How data is used, in plain language.

Data we process

Account identity, organization membership, meeting metadata, structured meeting-report content, approvals, integration metadata, subscription status, and security audit events. Source audio and transcripts are processed transiently and are not intended for long-term storage.

Why we process it

To authenticate users, provide meeting-report and approved-integration features, administer subscriptions, secure the service, prevent abuse, comply with legal obligations, and respond to support requests.

Retention

The configured default retention period for structured meeting history is 30 days. Generated downloads and temporary inputs have shorter technical retention periods. Billing and security data, and records that must be retained by law, may require separate documented schedules.

Providers and transfers

The deployed service may use an identity provider, OpenAI for certain artificial-intelligence processing, Stripe for hosted payments, and Google only when a user connects Calendar and Gmail sending. The Google permission can create approved events and send approved messages, but cannot read the inbox, Drive, or contacts. Resend is the intended delivery provider only for transactional account-verification email, if it is activated after DNS, security, and provider validation. It would receive the recipient address, verification-message content and delivery metadata, but no meeting content. This notice does not state that Resend is currently active. Contracted hosting and security providers may also process data. The final list of active subprocessors, regions, and transfer safeguards will be published before paid launch.

Essential cookies and language preference

Recapora uses essential and functional cookies to maintain authenticated sessions and CSRF protection, complete sign-in and integration flows, and remember the interface language you select. The language-preference cookie stores only a locale code, such as en or fr; it does not contain meeting content.

Your choices and rights

Users can disconnect Google at any time and may request access, correction, export, or deletion of their data where applicable. Meeting organizers remain responsible for informing participants and obtaining any consent required to record them or process their data.

Data-controller contact details

Brian ALALAM · 3 square martorell, Chevilly-Larue, 94550 · France
Privacy: brianalam81@gmail.com