Privacy Policy

1. Data controller

The controller for personal data processed through the Service is EASD, operating the phrasd product. For privacy requests, contact privacy@phrasd.com or hello@easd.ai.

2. Data we collect

• Account data: name, email address, password (hashed), organization or team details, billing contact information.
• Service content: meeting audio, transcripts, speaker labels, summaries, action items, notes, and files you upload or connect (for example calendar or drive integrations you enable).
• Usage and device data: app version, device type, approximate region, IP address, log events, feature usage, and diagnostic information.
• Payment data: handled by our payment processor (Stripe). We receive subscription status, invoices, and limited billing metadata — not full card numbers.
• Communications: messages you send to support or sales.

3. Purposes and legal bases

• Provide the Service (Art. 6(1)(b) GDPR) — create accounts, record and transcribe meetings, generate summaries, sync integrations you connect, and deliver the product features you request.
• Billing and contracts (Art. 6(1)(b) and (c)) — manage subscriptions, invoices, and legal accounting obligations.
• Security and abuse prevention (Art. 6(1)(f)) — protect accounts, investigate incidents, and keep the Service reliable.
• Product improvement (Art. 6(1)(f)) — understand aggregate usage to improve performance and features. Where we rely on legitimate interests, you may object as described below.
• Communications (Art. 6(1)(b) or (f), or consent where required) — transactional emails and, where permitted, product updates.
• Consent (Art. 6(1)(a)) — optional cookies or marketing where consent is required; you may withdraw consent at any time.

4. Meeting content and AI processing

Audio and derived content (transcripts, summaries, action items) are processed to deliver the Service. Processing may involve subprocessors that provide speech recognition or language model capabilities under data processing terms. Do not record or upload content you are not authorized to process. Where you use phrasd in an employment or team context, your organization may be an independent or joint controller for workplace data — check your employer's policies.

5. Recipients and processors

We use trusted service providers (hosting, databases, email, payments, transcription, AI inference, analytics) as processors under Art. 28 GDPR contracts. We do not sell personal data. We may disclose data if required by law or to protect rights, safety, and the integrity of the Service.

6. International transfers

If personal data is transferred outside the EEA/UK, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs), adequacy decisions, or equivalent measures, together with supplementary protections where needed.

7. Retention

We keep account and billing data for as long as your account is active and as required for legal, tax, and dispute purposes. Meeting content is retained according to your plan, workspace settings, and deletion requests. Logs are kept for a limited period for security and operations, then deleted or anonymized.

8. Your rights

Under the GDPR you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data ("right to be forgotten")
• Restrict or object to certain processing
• Data portability
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local supervisory authority

To exercise these rights, email privacy@phrasd.com. We may need to verify your identity before responding. We aim to respond within one month.

9. Cookies and similar technologies

We use essential cookies and similar storage needed to sign you in, keep sessions secure, and operate the site. Non-essential analytics or marketing technologies, if used, will be disclosed and only activated with consent where required.

10. Children

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it.

11. Changes

We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the Service after changes means you acknowledge the updated policy.

12. Contact

Privacy questions: privacy@phrasd.com. General contact: hello@easd.ai.