Your meetings stay yours.

Information we process

• Google account details used for sign-in, such as your email address, name, and profile image.
• Meeting captions, speaker names, timestamps, meeting titles, generated summaries, and related metadata that you capture or import.
• Extension connection records, including token names, creation and last-used times. Secret extension tokens are stored only as one-way hashes.
• Settings such as your preferred name and timezone.
• Technical request and error information needed to operate and secure the service.

Google Calendar and Google user data

Calendar access is optional and requested separately from core sign-in. When you connect it, Recap.md reads calendar events needed to show and match meetings. Event and attendee details may be saved with a transcript when you choose a meeting during import. Recap.md does not sell Google user data or use it for advertising.

Recap.md's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

How we use information

We use your information to authenticate you, capture and store transcripts, make your meeting history searchable, connect optional calendar context, generate summaries you request, maintain security, troubleshoot errors, and provide account controls. We do not sell personal information.

Service providers

Recap.md relies on service providers to run the product: Google for sign-in and optional Calendar access, Supabase for authentication and data storage, Vercel for application hosting, and OpenAI for summaries. When you request a summary, the relevant transcript content is sent to OpenAI for that purpose. These providers process data under their own terms and applicable agreements.

Retention and deletion

Account data is retained while your account is active. Removing a transcript hides it from your library; permanent deletion is completed when you delete your account. Backup copies may remain until they are deleted under the applicable backup retention process, unless longer retention is required for security or legal obligations.

You can export your data or follow the account deletion process at any time.

Security and your choices

We use access controls, row-level authorization, encrypted transport, and revocable extension credentials. No internet service can guarantee absolute security. You can disconnect Calendar, revoke extension tokens, export your data, or permanently delete your account from Settings.

Changes

We may update this policy as the product changes. The effective date above identifies the current version. Material changes will be communicated through the service when appropriate.