Privacy Policy – Meet Goran

Effective Date: [Month Day, Year]

Last Updated: [Month Day, Year]

Your privacy is important to us. This Privacy Policy (“Policy”) explains how Meet Goran (“Meet Goran,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use our website, desktop/mobile apps, and other products that link to this Policy (the “Services”). Capitalized terms not defined here have the meanings in our Terms of Service.

We may update this Policy from time to time. If we make material changes, we’ll notify you by posting an updated Policy and/or emailing the address associated with your account. Your continued use of the Services after updates means you accept the revised Policy.

1) Scope & Third-Party Services

This Policy applies when you visit our site or use the Services. If your organization is our customer, we may process data as a processor/service provider on its behalf; in that case, the organization’s privacy policy governs, and you should contact them directly.

Our Services integrate with third-party products (e.g., Google, Zoom, Microsoft, Stripe, Supabase, OpenAI, Anthropic, PostHog). Their use of your information is governed by their own policies and terms.

2) Privacy & Data Handling Summary

What we access: Calendar events, meeting links/metadata, optional meeting recordings/transcripts, and basic profile info.

Why: Meeting briefs, agendas, real-time coaching, and post-meeting insights.

Storage: Encrypted databases and storage; minimal caching for performance.

Security: Encryption in transit/at rest, role-based access, least-privilege controls.

Deletion: Automatic retention limits and on-demand deletion via in-app controls.

Your control: Disconnect Google/other integrations anytime; export/delete data.

3) Information We Collect

A. You provide

Account: Name, email, profile details, password/auth credentials.

Business profile (optional): Company name/URL, product/services description, ICP, personas, sales process focus, value props.

Payment: Collected by Stripe; we retain limited non-sensitive billing metadata (e.g., card brand, last four).

Customer data: Notes, uploads, and support requests you submit.

B. Calendar & meetings (if you connect)

Google Calendar: Titles, times, participants, descriptions, meeting URLs; used for briefs, agendas, and scheduling coaching bots.

Recordings & transcripts (optional): Audio/video, real-time transcripts, participant names, duration, timestamps; used for real-time coaching and post-meeting analysis.

C. Collected automatically

Usage & diagnostics: Features used, timestamps, performance, crashes/errors.

Device/technical: OS, app version, device type, IP (country/timezone).

D. From third parties

Auth providers: Google, GitHub (basic profile + sign-in).

Meeting platforms: Zoom, Google Meet, Microsoft Teams (meeting metadata per your authorization).

AI processors: OpenAI (embeddings/processing), Anthropic (coaching generation)—configured to avoid retaining your content for their model training.

4) How We Use Information

Core features: Meeting preparation, real-time coaching, post-meeting summaries, insights, and goal tracking.

Processing: Local processing for responsiveness; secure cloud sync for insights/preferences.

Operations: Provide, maintain, and improve Services; support; security/fraud prevention; analytics and product development; legal compliance; and corporate transactions.

Never for: Advertising, data resale, or unrelated model training.

5) Storage, Security & Retention

Storage & security

Encrypted storage (in transit and at rest), role-based access, least-privilege controls, monitoring, and periodic reviews. No method is 100% secure—please keep your credentials safe.

Retention (defaults)

Meeting recordings: Up to 90 days (configurable).

Transcripts: Up to 1 year.

Calendar sync data: Held for active sync only; removed when you disconnect.

Account/profile: Kept while your account is active; deleted on account deletion.

Analytics: Aggregated/de-identified may be kept longer.

You can delete synced data at any time in Settings; account deletion removes associated data (typically within 30 days), subject to legal/backup requirements.

6) Your Choices & Controls

Disconnect integrations: One-click disconnect for Google/Zoom/Teams in Settings; you can also revoke Google access in your Google Account > Security.

Delete/export data: Delete synced data or your entire account; request an export in Settings.

Granular privacy: Toggle specific AI features and meeting-by-meeting recording consent.

7) Sharing of Information

We do not sell your Personal Information or share it for third-party advertising.

We share information only with:

Service providers:

Infrastructure: Supabase (database/auth), hosting/storage vendors.

AI processing: OpenAI (embeddings/processing), Anthropic (coaching).

Payments: Stripe.

Analytics: PostHog.

Integrations: Google/Zoom/Microsoft to the extent you authorize.

Affiliates/subsidiaries: For operations consistent with this Policy.

Legal/compliance & safety: To comply with law, protect rights/safety, prevent fraud.

Corporate transactions: If we undergo a merger, acquisition, or reorganization.

With your consent/direction.

All providers are bound by appropriate contractual and security obligations.

8) Google API Limited Use Disclosure

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access only the minimum Calendar data needed to power user-facing features (briefs, agendas, coaching, scheduling). We do not use Google data for advertising, resale, or unrelated model training. You can disconnect Google anytime and delete synced data in Settings.

9) International Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) and apply encryption and access controls.

10) Your Rights

Depending on your location, you may have rights to access, correct, delete, object/restrict processing, or request portability. You can exercise these via Settings or by contacting us. You also may lodge a complaint with your local supervisory authority (EU/UK). We do not discriminate for exercising rights (e.g., CCPA).

11) Children’s Privacy

The Services are not directed to children under 16, and we do not knowingly collect Personal Information from them. If you believe we have, contact us and we’ll delete it.

12) Contact

Privacy: privacy@meetgoran.com

Support: support@meetgoran.com

Address: Meet Goran Privacy Team, [Business Address], [City, State/Province, ZIP/Postal], [Country]

Short version for Settings/Onboarding:

We access your calendar and meeting context to prepare briefs and coach you in real time. You can disconnect Google and delete your data any time. We don’t sell data or use it for ads or unrelated AI training.