Privacy Policy

Your privacy is important to Account-Able, Inc., a California corporation (“Account-Able,” “Company,” “we,” “us,” or “our”). This Privacy Policy explains what information we collect through our website at account-able.io and our meeting management platform (together, the “Services” or the “System”), how we use and disclose that information, and the choices and rights you have.

This Privacy Policy is incorporated into and subject to our Terms and Conditions of Service. If you do not agree with this Privacy Policy, do not use the Services.

Who This Policy Covers

The Services are built for business use. Depending on how you interact with us, you may be:

• A Customer or account administrator who subscribes to or registers for the Services.
• A User who is invited to use the Services under a Customer’s account.
• A meeting participant whose information is captured through a meeting hosted by a Customer or User.
• A visitor to our website.

If you provide information about another person, including a colleague, client, or meeting participant, you confirm that you have the authority to do so and to consent to the handling of that information as described here.

1. Information We Collect

1.1 Information you provide to us

Account and profile information. When you register for an account or create or update a profile, we collect information such as your name, username, email address, phone number, employer or organization, job title, and, for paid plans, billing contact and payment information. Payment card details are handled by our payment processor and are not stored by us in full. In some cases an administrator creates an account on your behalf and provides this information.

Content. We collect and store the content you create, input, upload, or generate through the Services, including meeting agendas, templates, notes, decisions, assigned tasks, meeting ratings, performance and KPI data, order and transaction records, and files you attach.

Recordings and transcripts. If you use recording or transcription features, we collect and store audio, video, and text transcripts of the meetings you choose to record, along with any content generated from them, such as summaries and recaps. See Section 5.

Communications. We collect information you send us when you request support or otherwise contact us by email, web form, or phone.

1.2 Information we collect automatically

Log and device information. When you use the Services, we record information such as Internet Protocol (IP) address, device identifiers, browser type, operating system, referring and exit pages, pages viewed, features used, search terms entered, date and time stamps, and general location inferred from IP address.

Analytics. We and our analytics providers collect usage information to measure and improve the Services.

Cookies and similar technologies. We use cookies and similar technologies as described in Section 3.

1.3 Information we collect from integrations and other sources

If you connect a third-party service to the Services, such as Zoom, Google Calendar, Gmail, Google Drive, HubSpot, Monday.com, Asana, Wrike, Slack, Microsoft Teams, Office 365, or Loom, we receive information from that service that is necessary to provide the features you enable, such as calendar events, meeting details, contact information, and files you choose to share. We may also receive information from partners and service providers and combine it with information we already hold. See Section 6.

2. How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Services.
• Create and manage accounts and authenticate Users.
• Set agendas, run meetings, assign and track tasks, generate previews and recaps, and produce ratings and performance and KPI reporting.
• Process transactions and send related information, including confirmations and invoices.
• Provide customer support and respond to your requests.
• Send administrative messages, including technical notices, updates, and security alerts.
• Send marketing communications, from which you may opt out.
• Monitor, analyze, and understand usage and trends.
• Detect, investigate, and prevent fraud, unauthorized access, and other unlawful activity.
• Comply with law and enforce our agreements.

We may also use information for other purposes we describe to you at the point of collection.

3. Cookies, Tracking, and Your Signals

We use cookies and similar technologies to keep you signed in, remember your preferences, measure use of the Services, and improve them. You can set your browser to refuse cookies or to alert you when cookies are being sent. If you refuse cookies, some parts of the Services may not work properly.

Do Not Track and Global Privacy Control. Some browsers offer a Do Not Track (DNT) setting. There is no common industry standard for DNT, and we do not currently respond to DNT signals. We do honor the Global Privacy Control (GPC) as an opt-out of any sale or sharing of personal information, as described in Section 10.

4. How We Disclose Information

We do not sell your personal information for money.

We disclose information in the following ways:

Within your organization. Account owners and administrators can access, control, restrict, export, and delete information in and about their account, including content that Users create.

Service providers and subprocessors. We share information with vendors that perform services for us, such as hosting, storage, analytics, payment processing, communications, and the artificial intelligence and transcription providers that power recording and recap features. These vendors are permitted to use the information only to perform services for us.

Public or shared content. Certain features let you make content available to other Users or to people you invite. Consider the sensitivity of information before sharing it.

Legal and protection of rights. We may disclose information if we believe it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to enforce our agreements and policies; to protect the security or integrity of the Services; to protect the rights, property, or safety of Account-Able, our customers, or the public; to respond in good faith to an emergency involving a risk of death or serious injury; or to investigate and defend against third-party claims.

Business transfers. We may disclose or transfer information in connection with, or during negotiation of, a merger, financing, acquisition, or sale of all or part of our business. We will note any change in ownership on our website.

Aggregated or deidentified information. We may share information that does not identify you. We maintain deidentified information without attempting to reidentify it.

5. Recording and Artificial Intelligence Features

The Services include optional recording, transcription, and artificial intelligence features that create summaries, recaps, and other output from meeting content.

Your responsibility for consent. Recording conversations is regulated by law. California and several other states require the consent of all parties to a recorded conversation. If you use recording or transcription features, you are solely responsible for knowing and complying with the laws that apply to you and your participants, and for obtaining all consents required before recording, including the consent of every participant where the law requires it. You agree that you, and not Account-Able, bear this responsibility.

Artificial intelligence output. AI-generated summaries, recaps, action items, and other output can contain errors or omissions and are provided for convenience only. You are responsible for reviewing them before relying on them. We do not warrant the accuracy, completeness, or fitness of any AI output.

How we handle this content. Recordings, transcripts, and AI output are treated as your content and are subject to this Privacy Policy and to our Terms. We use AI and transcription subprocessors to provide these features, and we do not permit those subprocessors to use your content to train their own models except as needed to provide the feature to you or as otherwise permitted by our data processing terms.

6. Third-Party Integrations

When you connect a third-party service, you authorize us to access and use information from that service to provide the features you enable, and you confirm that you have the right to connect it and to share that information with us. Your use of each connected service remains governed by that service’s own terms and privacy policy. We are not responsible for the practices of third-party services.

Google user data. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We request only the limited access needed to provide features you turn on, such as calendar and basic profile access, and we use Google user data only to provide and improve those features, do not sell it, and do not use it for advertising.

7. Data Retention

We keep personal information for as long as needed to provide the Services, to fulfill the purposes described in this Policy, and to comply with our legal obligations, resolve disputes, and enforce our agreements. Following termination of the Services, we return or delete Customer Data as described in our Terms and Conditions of Service, which currently provides for a period of thirty days during which Customer Data may be downloaded before deletion. Residual copies may persist in routine backups for a limited period before they are overwritten.

8. Data Security

We take the security of information seriously and maintain administrative, technical, and physical measures that we consider reasonable and appropriate to protect information against loss, misuse, and unauthorized access, disclosure, or alteration. No method of transmission or storage is completely secure, and hosting data online carries risk. We cannot guarantee absolute security. See our Terms and Conditions of Service for the allocation of risk related to security.

9. Your Choices

Access and update. You may access and update your profile information at any time through your account settings. Some information can be changed only by your administrator.

Marketing. You may opt out of promotional emails using the unsubscribe link in each message. You will still receive administrative messages about the Services.

Deletion and export. If your information is held under a Customer’s account, direct access, correction, export, and deletion requests to that Customer’s administrator, who controls the account.

10. Your California Privacy Rights

This section applies to California residents and describes rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”). When we handle personal information on behalf of a Customer, we act as that Customer’s service provider, and requests should be directed to the Customer.

Categories of personal information we collect

In the past twelve months we have collected the following categories:

• Identifiers, such as name, username, email address, phone number, IP address, and account identifiers.
• California customer records, such as name, contact information, and payment information.
• Commercial information, such as subscription, order, and transaction records.
• Internet or network activity, such as usage data, log data, and analytics.
• Geolocation, meaning approximate location inferred from IP address.
• Audio, electronic, and visual information, such as meeting recordings and transcripts you choose to create.
• Professional or employment information, such as job title and employer.
• Inferences drawn from the above to provide and improve the Services.

Sensitive personal information

Depending on your use, we may collect account log-in credentials and the contents of communications and meetings you create. We use sensitive personal information only to provide the Services you request and for other purposes permitted by the CCPA, and not to infer characteristics about you. We do not use or disclose sensitive personal information for purposes that would give you a right to limit that use.

Sources

We collect personal information from you, from your administrator, from your use of the Services, and from integrations and other sources described in Section 1.

Purposes

We use each category for the business and commercial purposes described in Section 2.

Disclosure

In the past twelve months we have disclosed the categories above to the recipients described in Section 4, including service providers and subprocessors, for business purposes.

Sale and sharing

We do not sell personal information for money, and we do not knowingly share personal information for cross-context behavioral advertising. To the extent our use of analytics or advertising cookies is treated as a sale or sharing under the CCPA, you may opt out by adjusting your cookie settings and by enabling the Global Privacy Control in your browser, which we honor.

Your rights

Subject to verification and to exceptions in the law, California residents have the right to:

• Know the categories and specific pieces of personal information we have collected.
• Know the categories of sources, the purposes, and the categories of recipients.
• Delete personal information we collected from you.
• Correct inaccurate personal information.
• Opt out of any sale or sharing of personal information.
• Not receive discriminatory treatment for exercising these rights.

How to exercise your rights

Submit a request by emailing support@account-able.io or by using the web form at account-able.io/contact. We will take steps to verify your identity before responding and will respond within the time the law requires. You may use an authorized agent to submit a request on your behalf, in which case we may require proof of the agent’s authority and verification of your identity.

Shine the Light

Under California Civil Code Section 1798.83, California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, contact support@account-able.io.

11. Children’s Privacy

The Services are intended for business use and are not directed to children. We do not knowingly collect personal information from anyone under the age of 16. We do not sell or share the personal information of consumers we know to be under 16. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete it. If you believe a child has provided us with personal information, contact us at support@account-able.io.

12. United States Only

The Services are hosted in the United States and are intended for users located in the United States. We do not offer the Services to individuals in the European Union, the United Kingdom, or other regions with differing data protection laws. If you access the Services from outside the United States, you do so on your own initiative and are responsible for compliance with local law, and you consent to the transfer, storage, and processing of your information in the United States.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes, we will revise the effective date at the top and, where appropriate, provide additional notice, such as a statement on the log-in screen or an email. Your continued use of the Services after the revised Policy takes effect means you have read and agree to it.

14. Contact Us

If you have questions or comments about this Privacy Policy or our handling of your information, contact us at:

Account-Able, Inc.
Email: support@account-able.io
Web: account-able.io/contact