This notice supplements our Privacy Policy and applies to California residents under the California Consumer Privacy Act as amended by the CPRA. Terms such as "personal information", "sell", "share" and "sensitive personal information" have the meanings given in that Act.
1Our two roles#
As explained in the Privacy Policy, we act in two capacities. For your account, billing and usage data we are a business. For the meeting content you capture (audio, transcripts, context cards, summaries) we act as a service provider to you under a written contract that forbids us from retaining, using, or disclosing that content for any purpose other than performing the service. We do not combine it with personal information from other sources, and we never use it for our own commercial purposes.
2Information we collect#
In the last 12 months we have collected the following categories:
| Category (§1798.140) | Examples |
|---|---|
| Identifiers | Name, email address, account ID, IP address. |
| Commercial information | Plan, subscription status, billing history, hours consumed. Card details go directly to Stripe; we never receive or store them. |
| Internet or network activity | Log data, device and browser information, feature usage. |
| Audio and electronic information | Meeting audio and the transcripts, context cards and summaries derived from it. Handled as a service provider. |
| Professional information | Where present in meeting content — employer, role, colleagues named on a call. |
| Inferences | AI-generated summaries, action items and insights drawn from meeting content. |
We collect this from you directly, automatically as you use the service, and from the meeting platform when a bot joins a call at your instruction.
3Sensitive personal information#
We do not intentionally collect sensitive personal information. However, meeting audio can contain anything a participant chooses to say — including health, financial, precise location, racial or ethnic origin, religious belief, union membership, or the contents of communications. Where such information appears in meeting content we process it solely to perform the service, which is a purpose permitted under §1798.121(a) without an option to limit. We do not use or disclose it to infer characteristics about anyone.
Any plan can reduce this exposure by turning on automated PII redaction; Business and Enterprise plans add Zero-Data-Retention mode, which does not save meeting content.
4We do not sell or share your personal information#
California law nonetheless requires that we offer a clear way to exercise the opt-out right. The control below records your preference on this device (clearing your browser storage resets it). We also honour the Global Privacy Control browser signal automatically, treating it as a valid opt-out request under §1798.135(b)(1) without requiring you to do anything else.
당사는 개인정보를 판매하거나 공유하지 않으므로 현재 데이터를 처리하는 방식에는 아무런 변화가 없습니다. 선택을 기록해 두면 향후 상황이 바뀌더라도 선택 사항이 이미 기록되어 있습니다.
5Why we use personal information#
- To provide, operate and secure the service you asked for.
- To bill you, and to detect and prevent fraud or abuse.
- To provide support and send service messages about your account.
- To meet our legal, tax and accounting obligations.
We disclose personal information for these business purposes only to the sub-processors listed on our Sub-processors page, each under a contract that restricts them to performing the service for us.
6How long we keep it#
Meeting content is retained for the window shown on your plan — 365 days by default — and is then purged automatically. Account and billing records are kept for as long as your account is open and afterwards only as long as required for tax and accounting purposes. Details are in the Privacy Policy.
7Your California rights#
- Know — what we have collected, the sources, purposes and recipients.
- Access — a portable copy of your personal information.
- Delete — erasure, subject to the exceptions in §1798.105(d).
- Correct — fix inaccurate personal information.
- Opt out — of any sale or sharing (see section 4).
- Non-discrimination — we will never deny service, charge a different price, or provide a different quality of service because you exercised a right. We operate no financial-incentive programme.
Access, export and deletion are self-service from Settings → Privacy & data, which is the fastest route. You may also email [email protected] or call +1 (650) 844-3277. We respond within 45 days and may extend once by a further 45 days where permitted, telling you if we do.
We verify requests by matching them to a signed-in account or by confirming control of the email address on file. An authorised agent may act for you with written permission; we may still ask you to verify your identity directly.
8Contact#
AllOnEars Inc. — [email protected]. If you have a disability and need this notice in another format, contact us and we will provide one.