Privacy
Spiriq Notes · last updated 20 October 2026
Spiriq Notes is an internal tool of SSK Venture Holdings AB (Sweden). Access is by invitation only. The company is the data controller; questions and requests go to support@spiriq.app.
What we store
| Data | Why |
|---|---|
| Your name, email address and avatar from the Google account you sign in with (through accounts.spiriq.app, the Spiriq sign-in) | To identify you and keep your recordings separate from everyone else's |
| Passkey public keys, session tokens, personal API tokens (only a hash of the secret) | Sign-in and automations such as the iPhone Shortcut |
| Audio of the meetings and voice notes you record, including meetings recorded by the Spiriq Notes meeting bot | Transcription, transcribing again if the first attempt fails, and playback afterwards |
| Video of a meeting, only when you switch video recording on | Playback; you can share it by a link (see below) |
| Transcripts (the recognizer's raw text and the cleaned-up version), captions with speaker names, summaries and their translations, speech-coach reports, practice sessions | The product itself |
| Your vocabulary — names, places and terms you list in Settings | To recognize and spell them correctly |
| Events of the meeting bot's own Google Calendar (title, time, Google Meet link, organiser and guest addresses) — read only, see Google user data | To send the bot to a meeting it was invited to, and to file that recording with the teammate who organised it |
| Your preferences and per-recording cost figures | Settings that follow your account; cost visibility |
| Messages you send through Contact | To answer you |
No advertising, no profiling, no selling of data to anyone.
Where it lives
- Everything is stored on Cloudflare: the database in D1, the audio and video in R2 (Eastern Europe region), in the account of SSK Venture Holdings AB.
- Recordings belong to the account that made them. Other members of the workspace do not see them, administrators included — an administrator manages accounts and keys, not content.
Who processes it besides us
- Cloudflare — hosting, database, file storage, speech-to-text (Workers AI, Whisper) unless another provider is configured, and the meeting bot, which runs in Cloudflare Containers.
- Anthropic (Claude) — the transcript clean-up (fixing misheard words and dropping filler), titles, summaries and their translations, speech-coach reports, practice dialogues. The transcript text, and your vocabulary for the clean-up, are sent for that purpose.
- Google — sign-in; Google Meet, where the meeting bot takes part as a participant; read-only access to the bot account's own calendar; and, only when you press the corresponding button, export to Google Docs or posting a summary to a Google Chat space.
- Groq — an optional transcription provider; used only if an administrator switches it on.
- Resend — only if configured, to deliver Contact messages by email.
These providers state that data sent through their APIs is not used to train their models. We do not send them anything beyond what the feature you pressed requires.
How long
- Recordings, transcripts and summaries stay until you delete them. Deleting a recording deletes its transcript, captions, audio and video.
- A video link works until the video is deleted; deleting the video ends the link at once.
- Calendar events are read when the bot checks for meetings starting now; only the fact that it was sent to a given meeting is kept, so it is not sent twice.
- Deleting a folder does not delete what is inside — those recordings move to the root.
- Session tokens expire after 30 days; personal API tokens do not expire and can be revoked in Profile → Account.
- Contact messages are kept until answered and cleared.
Your rights
You can see, export (.docx, Google Docs, API) and delete your own data from inside the app at any time. Under the GDPR you may also ask for a copy of everything we hold about you, ask for corrections, or ask for your account and its content to be erased — write to support@spiriq.app. We answer within 30 days.
Recording other people
The person who starts a recording is responsible for it. In Sweden and the rest of the EU, recording a conversation you are not part of is not allowed, and recording participants without telling them can be unlawful where you or they are. Say at the start of the call that you are recording, and stop if someone objects.
Spiriq Notes records in two ways: the tab you are in, from your own browser; or its meeting bot, which joins a Google Meet call only when a member of the team sends it there — by inviting the bot's address to the meeting or by pressing the button in the app. The bot appears in the call as a named participant that everyone can see, and leaves when it is left alone. Whoever invited it is responsible for telling the others.
Google user data
Spiriq Notes asks Google for these permissions:
- Sign-in (
openid,email,profile) — your name, email address and avatar, to create and identify your account. - Read-only calendar events (
calendar.events.readonly) — asked only of the meeting bot's own Google account, never of yours. It is used for one thing: seeing which Google Meet meetings the bot was invited to and is starting now, so that it can join and record them. Events are read, never changed, and nothing from the calendar is shown to anyone or used for anything else.
Spiriq Notes' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, not used for advertising, not used to train AI models, and not read by people except where you ask us to for support or the law requires it. The bot's calendar access can be revoked at any time in Admin or at myaccount.google.com/permissions.
Emails we send
When someone shares a meeting summary with you, the email carries an Unsubscribe link and the standard one-click unsubscribe header. Using either adds your address to a suppression list, and Spiriq Notes refuses to send to it again — including from other users of the workspace. To be removed from that list, write to support@spiriq.app.
Cookies
No tracking cookies and no analytics. The app keeps your session token and interface preferences in the browser's local storage; the installed app additionally caches its own files so it starts offline. Profile → Account → Clear cached data removes all of it from that device.
The Chrome extension
The extension records the audio of the call tab you are on and reads the captions that the meeting platform itself displays, in order to attach speaker names. It sends this to Spiriq Notes and nowhere else, it starts only when you press Start (or the voice-note hotkey), and it does not read page content beyond the caption area.
Changes
If this page changes in a way that matters, everyone with an account is told by email. The date at the top always reflects the current version.