Privacy Policy

What information do we collect?

Information you provide

• Account registration and profile information, such as name, company, role, email address, password or authentication identifier, and workspace settings.
• Meeting-related content that you or your organization provide to SalesSavvy, including meeting transcripts, audio or video streams when enabled, goals checklists, notes, action items, summaries, reports, CRM field mappings, and other sales workflow content.
• Integration authorization data, including OAuth grants, access tokens, refresh tokens when required to maintain a connection, tenant or workspace identifiers, connected account email addresses, and integration configuration for platforms such as Google Workspace, Microsoft 365, HubSpot, Salesforce, Zoom, or Outlook Calendar.
• Communications with us, such as support tickets and emails.

Information collected automatically

• Device and browser metadata, including IP address, operating system, and user agent.
• Usage data such as pages visited, features used, and timestamps.
• Meeting audio or video streams, transcripts, summaries, and CRM write-backs when authorized.

Information from integrations

When you connect CRM, calendar, email, document, or cloud storage accounts, SalesSavvy accesses only the information authorized by you or your organization and only for the feature you enable, such as generating meeting briefs, generating pre-meeting insights from user-authorized Gmail messages, creating reports, exporting reports to documents, or writing authorized fields back to a connected system.

How meeting data is collected and processed

SalesSavvy collects meeting data only after you have continued into the Services and intentionally use a feature that requires the data, such as starting a recording, selecting an audio or video file, entering meeting content, or enabling an integration. No meeting audio or transcript is transmitted merely because you view the login page.

• Live meetings: after you start recording and grant the operating-system microphone permission, the app captures the meeting audio stream and transmits it through SalesSavvy's systems to AssemblyAI, Inc. for real-time speech-to-text transcription, language processing, speaker labeling, and transcript timing.
• Uploaded recordings: when you deliberately select an audio or video file, SalesSavvy uploads the selected file and sends its audio content to AssemblyAI, Inc. for speech-to-text transcription. SalesSavvy does not scan unrelated files on your device.
• Transcription results: AssemblyAI returns transcript text and related speech-processing results, which may include speaker labels, timing information, and transcription confidence. SalesSavvy uses these results to display and organize the meeting record.
• AI analysis: SalesSavvy sends the resulting transcript and the meeting context needed for the feature you request to Amazon Web Services (AWS) through Amazon Bedrock. Depending on the feature, this context may include the meeting title, participant names or contact identifiers, meeting time, selected language or industry, goals, checklists, notes, action items, report templates or field definitions, and relevant CRM, calendar, email, or file content that you or your organization has provided or authorized.
• Amazon Bedrock is used to identify key information, create summaries that follow the progress of the meeting, enhance notes, evaluate meeting goals, generate action items and next steps, extract structured fields, and produce structured meeting reports, pre-meeting briefs, and other requested insights.

Google Workspace Data and Limited Use

If you connect a Google account, SalesSavvy may request access to Google user data only after you authorize the requested OAuth scopes. Depending on the features you enable, SalesSavvy may access your Google account email address and basic profile information, Gmail message metadata and message content needed to identify relevant emails, normalize them, and generate pre-meeting insights, Google Calendar event metadata for meeting preparation, and Google Docs or Google Drive data needed to create, edit, format, locate, and save meeting reports that you choose to export.

• For Gmail pre-meeting insights, SalesSavvy uses Gmail API access (gmail.readonly scope) to search your authorized mailbox for emails related to meeting participants, retrieve read-only message metadata and content, normalize those emails with CRM or file sources when applicable, and generate pre-meeting insights shown inside SalesSavvy. SalesSavvy does not send, modify, or delete Gmail messages.
• For Google Docs export, SalesSavvy uses Google Drive API access (drive.file scope) to create new Google documents in your Google Drive containing the meeting summary, transcript, notes, goals checklist, action items, and related report formatting that you choose to export. SalesSavvy does not read or import content from your existing Google Docs or Google Drive files.
• Google Drive access is limited to creating and managing files created through SalesSavvy for the export workflow, and returning the document link to you.
• SalesSavvy does not use Google user data for advertising, does not sell Google user data, and does not use Google user data to train generalized or unauthorized AI models.
• SalesSavvy does not transfer Google user data to third parties except as necessary to provide or secure the Services, comply with law, or with your explicit direction and authorization.

Microsoft Word and Microsoft 365 Data

If you connect a Microsoft account or Microsoft 365 tenant, SalesSavvy may request Microsoft identity platform and Microsoft Graph permissions only for the features you enable. Permissions may include User.Read to sign you in and read basic profile information, Files.ReadWrite to create, read, update, and save Word documents in your OneDrive or SharePoint locations selected for export, offline_access when needed to maintain an authorized connection, and OpenID/email/profile permissions for authentication.

• SalesSavvy uses Microsoft Graph API data only to authenticate the user, identify the authorized Microsoft 365 tenant or account, create or modify Word documents containing SalesSavvy meeting reports, save those documents to the OneDrive or SharePoint location selected by the user or administrator, and return document status or links to the user.
• SalesSavvy does not scan unrelated OneDrive or SharePoint content for advertising, profiling, resale, or unrelated analytics.
• Data retrieved from Microsoft APIs is strictly used to provide the Microsoft Word and Microsoft 365 export function and related security, support, and compliance operations.
• SalesSavvy does not share Microsoft API data with third-party advertising networks and does not use Microsoft API data to train unauthorized AI models.
• For Microsoft 365 organizational tenants, access may be subject to enterprise administrator consent, tenant policies, conditional access controls, and revocation mechanisms configured by the customer's IT administrator.

How do we use your information?

• Convert live or uploaded meeting audio into transcript text and organize it with speaker and timing information.
• Analyze transcripts and authorized meeting context to identify key information, follow meeting progress, generate summaries, enhance notes, evaluate goals, create action items and next steps, extract structured fields, and produce pre-meeting briefs and post-meeting reports.
• Provide, maintain, secure, support, and personalize the Services, including real-time prompts and requested workflow outputs.
• Read and normalize user-authorized Gmail emails to generate pre-meeting insights and related meeting context.
• Sync structured insights back into CRM fields.
• Create, format, update, and export user-selected meeting reports to Google Docs, Microsoft Word, OneDrive, or SharePoint when you authorize those integrations.
• Communicate with you about product updates, support, and marketing.
• Ensure security, prevent fraud, and comply with legal obligations.

Sharing of Information

We share information only as necessary:

• AssemblyAI, Inc. receives live meeting audio streams or the audio content of files you choose to upload, together with limited technical settings needed for transcription, for speech-to-text transcription and related speech processing.
• Amazon Web Services (AWS), through Amazon Bedrock, receives the resulting transcript and the meeting context needed for the requested feature for key-information extraction, progress-based summarization, note enhancement, goal and action-item analysis, structured field extraction, and structured report generation.
• Other service providers may support cloud hosting, security, analytics, and customer support, but receive personal data only to the extent necessary to perform their contracted services.
• With integrated platforms such as Google Workspace, Microsoft 365, HubSpot, Salesforce, Zoom, or Outlook according to your authorization and only for the connected feature.
• For legal compliance, including subpoenas or government requests.
• In corporate transactions such as mergers or acquisitions.

We do not sell your personal information. We do not share personal information, Google API data, Microsoft API data, meeting audio, or transcripts with third-party advertising networks. SalesSavvy requires every service provider that receives personal data from us, including AssemblyAI and AWS, to provide the same or an equivalent level of protection as described in this Privacy Policy and required by applicable law and App Store privacy requirements. We use provider agreements and controls that require appropriate confidentiality, security, limited access, incident response, and deletion or return obligations. These providers may not sell the data or use it for independent advertising.

Storage, Tokens, and Retention

• SalesSavvy stores meeting transcripts, goals checklists, notes, summaries, reports, and related workflow data for as long as needed to provide the Services, honor your workspace settings, resolve support issues, enforce security, and comply with legal obligations.
• SalesSavvy may store OAuth access tokens, refresh tokens, tenant identifiers, file identifiers, document links, and integration settings in encrypted or access-controlled systems only as needed to operate the authorized integration. You may revoke access through SalesSavvy account settings or through the Google or Microsoft account and administrator consoles.
• When Gmail is connected for pre-meeting insights, SalesSavvy may temporarily store message metadata, normalized message content, and derived insight records in access-controlled systems as needed to generate pre-meeting insights, troubleshoot support issues, operate deletion workflows, enforce security, and comply with legal obligations.
• SalesSavvy does not permanently store a separate copy of Google Docs or Microsoft Word document contents solely because they were exported. The source meeting report remains subject to SalesSavvy retention settings, and temporary export processing data is deleted or overwritten when no longer needed for delivery, troubleshooting, security, or legal compliance.
• When you delete your SalesSavvy account or request deletion, SalesSavvy deletes or de-identifies personal data according to applicable law and legitimate retention needs, such as fraud prevention, dispute resolution, security logs, and legal compliance.
• Copies temporarily processed by AssemblyAI and AWS are governed by our configured provider settings and agreements and are retained only as needed to complete and secure the requested processing, provide support, or satisfy applicable legal obligations. We require deletion or return when processing is no longer necessary, subject to limited security, operational, or legally required records.

Data Security

We use administrative, technical, and organizational safeguards designed to protect your data, including encryption in transit, encryption or equivalent controls at rest where appropriate, role-based access controls, logging, monitoring, and least-privilege access for personnel and service providers. No method of transmission or storage is completely secure, but SalesSavvy works to protect personal data, OAuth tokens, meeting content, and document export data from unauthorized access, disclosure, alteration, or destruction.

AI Processing

SalesSavvy uses AssemblyAI for automated speech recognition and uses AWS through Amazon Bedrock for AI analysis. These providers process the data categories and perform the purposes listed in the sections above. AWS documents that model providers deployed through Amazon Bedrock do not have access to Amazon Bedrock logs or customer prompts and completions. SalesSavvy does not use meeting content, Google API data, or Microsoft API data for advertising and does not authorize unrelated model training. Because transcription and AI analysis are the basis of SalesSavvy's core features, you cannot use those features without this processing. Your affirmative decision to sign in or continue after the linked notice constitutes consent to this essential processing; each recording, upload, or integration action also determines which data is collected for the feature you request.

Your Rights

Depending on your jurisdiction, you may request the following:

• Access, correction, or deletion of your data.
• Export of your data.
• Restriction or objection to certain processing where applicable.
• Opt-out from marketing communications.
• Revocation of connected Google Workspace, Microsoft 365, CRM, calendar, or other integration access.
• Withdrawal of consent to future meeting transcription and AI processing. Because this processing is essential to the Services, withdrawing consent means you must stop using recording, upload, transcription, and AI insight features and may require deletion of your SalesSavvy account. You can delete your account in the application settings or contact privacy@salessavvy.ai for assistance. Withdrawal does not affect processing lawfully completed before withdrawal.

Requests can be submitted at privacy@salessavvy.ai.

Retention

We retain data as long as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and prevent abuse. Meeting data can be deleted from your account settings or by contacting privacy@salessavvy.ai, subject to legally required or legitimate limited retention. Connected Google and Microsoft permissions can also be revoked through the relevant provider's security or admin console.

California and Other U.S. Privacy Rights

We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are defined by applicable U.S. state privacy laws. Depending on your state, you may have rights to know, access, correct, delete, obtain a portable copy of, or opt out of certain processing of personal information. SalesSavvy will not discriminate against you for exercising applicable privacy rights.

European and International Privacy Rights

Where the GDPR, UK GDPR, or similar laws apply, SalesSavvy processes personal data based on legal bases such as performance of a contract, legitimate interests, consent, and legal compliance. You may have rights to access, rectify, erase, restrict, object to processing, data portability, withdraw consent, and lodge a complaint with a supervisory authority.

International Transfers

SalesSavvy operates from the United States. Data may be processed in the United States and other countries. We comply with applicable cross-border data transfer frameworks, such as the EU-U.S. Data Privacy Framework.

Changes

We may update this Privacy Policy from time to time. Continued use of the Services constitutes acceptance of the updated policy.

Contact Us

Email: privacy@salessavvy.ai
Address: SalesSavvy Inc., San Francisco, CA, USA