Privacy Policy

This policy explains how Taplo collects, uses, stores and shares personal data when you use our website (taplo.app) and our applications. If anything is unclear, contact us at gerald@taplo.app.

Summary

Your data stays in the EU. We store and process customer data within the EU, and so do the service providers we use to run Taplo.
Audio is never saved. It is used only to create the transcript.
We never train AI models on your data. The AI providers we use have zero data retention: nothing is stored after a request has been processed.
Everything is encrypted. All traffic is encrypted in transit and stored data is encrypted at rest.
Delete means delete. When you delete something, we delete it on our side too, including from backups.
You are in control. You can access, correct, export or delete your data at any time.

1. Who we are

Taplo (“we”, “us”, “our”) provides applications that capture video meetings and in-person conversations and turn them into a shared memory of people, companies and next steps, with transcripts, summaries and briefings. Taplo is operated from Sweden and is the controller for the personal data described in this policy, except where we process data on behalf of a customer organisation, in which case that organisation is the controller.

2. What this policy covers

This policy applies when you visit our website, download or use our applications, create an account, connect other tools to Taplo, or contact us. It does not cover third-party websites or services you use outside Taplo.

3. Data we collect

In short: we collect what you give us, what you choose to capture or connect, and the technical data needed to keep the service running.

Account and contact details: such as name, email address, job title and billing information if you subscribe to a paid plan.
Conversation content: transcripts, notes, summaries, next steps and context you add, such as an agenda or details about a person or company. Audio is used only to create the transcript and is never saved.
Content from tools you connect: for example emails, messages or records from services you choose to connect. We only access what the connection you enable allows, and you can disconnect at any time.
Usage and technical data: app version, device and operating system, logs, crash reports and usage metrics that help us keep the service reliable and secure.
Website data: necessary cookies so taplo.app can work, your cookie choice stored on this device, and optional cookies only after you accept.

Sensitive information. Conversations can contain sensitive information. We process it only to provide the service to you, and we do not use it for any other purpose.

Cookies

taplo.app uses necessary cookies so the site can work. Optional cookies, if we add them, run only after you accept in the cookie banner. Your choice is stored on this device. To choose again, clear site data for taplo.app and visit the site once more.

4. How we use your data

In short: to provide and improve Taplo, support you, keep the service secure and meet our legal obligations.

To provide Taplo’s features, such as transcripts, summaries, profiles, briefings and next steps;
To create and manage your account and the workspace you share with your team;
To process subscriptions, invoices and support requests;
To maintain and improve the service using technical and usage data, such as error logs and performance data;
To detect and prevent abuse, fraud and security incidents;
To comply with legal obligations and enforce our terms.

We do not sell your personal data. We never use your conversations, transcripts, summaries or connected content to train AI models.

5. Legal bases

Under the GDPR and UK GDPR, we process personal data on one or more of these legal bases:

Contract: to deliver the service you signed up for;
Legitimate interests: for example to secure our systems, improve the product and communicate about your account, always balanced against your rights;
Consent: where required, for example for optional marketing emails. You can withdraw your consent at any time;
Legal obligation: where the law requires us to keep or disclose data.

6. Capturing conversations and consent

Taplo captures conversations only when you start it, and it is built to be used with permission. You are responsible for informing participants and obtaining any consent required by law, and for following the privacy, employment and recording rules that apply to you. Taplo provides the tools; it does not decide whether capturing a specific conversation is lawful for you.

7. Who we share data with

In short: only with service providers that help us run Taplo, under contract, within the EU.

We use a limited number of carefully selected service providers (sub-processors) that process data on our instructions and under written agreements. They may not use your data for their own purposes. They include providers of:

Cloud hosting, storage and infrastructure;
Meeting capture and transcription;
AI models used to analyse transcripts and generate text, with zero data retention and no training on your data;
Payments, if you purchase a subscription.

8. Where your data is processed

We store and process customer data within the EU. Our sub-processors also process data within the EU.

9. How long we keep data

In short: as long as your account is active, and no longer than three months after it is closed.

We keep personal data for as long as your account is active and as needed to provide the service. When you delete content, we delete it from our systems, including from backups. When an account is closed, we delete the associated personal data within three (3) months, unless the law requires us to keep certain information longer, for example accounting records.

10. How we keep data secure

We use technical and organisational measures to protect personal data, including:

Encryption of all network traffic in transit using TLS;
Encryption of stored data at rest;
Access controls, so only authorised people and systems can access data;
Monitoring and continuous improvement of our security.

No method of transmission or storage is completely secure. Please also protect your device and account credentials.

11. Your rights

Under the GDPR, you have the right to access your personal data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you can withdraw your consent at any time without affecting earlier processing.

To make a request, email gerald@taplo.app. We may need to verify your identity before we respond. You also have the right to lodge a complaint with a supervisory authority. In Sweden, that is Integritetsskyddsmyndigheten (IMY).

12. Age limit

Taplo is a business tool for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it.

13. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with an updated date, and tell you in the app or by email if the changes are significant.

14. Contact

Questions about this policy or how we handle your data: gerald@taplo.app.