Privacy Policy
Last updated: April 12, 2026
Information We Collect
We collect information you provide directly: account information (name, email, organization), meeting recordings (audio/video files you upload or record through integrations), and usage data (how you interact with the service). We also collect technical data through cookies and similar technologies, including browser type, device information, and IP address.
How We Use Your Information
We use your information to provide and improve our services: processing meeting recordings for transcription, summaries, and action items; maintaining and improving product functionality; ensuring security and preventing abuse; and communicating with you about your account and service updates.
Data Processing
Your meeting recordings are processed by AI models to generate transcripts, summaries, and action items. Raw audio/video files are automatically deleted after processing is complete. Your data is never used to train, fine-tune, or improve any AI model - ours or third-party. Only the resulting transcripts and summaries are stored according to your retention settings.
Data Sharing
We do not sell your personal data. We share data only with infrastructure providers necessary to operate the service: cloud hosting (AWS), AI model providers for transcription and summarization. All providers are bound by data processing agreements. We may disclose data if required by law or to protect our rights.
Data Retention
Account data is retained while your account is active and for 30 days after deletion. Meeting recordings are processed and raw files deleted automatically. Transcripts and summaries are retained according to your account settings - you can set auto-delete policies or delete individual items at any time. Backup copies are purged within 30 days of deletion.
Your Rights
Under GDPR (Articles 15-22) and applicable laws, you have the right to: access your personal data, correct inaccurate data, request deletion of your data, export your data in a portable format, object to certain processing activities, and restrict processing in certain circumstances. To exercise these rights, contact privacy@ironmemo.com.
Security
We implement appropriate technical and organizational measures to protect your data: AES-256 encryption at rest, TLS 1.3 encryption in transit, role-based access controls, and regular security assessments. For full details on our security practices, visit our Security page at /security.
International Transfers
If your data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission and adequacy decisions where applicable. You may choose EU data residency for your account.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our website at least 30 days before the changes take effect. Your continued use of the service after changes constitutes acceptance of the updated policy.
Contact Us
For questions about this Privacy Policy or our data practices, contact us at privacy@ironmemo.com. Our Data Protection Officer can be reached at the same address. For EU residents, you have the right to lodge a complaint with your local data protection authority.