Privacy Policy | Granola

1. Scope of This Privacy Policy

Granola, Inc. and its affiliated companies, including Granola Labs Ltd. (“Granola”, “we”, “us”, or “our”) provide an AI-powered notetaking assistant, which includes Granola’s website at renderai.fit, mobile apps, desktop applications, service features, integrations, and workflows (the “Services”).

This Privacy Policy explains how we collect, store, process, transfer, and disclose information about you when you visit our website, use our software applications, communicate with us, or use any related tools.

2. Information We Collect

We collect information you provide directly to us, information collected automatically, and information from third-party integrations:

Account & Profile Information

Name, business email address, avatar, company name, team members, billing address, and payment token details (processed securely via Stripe).

Meeting Audio & Transcripts

Audio recorded through your local microphone or system audio during authorized meetings, raw text transcripts generated, AI summaries, bullet points, action items, and manual edits you make.

Calendar & Third-Party Integration Data

When you connect Google Calendar or Microsoft Outlook, we sync upcoming meeting titles, participants, dates, and times to organize your notes automatically.

Device & Usage Information

Device type, operating system version (macOS, Windows, iOS), app version, IP address, performance diagnostics, and crash logs to maintain app stability.

3. AI Model Training & Data Privacy

Zero-Retention & Non-Training Policy

We do NOT sell your data, and we do NOT use your meeting audio, notes, or company knowledge to train third-party foundation AI models (such as OpenAI, Anthropic, or Google models).

When you request note enhancements or ask questions in Chat, the necessary transcript context is securely dispatched via encrypted enterprise APIs with strict zero-data-retention (ZDR) agreements. Your data is processed transiently and never stored by our model providers.

4. Security & Compliance

Granola is built with industry-standard security and compliance controls designed to meet the strict demands of enterprise IT teams:

SOC 2 Type II Certified

Independently audited controls across security, availability, and confidentiality.

GDPR & UK DPA Compliant

Full support for EU/UK Data Processing Addendum (DPA) and data subject rights.

HIPAA Eligible

Business Associate Agreements (BAAs) available for healthcare and health-tech teams.

AES-256 & TLS 1.3 Encryption

All data is encrypted in transit and at rest using modern cryptographic ciphers.

5. Your Privacy Rights

Regardless of your location, you have strong rights concerning your personal information:

Access & Export: You can export your meeting notes, transcripts, and account data at any time in markdown, PDF, or raw text formats.
Correction & Rectification: You can edit or correct any information directly inside your notes or account settings.
Deletion: You can delete individual meeting notes or request complete account erasure by contacting support.
Opt-Out of Communications: You may unsubscribe from marketing emails at any time using the unsubscribe link provided in every message.

6. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled, please contact our team:

Granola Labs Ltd. / Granola, Inc.
Attention: Data Protection Officer
Email: privacy@renderai.fit
Security team: security@renderai.fit