Privacy Policy

Last updated: May 2026

What we collect

Output collects only the information needed to provide the service:

• Email address — used to authenticate you via Google OAuth and to contact you about your account.
• Granola API key — stored encrypted (AES-256-GCM) to fetch your meeting notes.
• Monday.com OAuth token — stored encrypted to create tasks in your Monday board on your behalf.
• Slack OAuth token — stored encrypted to send you approval DMs via your connected Slack workspace.
• Meeting metadata — meeting titles and extracted action item text from your Granola notes. We do not store full transcripts or recordings.
• Approval decisions — whether you approved or denied each action item, plus the resulting Monday task ID.

How we use your data

Your data is used exclusively to operate Output: polling for new meeting notes, sending you Slack DMs for approval, and creating Monday tasks when you approve. We do not sell, share, or use your data for advertising or analytics purposes.

Third-party services

• Granola — your API key is used to fetch meeting notes from Granola's API. Subject to Granola's privacy policy.
• Monday.com — your OAuth token is used to create tasks in your board. Subject to Monday's privacy policy.
• Slack — your workspace's bot token is used to send direct messages. Subject to Slack's privacy policy.
• Anthropic — meeting note content is processed by Claude (via Anthropic's API) to extract action items. Per Anthropic's API terms, data sent via API is not used to train models. Subject to Anthropic's privacy policy.
• Supabase — your data is stored in a Supabase PostgreSQL database hosted in the US. Subject to Supabase's privacy policy.
• Stripe — payment processing. We never see or store your card details. Subject to Stripe's privacy policy.

Data security

All integration credentials (Granola API key, Monday token, Slack token) are encrypted with AES-256-GCM before being stored. Encryption keys are stored separately from the database. All connections use TLS in transit.

Data retention

Your data is retained for as long as your account is active. Action item history (meeting titles, item text, approval decisions) is retained to provide the dashboard view. You can delete all your data at any time from Settings → Delete account, or by emailing us.

Your rights

You can request access to, correction of, or deletion of your personal data at any time. To delete your account and all associated data, use the Settings page or contact us. We will respond within 30 days.

Contact

Questions about this policy: james.corr1990@gmail.com