Privacy Policy — Weekmate Notetaker

Last updated: September 1, 2026

Weekmate Notetaker ("the extension", "the Service") is a browser extension and companion web application, provided by Elsner Technologies Pvt Ltd, that records Google Meet, Microsoft Teams, and Zoom Web meetings and uploads those recordings to a server operated by your organization for transcription, summarization, and playback. This policy explains what data the extension and the Service collect, why, and how it is handled.

1. Data we collect

Data	What it is	Why we collect it
Meeting audio/video	The tab's audio (and, where enabled, video) captured while you record a meeting via `chrome.tabCapture`	To produce the recording, transcript, summary, and action items you requested
Transcripts & derived content	Speech-to-text transcripts, speaker labels, AI-generated summaries and action items	Core product feature — reviewing and sharing what happened in a meeting
Account information	Name, email address, organization/role, password (hashed)	Authentication and access control on the companion web app
Calendar data (optional)	Read-only calendar events, obtained via Google or Microsoft OAuth if you connect a calendar	To detect upcoming meetings and offer to record them automatically
Basic profile info (optional)	Name/email returned by Google or Microsoft during OAuth sign-in	To identify which account connected the calendar
Usage/diagnostic data	Extension state needed to detect an active meeting tab and show recording status/notifications	To run the record/stop/notify flow reliably

We do not collect data from meeting tabs other than Google Meet, Microsoft Teams, and Zoom Web, and the extension only activates its recording UI on those domains.

2. How data is stored and shared

Recordings, transcripts, summaries, and account data are stored on the server your organization deploys and controls (a MongoDB database and file storage) — not on third-party cloud infrastructure we operate.
Audio may be sent to a speech-to-text engine (OpenAI's API, or a self-hosted Whisper model, depending on your organization's configuration) solely to produce a transcript.
If your administrator has connected optional integrations (e.g., a CRM or task-tracking tool), a meeting's summary or transcript may be pushed to that tool, matched by your account email, so it appears alongside your existing records there.
We do not sell your data or share it with advertisers.
Recordings are visible only to you and, where your organization enables sharing, to teammates you explicitly share a link with or who your admin grants access to.

3. Google and Microsoft account access

If you connect a Google or Microsoft calendar, we request read-only access to your calendar (calendar.readonly) plus basic profile/email, solely to detect scheduled meetings. Weekmate Notetaker's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this data for advertising, and we do not allow humans to read it except as needed for security, legal compliance, or with your consent. You can disconnect a calendar at any time from the extension's settings, which revokes our access to it.

4. Your choices and controls

Recording only happens when you explicitly start it (or, if your organization enables it, an automated meeting bot you were invited to schedule) — the extension does not silently record.
You can delete a recording, its transcript, and its derived content from the web app at any time.
You can disconnect any connected calendar integration from the extension's options page.
You can uninstall the extension at any time via chrome://extensions, which stops all data collection from your browser.

5. Data retention

Recordings and derived content are retained until you or your organization's administrator delete them. OAuth tokens are retained until you disconnect the integration or your account is removed.

6. Security

Access to recordings and account data requires authentication. Passwords are stored hashed, never in plain text. Data in transit to and from the server uses HTTPS.

7. Children's privacy

The Service is intended for workplace use and is not directed to children under 13.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact us

Questions about this policy or your data can be sent to support@elsner.com.