Privacy Policy
Notula turns recorded meetings into transcripts and structured notes. This policy explains what data Notula accesses when you sign in with Google, how it is used, who it is shared with, and how you can control it.
Information we access
When you sign in, you grant Notula access to the following Google data. Each permission is used only for the purpose shown.
- Your Google account email and identity (
openid,userinfo.email): to sign you in and identify your account. - Google Calendar events (
calendar.events): to find meetings you attended, verify your attendance and attendees, and attach the generated notes to the calendar event. - Google Meet meeting details (
meetings.space.readonly): to find the recordings and transcripts that belong to a meeting. - Google Meet settings (
meetings.space.settings): to read and enable or disable automatic recording for meeting spaces you organize, when you request it. This applies to every call using the same meeting space, including recurring meetings. - Google Meet files in Drive (
drive.meet.readonly): to read the meeting recording file that Google Meet saved to Drive, only when you ask Notula to process that meeting. This permission is limited to files created or edited by Google Meet; Notula cannot read your other Drive files. - Google Drive files created by Notula (
drive.file): to create the notes document and share it with attendees. Notula can access only files it creates.
Notula also processes the content of meetings you choose to process: recordings, transcripts, the names and email addresses of attendees, and meeting titles and schedules. If you use the speaker library, it also stores short voice samples and voice-matching data for the people you label.
How we use it
- To transcribe the recording, summarise the meeting, and produce notes, action items and a shareable document.
- To verify that only people who attended a meeting can open its notes.
- To share the notes with attendees. Sharing with people outside your organisation requires your explicit confirmation each time.
- To operate, secure and troubleshoot the service. We keep content-free audit logs and never write transcript text or tokens to logs.
We do not sell your data, use it for advertising, or use it to train generative AI models.
Google API Services User Data Policy
Notula's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google APIs is used only to provide and improve the user-facing features described above. It is not transferred to others except as needed to provide those features, to comply with the law, or as part of a merger or sale with notice to you, and it is not read by people except with your consent, for security or abuse investigation, to comply with the law, or where it is aggregated and anonymised.
Who processes it
Notula runs on Google Cloud. To provide the service we send data to these processors:
- Google Cloud (Cloud Run, Firestore, Cloud Storage, Secret Manager, Cloud KMS, Vertex AI): hosting, storage and AI summarisation. Data is stored in the United States.
- ElevenLabs: speech-to-text transcription of meeting audio. Audio is sent to ElevenLabs for transcription only.
- Google Workspace: the notes document, calendar attachment and attendee sharing are created in your Google account.
Because these providers are in or may process data in the United States, your data may be transferred outside your country.
Retention and deletion
- Recordings are downloaded temporarily for processing and deleted when processing finishes, with a storage rule that removes any remainder within 24 hours.
- Derived files (transcripts, summaries, extracted visuals) are kept for 30 days. The notes document in your Google Drive is yours and stays until you delete it.
- Processing records (status, timing, cost; no transcript text) are kept for 180 days.
- Google access tokens are stored encrypted with Cloud KMS and removed when you disconnect Google in Settings. You can also revoke access at any time at myaccount.google.com/permissions.
- Speaker library voice samples are kept until you delete the person from the library.
To ask for access to or deletion of your data, contact the support contact shown on the Google sign-in consent screen.
Voice data
Recordings contain voices, and the optional speaker library stores voice samples and voice-matching data that can identify a person. Use it only for people who know about and agree to it. You can delete any person, their samples and their matching data from the library at any time.
Security
Data is encrypted in transit and at rest. Access tokens are encrypted with a managed key, access to meetings is limited to verified attendees, and the service uses separate, least-privilege identities for its components.
Children
Notula is a workplace tool and is not intended for people under 16.
Changes and contact
We will update the effective date above when this policy changes, and give notice in the app for material changes. Questions: the support contact shown on the Google sign-in consent screen.