A system that remembers every conversation has to earn the right to be trusted with it.

It starts with what we deliberately don't record.

• Only the user records their own voice note, after the customer visit, not during the conversation.

• No customer conversations, phone calls, or meetings are recorded.

• The recording is a personal dictation, comparable to a voice message to yourself.

• The user consciously and manually starts and stops the recording.

A memory is only as trustworthy as its protection.

• All data is encrypted in transit (TLS 1.3) and encrypted at rest (AES-256).

• Audio files are stored in a private storage bucket. Only the user has access.

• Row-Level Security (RLS) ensures each user can only see and edit their own data.

• No data sharing with third parties except carefully vetted sub-processors for AI processing, exclusively within EU data centers.

• Additional security documentation, for example as part of a review by your IT or legal team, is available on request.

Trust also means: nothing happens without you seeing it.

• Users can view, edit, and delete their recordings, deals, and activities at any time.

• Transcripts and extracted data can be corrected before saving.

• Managers only see team data when a user joins a team, never individual recordings or transcripts.

• No hidden tracking or surveillance.

This isn't an exception to GDPR. It's the foundation.

• Data processing based on Art. 6(1)(b) GDPR (contract performance) and (f) (legitimate interest).

• EU-based infrastructure. No data transfer to non-EU countries.

• Data Processing Agreement (DPA) available.

• Right to access, rectification, and erasure fully supported.

And you can leave at any time, without anything left behind.

• Users can delete individual recordings at any time, including audio, transcript, and extracted data.

• Account deletion removes all personal data completely.