Privacy Policy

What we collect

Account details: your name, email address and a cryptographic hash of your password. We never store your password itself.

Calendar data, if you connect a calendar: event titles, times, attendees and meeting links, plus the mailbox address you connected. Your Microsoft refresh token is stored encrypted and is never logged.

Meeting content: the audio and video of meetings the note taker attends, the transcript produced from it, the minutes written from that transcript, and screenshots of slides shared on screen.

Operational logs, which record that a request happened but deliberately exclude cookies, authorisation headers and passwords.

Why we collect it

Solely to provide the service: to send the note taker to the right meeting, to produce your minutes, to email them to you, and to show them to you in the app. We do not sell your data, and we do not use your meeting content to train our own models.

Recording and consent

The note taker joins meetings visibly and under a name you choose, so that everyone present can see it is there. You are responsible for obtaining any consent that the law of your jurisdiction, or your organisation’s policy, requires before a meeting is recorded.

You can turn off automatic recording at any time in Settings, and you can decline to send the note taker to any individual meeting.

Who else processes your data

We use a small number of processors, each only for the purpose named:

• Recall.ai — joins the meeting and captures the recording.
• Google (Gemini API) — transcription and summarisation of the recording.
• Microsoft — read-only access to your calendar, only if you connect one.
• Our hosting, database and object storage providers — running the service and storing your data at rest.
• Our email provider — delivering your minutes and account emails.

How long we keep it

Meeting recordings, transcripts, minutes and slides are kept until you delete them or delete your account. Account records are kept while your account is open.

Deleting your data

You can delete your account from the mobile app, under Settings. Deleting your account permanently erases your account record, every meeting, and its transcript, minutes and slides. This cannot be undone.

To ask for deletion without the app, see the Delete your account page at /delete-account.

You may also ask us to access, correct or erase your data by writing to marketing@techdirectsupport.com.au.

Security

Traffic is encrypted in transit. Passwords are stored as scrypt hashes. Calendar refresh tokens are encrypted at rest with AES-256-GCM. Access to meeting data is scoped to your account.

Children

TDS Minutes is a workplace tool and is not directed at anyone under 16.

Changes and contact

We will update this page if this policy changes, and will change the date at the top.

Questions about privacy: marketing@techdirectsupport.com.au.