Privacy Policy for PeopleLensAI

PeopleLensAI ("we," "our," or "us") is committed to protecting your privacy and ensuring you understand how your data is handled. This Privacy Policy explains our practices regarding the collection, use, and disclosure of information when you use our Chrome Extension ("Extension") and Web Application ("App") (collectively, the "Services").

1. Data Collection Summary

2. Audio Recording & Consent

• User Responsibility: You, the user, are responsible for obtaining explicit consent from all meeting attendees before recording begins.
• Consent Procedure: You must inform attendees that:
  1. The meeting is being recorded for transcription and analysis.
  2. They have the right to decline or withdraw consent at any time (users must stop recording if consent is withdrawn).
• Compliance: Failure to obtain necessary consent may violate local laws (e.g., GDPR, CCPA) or platform policies.

3. How We Use Your Data

• Service Provision: Processing audio to generate transcripts, summaries, and candidate scores.
• Communication: Sending service-related notifications or updates.
• Compliance: Enforcing our Terms of Service and applicable laws.
• AI Processing: Audio data is processed by third-party AI providers (e.g., Deepgram, OpenAI) solely for the purpose of generation. These providers are contractually bound to privacy standards and do not use your data to train their models.

4. Data Storage & Security

• Encryption: All sensitive data, including transcripts and candidate information, is encrypted at rest (AES-256) and in transit (TLS 1.2+).
• Retention: Data is retained only as long as necessary to fulfill the purposes outlined here or as required by law.
• Tenant Isolation: We use strict row-level security (RLS) to ensure your data is accessible only to authorized users within your organization.

5. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate data.
• Erasure ("Right to be Forgotten"): Request deletion of your data.
• Restriction: Limit how we process your data.
• Portability: Receive your data in a structured, machine-readable format.

To exercise these rights, please contact us at privacy@peoplelensai.com.

6. Third-Party Services

We may share data with trusted third-party service providers to operate our Services:

• Deepgram: Speech-to-Text transcription.
• OpenAI / Google Gemini: Large Language Model processing.
• Supabase: Database and authentication services.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated "Effective Date".