Privacy first
Privacy Policy
This notice describes the current TurboNotes AI MVP. It does not claim SOC 2 certification or promise controls that have not been independently audited.
What we collect
- A randomly generated device identifier used to keep one installation's meetings separate. The MVP has no account or password system.
- Audio, video, YouTube URLs, optional prompts and keywords that you submit, plus generated transcripts, summaries, action items, decisions, tags, and chat messages.
- Operational data such as request IDs, timestamps, IP addresses used for abuse prevention, error details, and basic server logs.
How we use data
We use submitted content to provide transcription, speaker identification, notes, search, and meeting chat; to operate and secure the service; and to diagnose failures. TurboNotes AI does not currently sell personal information or use meeting content to train its own models.
AI and other service providers
Audio and media submitted for transcription or fallback YouTube extraction are sent to Replicate-hosted AI models. Transcripts, optional context, and meeting chat are sent directly to OpenAI to generate notes and answers. OpenAI Responses requests set store: false, so generated responses are not stored for later retrieval through the Responses API. YouTube imports retrieve the URL you provide. Infrastructure and AI providers may otherwise process or retain data under their own applicable terms and retention practices.
Storage and retention
Meeting records are stored in MySQL and media is stored on server disk. Failed media may be retained so a job can be retried. The MVP does not promise a fixed automatic retention period. Deleting a meeting removes its primary meeting record and media; deleting device data removes primary records associated with the current device identifier. Backups and security logs, if enabled by the operator, may remain for a limited operational period.
Your choices
You can delete individual meetings or all data linked to the current device from the app. Because there are no accounts, reinstalling the app or losing the device identifier may make it impossible to locate the prior installation's records. Do not share the identifier or signed media links.
Security and recordings
We use measures such as expiring signed media links and restricted server access, but no system is perfectly secure. You are responsible for obtaining any consent required to record, upload, or process other people's voices or information.
Children, changes, and contact
The service is not directed to children under 13. We may update this notice as authentication, subscriptions, retention rules, or providers change. Questions or deletion problems can be sent to privacy@diffusion.site.