policy

Notemaker ("we") provides Notemaker, which turns meeting transcripts into tracked tasks. This policy explains what we collect, why, who processes it, and your rights (including under the GDPR and India's Digital Personal Data Protection Act, 2023).

What we collect

• Account data: name, email, password hash (never the password), time zone, optional phone number for WhatsApp reminders.
• Meeting data you provide: transcripts, uploaded audio, bot recordings, and the summaries, decisions and tasks derived from them. Audio recorded by the meeting bot is deleted after transcription.
• Integration data: OAuth tokens for the tools you connect (encrypted at rest), and the task data we send to and receive from them.
• Usage and security logs: audit logs of changes in your workspace, request logs, and rate-limit counters.
• Cookies: only essential cookies to keep you signed in. We do not use advertising or cross-site tracking cookies.

Why we use it

To provide the service you asked for: extract action items, sync them to your tools, send reminders, and secure your account. We do not sell personal data and do not use your meeting content to train models.

Recording and consent

The meeting bot announces itself by name and posts a recording notice in the meeting chat. You are responsible for having the right to record (including consent of participants where the law requires it) before using the bot or uploading recordings.

Who processes your data (sub-processors)

Depending on what you enable: hosting and database (Railway), AI extraction (OpenAI and/or Sarvam AI), speech-to-text (Sarvam AI, Deepgram, OpenAI), meeting bot (Recall.ai, if used), email (Resend), messaging (Slack, Microsoft Teams, Twilio/WhatsApp, Discord, Google Chat, Telegram), payments (Stripe, Razorpay), and the project tools you connect. Transcript text is sent to the AI and speech providers you configure so they can return results.

Security

Transcripts and integration tokens are encrypted at rest (AES-256-GCM); passwords are hashed with scrypt; traffic uses TLS; access is role-based; API keys are stored hashed. No system is perfectly secure; report issues to autobot360.dev@gmail.com.

Retention and deletion

Workspace admins can delete transcripts or entire meetings at any time and (on Business) set automatic retention. You can export your data and delete your account from Settings → Account. On deletion we remove your account and personal data; some records may persist in backups for up to 30 days and in audit logs where required.

Your rights

You can access, correct, export and delete your data, withdraw consent, and object to or restrict processing. Under the DPDP Act you may also nominate a representative and seek grievance redressal. Contact autobot360.dev@gmail.com; we respond within 30 days. You may also complain to your data-protection authority.

International transfers

Our providers may process data outside your country. Where required we rely on appropriate safeguards such as standard contractual clauses.

Children

Notemaker is for business use and not directed at children under 16.

Changes and contact

We will notify you of material changes. Questions or requests: autobot360.dev@gmail.com.