Timo

Privacy Policy

Effective 10 September 2026 · Controller: GenAI, LLC

Plain-language summary: we store what you put into Timo so Timo can work for you. Audio is deleted after transcription by default. Transcripts and summaries stay until you delete them. We share data only with the providers needed to run the service, never sell it, and never use it to train models. You can export or delete everything from Settings.

1. What we collect

Account

Your name, email address and profile photo from Google sign-in; your timezone and working-hours preferences.

Calendar

With your permission, event titles, times, locations, attendee counts and meeting links from your Google Calendar, so Timo can avoid conflicts and schedule work. Timo writes events only when you approve them or enable automatic scheduling.

Meetings

Audio you record, the transcript we generate from it, and derived intelligence: summaries, decisions, action items, people, companies, links, numbers, research topics and answers to questions you ask about a meeting.

Workspace

Tasks, notes, research items, booking-page settings and bookings made by your invitees (their name, email and any note they add).

Technical

Device and browser type, approximate location from IP, crash reports and usage events (which features are used, not the content), and server logs.

2. How we use it

We do not sell personal data, show third-party advertising, or use your content to train machine-learning models.

3. Google user data — Limited Use

Timo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, calendar data is used only to display your schedule, detect conflicts and create the events you approve; it is not transferred to others except as necessary to provide these features, is not used for advertising, and is not read by humans except with your explicit consent, for security, or as required by law.

4. Who processes data for us

We use these subprocessors, each bound by contract to process data only on our instructions:

Where a self-hosted AI mode is configured by your workspace administrator, meeting content is processed on infrastructure they control instead of OpenAI.

5. Retention

6. Your rights and controls

From Settings you can disconnect Google Calendar, change audio retention, delete any meeting with its transcript and derived data, export your notes, and delete your account. Depending on where you live you may also have rights to access, correct, port, restrict or object to processing, and to lodge a complaint with a supervisory authority. Write to [email protected] and we will respond within 30 days.

7. Security

Data is encrypted in transit and at rest. Access is scoped per user by database rules; operational keys are stored server-side and never sent to browsers. Locally queued audio on your device is encrypted with a key held in your browser's protected storage until it is uploaded.

8. International transfers

Our providers store and process data primarily in the United States. Where data is transferred from the EEA, UK or Switzerland we rely on Standard Contractual Clauses or an adequacy decision.

9. Children

Timo is not directed to children under 16 and we do not knowingly collect their data.

10. Recording other people

If you record a meeting, you are the controller of the other participants' voices and words for the purposes of that recording. Tell them, obtain consent where required, and honour their requests to delete.

11. Changes

We will post changes here and notify you in the app or by email for material updates.

12. Contact

GenAI, LLC · [email protected] · goserasi.com