Privacy Policy

Kipto AI ("Kipto", "we", "us") provides AI-powered meeting summaries. Because our product processes your meetings, we hold ourselves to a simple standard: your meeting data belongs to you. This policy explains exactly what we collect, why, and what we will never do with it.

1. Information we collect

• Account information — your name, email address, password (stored as a salted hash by our authentication provider), and timezone.
• Meeting audio — when you actively enable recording via the Kipto browser extension, we receive the audio of that meeting to transcribe and summarize it.
• Transcripts and summaries — the text we derive from your meeting audio, including detected participant names, action items, and mentioned dates.
• Participant names — names visible in the meeting interface (e.g. the Google Meet participants panel), captured so summaries can say who was present.
• Billing information — handled entirely by Stripe. We never see or store your card number.
• Google Calendar access — if you connect your calendar, we store an encrypted token that lets us create events on your behalf. We only create events; we do not read, list, or delete your existing calendar entries.

2. How we use your information

• To transcribe and summarize the meetings you choose to record.
• To email you your own meeting summaries.
• To create calendar events for follow-ups mentioned in your meetings, if you connect your calendar.
• To operate your subscription, enforce plan limits, and provide support.

We do not use your meeting audio, transcripts, or summaries to train AI models. We do not sell your data. We do not show you ads.

3. Recording consent — your responsibility

Laws about recording conversations vary by location. Several US states (including California) require the consent of all participants. By using Kipto, you agree that you are responsible for obtaining any consent required by the laws that apply to your meetings. We recommend simply telling participants that the meeting is being recorded.

4. Service providers we rely on

• Supabase — database, authentication, and file storage.
• Groq — speech-to-text processing of meeting audio.
• Stripe — payment processing.
• Resend — transactional email delivery.
• Hetzner — cloud infrastructure where summaries are generated.

Each provider processes only what it needs to perform its function and is bound by its own security and privacy commitments.

5. Data retention and deletion

Meeting audio is automatically deleted 30 days after the meeting. Transcripts and summaries remain in your account until you delete your account. When you delete your account, all associated data — including any stored audio — is permanently removed from our systems within 30 days. You can delete your account at any time from your account settings, or contact us at the email below.

6. Security

All data is encrypted in transit (TLS) and at rest. Calendar tokens are additionally encrypted at the application level. Access to your meetings is enforced at the database layer (row-level security), meaning your data is technically inaccessible to other users' sessions. Audio files are stored in private buckets accessible only through short-lived signed links generated for your account.

7. Google API disclosure

Kipto's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar access is used solely to create events you have asked us to create.

8. Your rights

You may access, export, correct, or delete your personal data at any time. If you are in the EU/UK (GDPR) or California (CCPA), you have additional statutory rights, including the right to know what we hold about you and the right to deletion. Contact us to exercise any of these.

9. Children

Kipto is not directed at children under 16 and we do not knowingly collect their data.

10. Changes to this policy

If we make material changes, we will notify you by email before they take effect. Continued use after the effective date constitutes acceptance.

11. Contact

Questions or requests: privacy@kipto.ai