Privacy Policy

This privacy policy applies to the Prismical application and service (hereby referred to as "Application") created by Exa Labs LLC (hereby referred to as "Service Provider") as an Open Source service. This service is intended for use "AS IS".

Information Collection and Use

The Application collects information when you use it. This information may include:

• Your email address (for authentication)
• Meeting audio (processed for transcription and deleted after processing)
• Meeting transcriptions and generated summaries
• Your device's Internet Protocol address (e.g. IP address)
• Usage analytics (pages viewed, features used)
• Diagnostic and crash data (to detect, diagnose, and fix errors)
• Device identifiers and push notification tokens (to deliver notifications)
• Google Calendar data, only if you choose to connect your calendar (see Google Calendar Integration below)

The Application does not record or store meeting video.

Meeting Data

Meeting audio is processed in real-time for transcription purposes. When self-hosted, all meeting data remains on your infrastructure. With the hosted version, audio is processed and immediately discarded—only the resulting transcription and summary are stored in your account.

The Application requests microphone access solely to record audio that you choose to capture for transcription. It does not access the microphone in the background or record without your action.

Analytics

The Application uses Plausible for website analytics, which collects anonymous usage data without cookies. The Prismical mobile apps use PostHog for product analytics and crash and error reporting. PostHog collects usage events, basic device and app information, and diagnostic and crash reports. This helps the Service Provider understand how the Application is used, diagnose and fix problems, and improve its functionality.

Authentication

When you create an account, the Application collects your email address for authentication purposes. Your email and user ID are stored securely and used solely to identify your account.

Google Calendar Integration

Connecting a Google Calendar account is entirely optional. If you choose to connect one, the Application uses read-only access to your Google Calendar.

What the Application accesses

With your permission (the calendar.readonly scope), the Application reads:

• the list of calendars in your Google Account; and
• events on those calendars within a limited time window (approximately the previous week and the coming month), including their titles, descriptions, times, locations, attendees, and meeting links.

Why the Application accesses it

Google Calendar data is used solely to provide user-facing features inside Prismical: to show your recent and upcoming meetings, to let your notes and recordings be associated with the correct meeting, and to identify meeting participants. It is not used for any other purpose.

The Application never modifies your calendar

The Application requests read-only access. It does not create, edit, or delete calendar events, and it never writes anything to your Google Calendar.

How it is stored

Calendar and event data retrieved from Google is stored in your Prismical account so the Application can display it. The OAuth tokens that authorise this access are encrypted at rest and are never shared with third parties.

How long it is kept

Google Calendar data is retained only while your calendar remains connected. We keep only events within the limited time window described above, and this data is kept up to date with your Google Calendar rather than archived indefinitely. When you disconnect your calendar, or delete your Prismical account, all synced calendars and events are permanently deleted (see below).

How to disconnect and delete it

You can disconnect your calendar at any time from within the Application. Disconnecting revokes the Application's access at Google and permanently deletes the synced calendars and events from your Prismical account. You can also review or revoke access directly from your Google Account at myaccount.google.com/permissions.

Limited Use

Prismical's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never used for advertising, is never sold, and is never transferred to data brokers or credit-assessment services. It is not used to train generalised artificial intelligence or machine-learning models. Human access to Google user data occurs only with your explicit consent, where necessary for security purposes, to comply with applicable law, or where the data has been aggregated and anonymised for internal operations.

Third Party Access

Limited usage, diagnostic, and crash data, which may be associated with your account or device identifier, is transmitted to analytics providers (such as PostHog) to help the Service Provider improve the Application. The Service Provider may share your information with third parties only in the ways described in this privacy statement. Google user data obtained through the Google Calendar integration is not shared with analytics providers or any other third party, and is handled only as described in the Google Calendar Integration section above.

Opt-Out Rights

You can stop all collection of information by the Application by deleting your account and ceasing use of the service. You can also self-host Prismical for complete control over your data.

Data Retention Policy

The Service Provider will retain User Provided data for as long as you use the Application and for a reasonable time thereafter. If you'd like them to delete User Provided Data that you have provided via the Application, please contact them at contact@prismical.ai and they will respond in a reasonable time.

Account and Data Deletion

You can request deletion of your account and associated data at any time by emailing the Service Provider from your registered email address at help@prismical.ai. For full instructions, see our Data Deletion page.

Children

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13. The Application does not address anyone under the age of 13.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains. All data is encrypted at rest and in transit.

Changes

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of 2026-07-16

Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at contact@prismical.ai.