Privacy policy

Pending legal review. This policy was written for a pre-launch product and must be reviewed by counsel before publication. Bracketed items need to be completed.

1. Who we are

Consellations, Inc. (“Consellations”, “we”, “us”) provides a note-taking and customer relationship management service, including a web application and a desktop app (the “Service”). This policy explains how we handle personal information when you visit our website, use the Service, or interact with us.

For information our customers put into the Service about their own contacts, such as notes about a prospect or a meeting transcript, the customer is the controller and we act as a processor on their behalf, under our Data Processing Addendum. Requests about that information should go to the customer who holds it.

2. Information we collect

Information you give us

Account information: name, email address, password (stored only as a secure hash) or Google account identifier, and workspace and role details.
Billing information: plan, seats and billing contact. Card details are handled by our payment processor and not stored by us.
Customer content: notes, records, fields, files, tasks, deal room content and anything else you add to the Service.
Communications: messages you send us, demo requests and survey responses.

Information from connected services

Calendar: if you connect Google or Microsoft calendar, event titles, times, attendees and meeting links, used to show upcoming meetings and link notes to the right people.
Meeting audio and transcripts: when you record with the desktop app, audio from your microphone and computer is transcribed. By default audio isn't retained after transcription. Transcripts are stored as customer content.

Information collected automatically

Usage and device data: IP address, browser and device type, pages and features used, and error logs, used to run, secure and improve the Service.
Cookies: strictly necessary cookies for sign-in and security. See our Cookie policy.

3. How we use information

To provide, maintain and secure the Service, including authentication, syncing and backups.
To deliver features you choose, such as transcription, summaries, suggested record updates and answers to your questions.
To communicate with you about your account, security, changes and, where permitted, product news. You can opt out of marketing at any time.
To process payments and prevent fraud and abuse.
To comply with legal obligations and enforce our Terms.

Where the GDPR applies, our legal bases are performance of a contract, our legitimate interests (securing and improving the Service), your consent (where we ask for it), and compliance with legal obligations.

4. AI processing

Some features use third-party AI models to process customer content, for example to transcribe audio, write a meeting summary or propose a field update. We send only what's needed for the feature you're using. Under our agreements, these providers process data on our behalf and don't use it to train their models. Every change to your records is recorded with who made it and from what, and any change can be undone.

We don't sell personal information, and we don't share it for cross-context behavioral advertising. We share information only:

With subprocessors who help us run the Service, under contracts that protect it;
Within your workspace, according to the roles and permissions your administrator sets;
When you choose to share, for example through a deal room link;
If required by law, or to protect the rights, safety and security of our users or the public;
As part of a merger, acquisition or sale of assets, with notice to you.

6. Retention

We keep customer content for as long as your account is active. After an account is closed, we delete or anonymize customer content within [90] days, except where we must keep it longer by law. Backups roll off within [35] days. You can export your data at any time.

7. International transfers

We store data in the United States. Where we transfer personal information from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know, delete and correct information, and not to be discriminated against for using these rights. To make a request, email privacy@consellations.com. We'll verify your request and respond within the time the law requires. You may also complain to your local data protection authority.

9. Security

We use administrative, technical and physical safeguards described on our Security page. No system is perfectly secure, but we work hard to protect your information and will notify you of a breach as the law requires.

10. Children

The Service isn't directed to children under 16, and we don't knowingly collect their personal information.

11. Changes

We'll post any changes here and update the date above. If changes are significant, we'll notify you by email or in the Service.

12. Contact

Consellations, Inc., [Street address, City, State ZIP], United States · privacy@consellations.com