Call AssistantPrivacy
What we hold, why, and what we never take.
What signing in gives us
Google sign-in gives us your account identifier and email address. We use the identifier to keep your documents and transcripts separate. We never receive your Google password. Sign-in itself requests no Gmail, Drive, Calendar, or Contacts access. Connecting a calendar is a separate, optional permission described below.
Calendar connections (optional)
When you choose to connect Google Calendar or Microsoft Calendar, the provider asks for separate read-only access. Our service reads the connected account identity, your calendar list, and event details such as titles, times, attendance information, and meeting links. We use this to display upcoming meetings from the calendars you select, open supported meeting links when you click them, link meetings to notes, and calculate availability when you request it. Connecting does not create or edit events, send invitations, join meetings, or start recording.
We store encrypted access and refresh tokens against your Call Assistant account so the connection can continue without signing in to the provider each time. The connected account label and saved calendar selection, including calendar IDs and titles, are also stored. When you create a note from a calendar meeting, its event title, time, provider, event identifier, and meeting link are saved with the note.
If you explicitly include calendar availability in an assistant request, computed available time slots and coverage information are sent to the cloud AI provider with your request. Event titles and attendee details are not included in that availability context. Separately, using AI features on a note can include that note’s title and content.
Disconnecting removes this app’s saved calendar tokens, account label, selection, and pending authorization. Notes you created remain until you delete them or delete your account. Disconnecting does not revoke the permission in Google or Microsoft; you can also remove Call Assistant’s access in your provider account settings. Calendar connections are being rolled out, and availability depends on provider setup and approval.
What you upload
Résumés and documents are stored against your account and used only to answer your questions. They are not used to train a model or shared with other users.
Audio and transcripts
Audio is captured only during a session you start and is streamed to a speech-to-text provider. We do not store the audio itself. Transcripts are stored against your account so you can review them.
Optional website analytics
We ask your permission to use Mixpanel to understand traffic sources, visits, selected actions, approximate location, and time actively using our website and dashboard. Analytics are off until you choose “Accept analytics.” Declining has no effect on access.
Events use random browser and visit identifiers, page categories, event times, coarse browser/device categories, selected actions and validated campaign tags or the referring website’s domain. After a verified Google sign-in, consented dashboard activity can be connected to a pseudonymous account identifier so we can understand how people move from visiting to using Call Assistant. We do not send your email or name to Mixpanel, full page or referrer URLs, arbitrary URL queries or fragments, form entries, interview questions or answers, audio, transcripts, résumés, documents, or job descriptions. We do not enable session recordings or automatic capture of page content.
Mixpanel receives the IP address of each analytics request and, when configured, uses it to infer approximate city, region and country. This is not precise device location. We do not add raw IP addresses to analytics event properties. VPNs and shared networks can affect location accuracy.
Your choice and random browser identifier are stored in this browser’s local storage. Initial traffic-source information is retained there for up to 90 days; a visit identifier expires after 30 minutes without recorded activity. Active time excludes hidden or unfocused pages and stops after one minute without interaction. It is an estimate, not a recording of what you do. If storage is unavailable, these values last only for the open page.
Use “Analytics settings” on the website or dashboard to change your choice. Turning analytics off stops future events and removes the locally stored analytics identifiers and attribution; it cannot retract events already delivered. We honor Global Privacy Control and Do Not Track signals. Choices apply to this browser and website origin, so another device or subdomain may ask separately.
Account access and security logs
Separately from optional analytics, our private access logs record verified account identifiers, the Google sign-in method, request times and request IP addresses to investigate access problems and protect accounts. Access logs are restricted to authorized administrators and retained in Google Cloud Logging for 30 days. We do not send these raw IP access records to Mixpanel.
Deleting your data
You can export or delete your account data from the dashboard.