This Privacy Policy explains how Bahasalab Automation Pte. Ltd., doing business as Meeting.ai ("Meeting.ai", "we", "us", "our"), collects, uses, shares, and protects personal information when you use our websites, apps, and services (the "Services"). We are the controller of your personal information. If you do not agree with this Policy, please do not use the Services.
You can reach us at legal@meeting.ai or by post at Bahasalab Automation Pte. Ltd., 171 Tras Street, #04-175 Union Building, Singapore 079025.
Information we collect
Information you provide. Account and profile details — your name, email address, and profile photo — obtained when you register with email (a one-time code) or sign in with Google, Microsoft, or Apple. We also collect your workspace and team identifiers and role, your language and timezone preferences, and any messages or feedback you send us.
Meeting and product content. Meeting recordings and audio, and the transcripts, summaries, notes, and Visual Notes generated from them; your chat threads and agent interactions (prompts, responses, and the context the agent uses); files you upload; calendar data from connected Google or Microsoft accounts (events, times, attendees); and contacts derived from your calendar and meetings.
Information collected automatically. Usage and log data (actions taken, feature usage, timestamps, and diagnostic information), device and connection data (IP address, browser and device type, operating system, language), and approximate location inferred from your IP address (for language, regional offers, and security). We do not collect precise GPS location. See our Cookie Policy for cookies and similar technologies.
Payment information. We do not collect or store full payment card numbers. Payments are processed by Stripe, Xendit, the Apple App Store, and Google Play under their own privacy policies; we receive limited transaction data such as status, plan, and billing country.
How we use information
We process personal information to: provide, operate, and secure the Services and your account; capture, transcribe, summarize, and otherwise process meetings and run the AI agent and skills you use; connect the third-party tools you authorize; process payments and manage subscriptions and credits; provide support; maintain security and prevent fraud and abuse; analyze and improve the Services and build new features; send marketing communications where permitted (you can opt out anytime); and comply with legal obligations.
AI processing. Your content is processed by automated systems and AI models, including third-party AI providers acting as our processors, to deliver features such as transcription, summaries, and the agent. We treat the identifiable contents of your meetings as confidential, do not sell them, and do not use them to train publicly available, general-purpose AI models except with your consent or as permitted by law. We may create and use aggregated, de-identified data (which does not identify you) to operate and improve the Services.
Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Services you request); legitimate interests (to secure, analyze, and improve the Services, prevent fraud, and run our business); consent (for non-essential cookies, certain marketing, and any special-category data — which you can withdraw at any time); and legal obligation. Withdrawing consent does not affect processing already carried out.
Analytics, error monitoring, and security tools
We use PostHog for product analytics in a privacy-minimizing, schema-first configuration — we send only defined events and do not transmit names, emails, transcript contents, or recording contents. We use Sentry for error and performance monitoring, configured to strip personal data and associate reports with a user identifier only. We use Google reCAPTCHA for bot and fraud prevention on sign-in, verification, and redemption flows (subject to Google's Privacy Policy and Terms). Analytics are subject to your cookie consent where required — see the Cookie Policy.
How we share information
We share personal information only as needed: with service providers and subprocessors that help us run the Services under contract — including our backend and AI-processing infrastructure, PostHog (analytics), Sentry (error monitoring), Google reCAPTCHA (security), the sign-in providers you connect (Google, Microsoft, Apple, Zoom), payment processors (Stripe, Xendit, Apple, Google), and cloud hosting and content-delivery providers; at your direction, with tools and skills you connect and people you share content with; for legal and safety reasons, to comply with law or protect our rights and users; and in a business transfer such as a merger or acquisition, subject to this Policy. We do not sell your personal information for money.
International transfers
We are based in Singapore, and your information may be processed in Singapore and in other countries where we or our subprocessors operate, which may have different data-protection laws. Where required (for example, transfers out of the EEA or UK), we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Retention
We keep personal information for as long as your account is active and as needed to provide the Services, and afterward only as required for legitimate business or legal purposes (such as tax, accounting, dispute resolution, and security). When no longer needed, we delete or de-identify it, or securely isolate it where deletion is not immediately possible (for example, in backups).
Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or port your personal information, and to withdraw consent. You can review and update much of your information in the app and can request to delete your account. To exercise rights, email legal@meeting.ai; we respond within the time required by law (generally within one month under the GDPR). You will not be discriminated against for exercising your rights.
In the EEA, UK, or Switzerland, you may also lodge a complaint with your local supervisory authority, the UK ICO, or the Swiss FDPIC. You can opt out of marketing emails at any time; we may still send service and transactional messages.
United States — California and other states
If you are a California resident, the CCPA/CPRA gives you rights to know, access, correct, and delete your personal information and to opt out of its "sale" or "sharing", and not to be discriminated against for exercising them. We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising. To exercise rights, contact legal@meeting.ai. Residents of other US states with similar laws have comparable rights, which we honor where applicable.
Singapore (PDPA)
We handle personal data in line with Singapore's Personal Data Protection Act. You may request access to or correction of your personal data, and withdraw consent, by contacting legal@meeting.ai.
Children
The Services are for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we will take reasonable steps to delete it.
Security
We use appropriate technical and organizational measures, including encryption in transit (TLS), access controls, and a limited-access model for personnel. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Protect your account credentials and use the Services in a secure environment.
Changes to this Policy
We may update this Policy from time to time. We will update the "Last updated" date and, for material changes, take reasonable steps to notify you. Your continued use after changes take effect means you accept the updated Policy.
Contact
Questions or requests: legal@meeting.ai — Bahasalab Automation Pte. Ltd., 171 Tras Street, #04-175 Union Building, Singapore 079025.