Privacy Policy
Last updated: February 19, 2026
1Introduction
Minutes Studio ("we", "us", "our") is operated by Moskai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our meeting transcription and analysis service ("Service").
2Information We Collect
2.1 Account Information
When you create an account, we collect your email address and authentication credentials managed through our identity provider (Supabase Auth).
2.2 Meeting Data
When you upload audio files or connect third-party services (Zoom, Microsoft Teams), we process:
- Audio recordings of your meetings
- Transcriptions generated from those recordings
- AI-generated summaries, action items, decisions, and workflow outputs
- Meeting metadata (title, date, duration, participant names mentioned in recordings)
2.3 Integration Data
When you connect Zoom or Microsoft Teams, we store OAuth tokens necessary to access your meeting recordings. We access only the permissions you explicitly grant:
- Zoom: user:read (profile info), recording:read (meeting recordings)
- Microsoft Teams: User.Read, OnlineMeetings.Read, OnlineMeetingRecording.Read.All
2.4 Usage Data
We collect credit usage, billing transactions, and basic interaction logs to operate the Service.
3How We Use Your Information
- Transcribe and analyze meeting recordings you provide
- Generate AI-powered summaries, action items, and workflows
- Process credit purchases and manage billing
- Maintain and improve the Service
- Communicate with you about your account and Service updates
4Third-Party Services
We use the following third-party services to operate Minutes Studio:
- Supabase — Authentication, database, and file storage
- OpenAI — Speech-to-text transcription and AI analysis
- Zoom Video Communications — Meeting recording access (when connected)
- Microsoft Corporation — Teams meeting recording access (when connected)
- Lemon Squeezy — Payment processing
Each third-party processor handles data in accordance with their own privacy policies. Audio data sent to OpenAI for transcription is processed per OpenAI's API data usage policy and is not used for model training.
5Data Retention
Meeting recordings, transcriptions, and AI outputs are stored for as long as your account is active. You may delete individual meetings and their associated data at any time from your dashboard. When you delete your account, all associated data is permanently removed within 30 days.
6Data Security
We implement industry-standard security measures including encrypted connections (TLS), secure token storage, Row-Level Security on all database tables, and strict Content Security Policy headers. OAuth tokens are stored server-side and never exposed to clients.
7Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent for data processing
- Object to or restrict certain processing activities
To exercise any of these rights, contact us at privacy@moskaisoft.com.
8EU/EEA Users (GDPR)
If you are located in the European Economic Area, our legal basis for processing your personal data includes: performance of our contract with you (providing the Service), your consent (connecting third-party integrations), and our legitimate interests (improving the Service and preventing fraud).
Data may be transferred outside the EEA to our service providers. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.
9Cookies
We use essential cookies only for authentication session management. We do not use advertising or tracking cookies.
10Children's Privacy
The Service is not intended for users under 16 years of age. We do not knowingly collect data from children.
11Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.