Privacy Policy

Greg Inc. operates Greg, an AI executive assistant at getgreg.io (“we”, “us”). This policy explains what data we collect when you use Greg, how we use it, who processes it on our behalf, and the choices you have. For anything not covered here, contact [email protected].

• Account data, your email address, name, and password (stored hashed). If you sign in with Apple, Greg also stores an encrypted Apple refresh token, only so it can revoke that sign-in when you delete your account.
• Meeting content, meeting audio captured by the Greg meeting bot or uploaded by you, the transcripts produced from it, and the AI-generated summaries, action items, and analysis derived from those transcripts.
• Calendar metadata, if you connect a calendar: event titles, times, attendee lists, and meeting links, used to schedule the bot.
• Usage and billing data, credit consumption, plan information, and basic product usage needed to operate and improve the Service.

We use your data to provide the Service: joining and recording the meetings you choose, transcribing them, generating summaries, delivering notifications, syncing notes to integrations you connect (including your CRM), and billing. We do not sell your personal data or your meeting content, and we do not use your meeting content to train AI models.

We use a small set of service providers to deliver specific parts of the product. Each receives only the data needed for its function:

• Recall.ai — meeting bots that join Google Meet, Zoom, and Microsoft Teams calls and capture the recording.
• AssemblyAI — speech-to-text transcription of uploaded and self-recorded audio.
• Anthropic — AI summarization and analysis of transcripts (Claude models).
• Stripe — payment processing. We never store your full card details.
• Resend — transactional email, such as meeting-summary notifications.
• Google APIs — calendar and account connectivity. Our use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Meeting history is retained according to your plan's limits (for example, shorter history on the free plan and longer or full history on paid plans). When content ages out of your plan's window or you delete it, it is removed from the product. You can delete your account and associated personal data at any time from Settings → Account in the Greg website or iOS app. Greg permanently deletes the account 14 days after you delete it. Until then, you can restore it by signing in on the Greg website and choosing Restore account. When the account is deleted, Greg also asks Recall.ai and AssemblyAI to delete their copies of its deleted meetings when Greg has an id for that copy. If we restore from a backup, data deleted after that backup was taken can be restored with it. We delete restored meetings again from our deletion record. Encrypted backups are deleted on a rolling basis as newer backups replace them. We keep our security audit log after an account or workspace is deleted. It records account and workspace identifiers, the email domain, and the actions taken and when, but not meeting content. We keep it for security and legal compliance, along with billing records as required for tax and accounting. If you cannot sign in, email [email protected].

We share data only with the subprocessors listed above, with integrations you explicitly connect (such as your CRM, Slack, Asana, Google Docs, or Zapier), within your own workspace, and where required by law. We never sell your data.

Data is encrypted in transit (TLS). Access to production systems and customer content is restricted to authorized personnel with a need to access it, and sessions are protected with signed, expiring credentials. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

You can access and export your meeting content from within the product, and correct your account details in settings. Delete your account from Settings → Account on the website or in the iOS app. Greg permanently deletes the account 14 days after you delete it, and you can restore it before then by signing in on the Greg website. To exercise other access or correction rights — or to ask any privacy question — email [email protected]. Depending on where you live, you may have additional rights under local law (such as the GDPR or CCPA), and we will honor valid requests.

Greg uses a single session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

If we make material changes to this policy, we will notify you by email or an in-app notice before the changes take effect. The effective date at the top of this page always reflects the current version.