Privacy Policy

1. Overview

Cueora is an AI meeting notepad. This policy explains what personal data we collect, why, how long we keep it, and the controls you have. We are the data controller for your account data, and a processor for the meeting content you capture.

2. What we collect

• Account data — name, email, authentication identifiers, plan and subscription status.
• Calendar data — if you connect Google Calendar or Outlook, the events on the calendars you select: title, time, attendees, description, and conferencing links, used to detect meetings and generate briefs.
• Meeting content — audio you explicitly choose to share, transcripts, notes, action items, decisions, and any flagged audio clips.
• Settings and diagnostics — capture preferences, shortcuts, and technical logs such as connection state and latency.

3. Audio handling and retention

Capture only runs when you start it or when you have explicitly enabled auto-capture, and an indicator is shown throughout. By default we process audio in-flight for transcription and do not retain the full recording. Flagged clips you save are stored encrypted at rest. You control the retention window for audio in Settings → Privacy, and can set it to delete immediately after transcription.

4. Why we process it

To provide the Service you ask for (contract), to keep it secure and prevent abuse (legitimate interests), to meet legal and tax obligations, and — only where you opt in — to send product updates (consent).

5. Who processes data for us

• Speech-to-text and language model providers, to transcribe and shape notes.
• Cloud hosting and database providers, to run the Service and store your data.
• Paddle.com Market Ltd, our merchant of record, to process payments and taxes.
• Destinations you connect yourself, such as Slack and Notion, when you share notes to them.

We do not sell personal data or share it with advertisers.

6. Private vs shareable layers

Notes marked private stay in your account and are excluded from anything shared to a team, Slack, or Notion. Only the shareable layer is included when you export or send notes.

7. Your rights and controls

You can access, correct, export, and delete your data. Settings → Privacy provides one-click export of all your meetings, transcripts, and notes, and permanent deletion of your account and its content. Depending on where you live you may also have rights to object to or restrict processing, and to complain to your data protection authority.

8. Security

Data is encrypted in transit and at rest, access is scoped per user through row-level security, and third-party credentials such as calendar tokens are stored encrypted with AES-256-GCM.

9. International transfers and retention

Data may be processed in countries other than yours, protected by appropriate safeguards such as standard contractual clauses. We keep account data while your account is active and delete meeting content according to your retention setting or within 30 days of account deletion, except where law requires longer.

10. Contact

Privacy questions or requests: support@cueora.app.