Privacy notice

Who this notice covers

Decinote provides a private meeting-recording and notes workspace. The account holder controls what is recorded and is responsible for having a lawful reason and every permission required in the place where the recording occurs. Questions or privacy requests can be sent to privacy@decinote.com.

Information Decinote processes

• Account details such as your email address, display name, sign-in provider identifier, role, and account status.
• Meeting content such as audio or video, titles, transcripts, summaries, decisions, action items, and edits you make.
• Recording-consent acknowledgements, including the account, time, and notice version confirmed before capture begins.
• Plan, usage, subscription, gift-code, and administrator-action records. A payment provider handles card details when paid checkout is enabled; Decinote does not store full card numbers.
• Security and service data such as session information, timestamps, browser requests, storage use, and audit events.

Reseller-provided access

When you redeem a reseller-issued code, that reseller can see your display name, Account ID and the status and expiry of the license they supplied. They can pause or restore that license until it expires or is replaced. Resellers cannot access your recordings, transcripts, meeting notes, passwords or payment details. Decinote administrators control reseller approval and finite license allocations. Issuing, claiming and changing reseller licenses creates audit records; these controls do not themselves create a card charge or automatic renewal.

Why the information is used

Decinote processes this information to provide and secure the service, store and play recordings, save and export notes, enforce plan limits, administer access, prevent abuse, support users, and meet legal obligations. Where applicable, processing relies on performing the service contract, legitimate security interests, legal obligations, and consent where the law requires it.

Service providers and transfers

Decinote uses Cloudflare for application hosting, protected databases, media storage, security checks, and delivery of email sign-in codes. When you choose Google sign-in, Google processes the sign-in request and provides your identity, email address and profile information; Decinote does not request access to Gmail, Drive or Calendar. When automatic processing is configured and a finalized recording is eligible, the Whisper, Deepgram Nova-3 and Gemma 4 models available through Cloudflare Workers AI create a transcript and draft notes. Card checkout and Apple sign-in are not currently available. If you separately enable optional browser live captions, microphone speech may be processed by your browser or operating-system provider, such as Google, Apple, or Microsoft, under that provider's terms. These providers may operate in other countries using lawful transfer safeguards.

Retention and deletion

Saved meeting media and notes remain associated with the account until the user deletes them or the account is closed, subject to limited backups, fraud prevention, disputes, and legal retention duties. During automatic processing, Decinote may keep private transcript and partial-note checkpoints; these are removed after success, terminal failure, cancellation, or deletion. After the verified result is copied into the meeting, Decinote requests immediate deletion of the separate AI job and artifacts. Failed AI jobs are removed within 24 hours, and an unconsumed successful result is removed within 30 days even if the user never returns to the meeting. Meeting deletion first removes any still-linked AI job and result, then removes the media, notes, title, technical media details, and consent acknowledgement. To prevent deleting recordings from resetting a monthly allowance, a minimal tombstone containing the internal meeting and account IDs, deletion state, duration, and quota month remains until that monthly usage window has closed; it is purged on the account's next signed-in app or library load after the period. An incomplete recording's local crash-recovery copy is removed after a successful save, discard, sign-out, clearing this site's browser data, or on the next Decinote visit after it is more than seven days old. Decinote retries immediate cleanup of incomplete server uploads; Cloudflare R2 also automatically aborts incomplete multipart uploads after seven days. Authentication, billing, gift, and audit records may be kept longer when needed for security, accounting, or legal obligations. Self-service account deletion is not currently available: send a request to the privacy address above so an operator can remove each meeting and its linked AI result before closing the account.

Security and your choices

Website language follows your supported browser language, with a country-level fallback when available. A language you choose is saved in a display-preference cookie for up to one year on that browser. This feature does not request precise location and does not translate your saved meeting content.

Decinote uses encrypted HTTPS connections, account-scoped media access, verified sign-in tokens, restricted administrator controls, and audit records. No internet service can guarantee absolute security. You can sign in with an email code or choose Google. Connecting Google to an existing account or a non-Gmail address may require an email code to verify ownership. You can also leave browser live captions off, revoke browser camera or microphone permissions, delete individual meetings, clear local recovery data by signing out, and request access, correction, export, restriction, objection, or deletion where applicable law provides those rights.

Children and changes

Decinote is not intended for children under 16 and must not be used to record children without all permissions required by law. Material changes to this notice will be posted here with a new date and, where appropriate, communicated in the product.