Privacy Policy

AI NoteTaker, operated by Devflovv, turns Google Meet audio into transcripts and structured meeting notes. This policy explains what we collect, why, how long we keep it, and the choices you have.

• Account details: your email address, your name, and a password stored only as a one-way (bcrypt) hash.
• Sign in with Google: if you choose it, we receive your Google account name, email address, profile picture URL and Google account ID. We use them to create or sign in to your account and to show your picture in the app.
• Meeting content: audio you capture with the Chrome extension or the meeting bot, the transcripts and speaker timing produced from it, and the AI-generated notes (summaries, decisions, action items and open questions).
• Optional Google Calendar and Meet access: only if you select Connect Google in Settings. We request read-only access to Google Meet spaces and to your Calendar events so the bot can find and attend meetings you opt into. Google's refresh token is stored encrypted; short-lived access tokens are kept in server memory only.
• Session data: a sign-in cookie and short-lived access tokens. We store only hashes of session and password-reset tokens.

• To provide the service: capture, transcribe and summarise your meetings.
• To sign you in, keep your session secure and send password-reset emails.
• To look up and join Google Meet meetings you choose, or that you enable Calendar auto-attendance for.

Transcripts are sent to the third-party AI model provider configured for the service to generate your notes. We do not sell your data and we do not use it for advertising.

AI NoteTaker's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data (your Google profile and read-only Calendar and Meet information) is used only to provide the features described above. It is not sold, not used for advertising, not read by people except where needed for security or to comply with law, and not used to develop, improve or train generalised AI or machine-learning models.

• Audio, transcripts and speaker timing are temporary. They are scheduled for deletion 48 hours after your meeting notes are successfully generated. If note generation fails, they are kept until processing can be recovered or they are cleaned up.
• Meeting notes are kept until you delete the meeting or your account.
• Account, meeting and Calendar settings records are kept until you delete your account.
• Google connection: the encrypted refresh token is kept until you disconnect Google in Settings or delete your account. You can also revoke access at any time from your Google Account permissions.

Database backups and the AI provider's own logs follow those systems' retention policies.

• Disconnect Google or turn off Calendar auto-attendance in Settings at any time.
• Delete meetings, or delete your account from Settings.
• Ask us for a copy or deletion of your data by emailing muhammad.suleman@devflovv.com.

Traffic is encrypted with HTTPS, passwords and tokens are stored as hashes, Google refresh tokens are encrypted, and each user can access only their own meetings.

You are responsible for telling meeting participants that the meeting is being recorded and transcribed, and for obtaining any consent the law requires. See our Terms of Service.

We will update this page when our practices change and revise the date above.