Privacy Policy
Last updated: August 25, 2026
1. Introduction
Minutes Studio ("we", "us", "our") is operated by Moskai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our meeting transcription and analysis service ("Service").
2. Information We Collect
2.1 Account Information
When you create an account, we collect your email address and authentication credentials managed through our identity provider (Supabase Auth).
2.2 Meeting Data
When you upload audio files or connect third-party services (Zoom, Microsoft Teams), we process:
- Audio recordings of your meetings
- Transcriptions generated from those recordings
- AI-generated summaries, action items, decisions, and workflow outputs
- Meeting metadata (title, date, duration, participant names mentioned in recordings)
2.3 Integration Data
When you connect Zoom or Microsoft Teams, we store OAuth tokens necessary to access your meeting recordings. We access only the permissions you explicitly grant:
- Zoom: user:read (profile info), recording:read (meeting recordings)
- Microsoft Teams: User.Read, OnlineMeetings.Read, OnlineMeetingRecording.Read.All
2.4 Usage and Measurement Data
We collect credit usage, billing transactions, and basic interaction logs to operate the Service.
If you consented to marketing and analytics cookies, we also store the source that first brought you to the site, linked to your account: utm_source, utm_medium, utm_campaign, utm_content, utm_term, the referrer, the landing page, and the first-seen time. We additionally record your cookie choice and the date you made it; that record is kept regardless of your choice, because it is what stops measurement from running without consent.
3. How We Use Your Information
- Transcribe and analyze meeting recordings you provide
- Generate AI-powered summaries, action items, and workflows
- Process credit purchases and manage billing
- Maintain and improve the Service
- Communicate with you about your account and Service updates
- Measure the performance of our advertising campaigns and improve the product — only with your explicit consent
4. Third-Party Services
We use the following third-party services to operate Minutes Studio:
- Supabase — Authentication, database, and file storage
- AssemblyAI — Speech-to-text transcription and speaker identification
- OpenAI — AI analysis of meeting transcripts, and speech-to-text transcription as a fallback
- Resend — Delivery of account and notification emails
- Zoom Video Communications — Meeting recording access (when connected)
- Microsoft Corporation — Teams meeting recording access (when connected)
- Lemon Squeezy — Payment processing
- Meta Platforms Ireland Ltd. — Ad measurement. Only when you give explicit consent; the email address and the account identifier are transmitted irreversibly hashed (SHA-256), never in plain form.
- PostHog — Product analytics; data is processed within the European Union. Only when you give explicit consent.
Each third-party processor handles data in accordance with their own privacy policies. Audio recordings are sent to AssemblyAI for transcription, and to OpenAI only if the fallback path is used. Action reminders and shared summaries are delivered through Resend and contain meeting titles and task text. Data sent to the OpenAI API is not used to train OpenAI's models, and AssemblyAI's model improvement program is disabled for our account, so your audio and transcripts are not used to train its models either.
5. Data Retention
Meeting recordings, transcriptions, and AI outputs are stored for as long as your account is active. You may delete individual meetings and their associated data at any time from your dashboard. When you delete your account, all associated data is permanently removed within 30 days.
6. Data Security
We implement industry-standard security measures including encrypted connections (TLS), secure token storage, Row-Level Security on all database tables, and strict Content Security Policy headers. OAuth tokens are stored server-side and never exposed to clients.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent for data processing
- Object to or restrict certain processing activities
To exercise any of these rights, contact us at privacy@moskaisoft.com.
8. EU/EEA Users (GDPR)
If you are located in the European Economic Area, our legal basis for processing your personal data includes: performance of our contract with you (providing the Service), your consent (connecting third-party integrations), and our legitimate interests (improving the Service and preventing fraud).
For marketing and analytics cookies and for ad measurement, our sole legal basis is your explicit consent (GDPR Art. 6(1)(a)). You can withdraw that consent at any time; withdrawal applies going forward and does not affect processing carried out before it.
Data may be transferred outside the EEA to our service providers. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.
9. Cookies
We use essential cookies for authentication and session management. Marketing and analytics cookies are used only with your explicit consent; if you decline, they are not loaded and no ad measurement takes place. You can withdraw your consent at any time with the "Change cookie preferences" control in the Cookie Policy. Measurement in your browser stops in every case, and the attribution record stored on your device is deleted. If you are signed in when you withdraw, your preference is reported to our server as well and the server-side transmission stops; if you are signed out, the server-side record is updated only after you sign in and state your preference again.
10. Children's Privacy
The Service is not intended for users under 16 years of age. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.
12. Contact
For privacy-related questions or requests, contact us at:
Moskai
moskaisoft.com