Privacy policy

What we collect

• Your account. Your email address and a hashed password. We never store your password itself.
• Meeting audio. The recording you make when you press record and pick a window. It is stored in a private bucket that only your account can reach.
• Transcripts and notes. The text of the recording, and the summary, action items, decisions and follow-up names taken from it.
• Drafts. Follow-ups and emails written for you, and whether you approved, edited or dismissed them.
• Connection credentials. If you connect Google, Linear, Jira or Slack, the access tokens for those accounts, encrypted before they are stored.
• Usage records. How long each recording was and what it cost us to process, so we can run the service.

We do not use tracking cookies, advertising pixels, or third-party analytics. We do not sell anything to anyone, and we do not use your recordings, transcripts or notes to train any AI model.

Who processes it

To run the service we pass data to these companies and no others:

• Supabase stores your account, recordings, transcripts and notes.
• Vercel hosts the application.
• Deepgram receives your meeting audio in order to transcribe it.
• Anthropic receives the transcript text in order to write the notes and drafts.

If you connect Google, Linear, Jira or Slack, we send data to those services too, but only what you explicitly approve, and only when you approve it.

Google user data

If you connect a Google account, we ask for two permissions and use them for one purpose each. We ask to send email, and we use it only to send an email you have read and approved. We ask to manage calendar events, and we use it only to add an event for a task you have approved. We do not read your inbox, and we cannot: the permission we hold does not allow it.

We store the access tokens Google issues, encrypted, and the identifier of any message or event we created on your behalf. Nothing else from your Google account is kept. You can disconnect Google at any time in Settings, which deletes those tokens, and you can revoke our access from your own Google account settings.

How it is protected

• Every recording, transcript and note is scoped to your account at the database level, not merely hidden in the interface.
• Audio lives in a private bucket. It is reachable only through short-lived links we issue after checking that the file is yours.
• Credentials for connected services are encrypted with AES-256-GCM before storage and are never sent back to your browser.
• Traffic is encrypted in transit.

No system is perfect, and we will tell you promptly if we ever discover that your data has been exposed.

How long we keep it

We keep your recordings and notes until you delete them or ask us to close your account. Deleting a meeting removes its audio and its transcript and notes immediately and permanently, and we cannot recover it afterwards.

There is no self-serve account deletion yet. To close your account and have everything erased, email hello@fromthecall.com and we will do it within 30 days, including your audio and every connected credential.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to the address below and we will respond within 30 days. Depending on where you live you may also have the right to complain to a data protection regulator.

Children

From the Call is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

If we change this policy in a way that materially affects you, we will email you before it takes effect. The date at the top always reflects the current version.

Contact

Questions, requests, or anything that looks wrong: hello@fromthecall.com.