Privacy Policy

This is an early-stage draft of our Privacy Policy, written in-house and reflecting how Loominote operates today. It is not legal advice; we will have it reviewed by qualified counsel as we grow.

Last updated: October 2026

1. Who we are and how this policy works

Loominote is a product of BinaryVlue Pvt Ltd ("Loominote", "we", "us"), based in Bangalore, India. Loominote is a meeting‑intelligence service used by organizations and by individuals.

  • Business use (processor). When an organization ("Customer") uses Loominote, the Customer is the controller of the meeting content and participant personal data it processes through the Service, and Loominote acts as a processor on the Customer's instructions, under our Terms of Use and Data Processing Addendum (DPA). The Customer is responsible for having a lawful basis and for giving notices to, and obtaining consents from, meeting participants.
  • Account and website data (controller). For the personal data we collect to run accounts, billing, support and our website, Loominote is the controller, and this policy applies directly.

2. Information we collect

  • Account and workspace data: name, work email, organization, role, workspace and admin settings, and billing contact details.
  • Customer Content: audio/video recordings, transcripts, notes, summaries, action items, and documents you create or upload.
  • Participant data: information about meeting participants contained in the meetings you choose to record or process.
  • Integration data: data exchanged with tools you connect (for example conferencing, CRM, ATS, task and calendar tools), limited to what the feature requires.
  • Usage and diagnostics: device and app information, log data, and feature‑usage analytics. We do not collect biometric identifiers.

3. How we use information

To provide and operate the Service (prep briefs, capture, transcription, summaries, action items and routing to connected tools); to secure, maintain and improve the Service; to provide support; to bill and administer accounts; and to communicate about the Service. We do not sell personal data.

4. AI processing

To turn recordings into transcripts, summaries and action items, Loominote uses a combination of methods:

  • On‑device processing. On Apple devices, parts of transcription run locally using Apple's built‑in models and are not sent to any provider.
  • Loominote's in‑house models. Some processing runs on our own models.
  • OpenAI's API. We use the paid OpenAI API — Whisper for speech‑to‑text and GPT models for summaries and related outputs. We use the API (not the consumer product); under OpenAI's API data‑usage policy, content sent through the API is not used to train OpenAI's models, and we have not enabled any option that would allow such use.

We do not use your content to train generalized or foundational AI/ML models, and we do not sell it. AI processing of a recording occurs only after the user has consented in the app.

5. Sub‑processors

We use a limited set of service providers to operate the Service, including our cloud host, Amazon Web Services (AWS), with infrastructure in the India region, and OpenAI (the OpenAI API, for transcription and summarization as described in Section 4). Business customers can obtain the current sub‑processor list and advance notice of changes under the DPA.

6. Data sharing

We do not sell, rent or trade personal data. We share data only: with sub‑processors that operate the Service under contract; with third‑party tools the Customer chooses to connect, to deliver the requested feature; and where required by law or to protect rights and safety.

7. Limited use of Google user data

Loominote's use of information received from Google Workspace APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. We do not use, transfer or sell Google user data to create, train or improve any generalized or foundational AI/ML models. We request only the calendar.events.readonly scope and use Google Calendar data solely to identify the start time and conferencing link of meetings the user chooses to record, so the notetaker can join at the right time. This data is not used for advertising, is not sold, is not shared with any AI model, and is not retained on our backend.

8. Security

We maintain administrative, technical and organizational safeguards appropriate to the data, including encryption in transit (HTTPS/TLS), access controls, and least‑privilege practices. Loominote operates on SOC 2‑ and HIPAA‑compliant architecture (audit observation period underway). An on‑device recording option keeps audio local for regulated calls.

9. Data retention

We retain Customer Content until the user deletes it, the Customer requests deletion, or the subscription ends, after which we delete it in the ordinary course except where retention is legally required. For business customers, retention and deletion on termination are governed by the DPA.

10. International data transfers

Your data may be processed in the regions where our infrastructure and sub‑processors operate. Where data is transferred across borders, we rely on appropriate safeguards as required by applicable law.

11. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, export or restrict processing of your personal data, and to object or withdraw consent. For personal data processed on a Customer's behalf (business use), we will refer end‑user requests to the relevant Customer and assist them as the controller. To exercise rights or ask a question, contact team@loominote.app.

12. Children

Loominote's business service is not directed to children, and the Service is not intended for individuals under 13. We do not knowingly collect personal data from children.

13. Changes

We may update this policy. Material changes will be reflected by an updated "Last updated" date and, where appropriate, additional notice.

14. Contact

Loominote (BinaryVlue Pvt Ltd), 202, 27th Main Road, HSR Layout, Bangalore, India. Email: team@loominote.app.