Privacy Policy

Last updated: June 27, 2025

Revenue-Growth.ai (“we”, “us”, or “our”) respects your privacy and is committed to protecting it. This Privacy Policy explains what information we collect through our Google Meet Transcript Attachment app and website, how we use and share that information, and your rights regarding your data. Our application enables users to access their Google Meet transcripts (stored in Google Drive) and attach selected transcripts to sales deals in HubSpot or Salesforce CRM. We collect and process personal data only as needed to provide and improve this functionality, in accordance with applicable law (including GDPR and CCPA) and in compliance with Google’s API Services User Data Policy.

By using the app, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the service.

Information We Collect

We only collect the minimum data necessary to operate the application and provide the transcript attachment feature. This includes:

• Google Meet Transcript Content: The text content of your meeting transcripts (retrieved from your Google Drive with your permission). These transcripts may contain personal information from you or meeting participants (e.g. names, spoken statements).
  
  
• Google Drive File Metadata: Basic metadata about your transcript files (such as file names, IDs, sizes, and timestamps) needed to identify and fetch the correct files.
  
  
• CRM Data (Deal Information): Identifiers and names of your deals or records in HubSpot or Salesforce that you choose to link transcripts to. This may include the deal title, ID, or associated contact/account name, as retrieved from your CRM via its API.
  
  
• Authentication Tokens: OAuth tokens and credentials for third-party services (Google, HubSpot, Salesforce) obtained when you connect those accounts. These tokens grant our app access only within the scope of permissions you approve (e.g. read your Drive transcripts, or add an attachment/note to a CRM deal).
  
  
• User Account Information: If you register an account with us or sign in via Google, we may collect basic profile information such as your name and email address. This is used to identify your account and communicate with you (for example, sending service notifications or support responses).
  
  
• Usage Data: Information about how you interact with the app, such as the actions you perform (e.g. attaching a transcript to a deal), timestamps, and frequency of use. This may include log data like your IP address, browser type, device information, and error logs when you use our web interface.
  
  
• Technical Logs: Our systems automatically record technical details when the app is used, such as API request logs, error messages, and performance metrics. These logs help us troubleshoot issues and secure our service.
  
  

The table below summarizes the categories of data, their sources, the purpose for collecting/using each, and the legal basis for processing (under GDPR where applicable):

‍

‍

We do not collect any sensitive personal data categories beyond what is described above. In particular, our app does not access any of your data from Google services other than the Google Drive transcripts you explicitly select, and we do not use any Google API scopes classified as Restricted by Google (only the necessary Sensitive scope for Drive file access is requested).

How We Use Your Information

We use the collected information strictly to operate, maintain, and improve the service’s functionality for you. Specifically:

• Providing the Service: We use Google Meet transcript data and CRM data to perform the core function of the app – retrieving your transcripts and attaching them to the designated HubSpot/Salesforce deal as instructed. This includes displaying your available transcript files, allowing selection, fetching the file content, and creating an attachment or note in your CRM with that content. We only use the transcript content for this transfer purpose and not for anything else.
  
  
• No Permanent Storage of Transcript Content: Our application acts as a pass-through. This means we process the transcript file in memory (or temporary storage) to send it to your CRM, but we do not store the transcript text on our servers after the process is complete. Once the transcript is successfully attached to your CRM record, the content is not retained by us. (Your transcript remains available in your own Google Drive and in your CRM, but not with us.)
  
  
• Operating and Improving the App: We use usage and technical data (e.g. logs, analytics) to ensure the app is running securely and efficiently. For example, we might analyze usage patterns to improve the user interface or to add features, fix errors by examining error logs, and use technical information to scale our infrastructure. Any analysis of usage data is done in aggregate or in a manner that does not target any specific user unnecessarily.
  
  
• Customer Support and Communication: If you contact us for support, or if we need to inform you of important service updates (such as changes to this Policy or interruptions to the service), we will use your contact information (like email) to communicate with you. We may also send transactional notifications (for example, confirmation of a successful attachment action, or security alerts like a new device login). We will not send you marketing emails unless you have explicitly opted in.
  
  
• Security and Fraud Prevention: We may use IP addresses, device information, and account data to help protect our users and our service against fraud, abuse, or security risks. This can include detecting suspicious activities (e.g., an unusually high number of transcript attachments in a short time from one account might trigger an alert), and ensuring users’ accounts are only accessed by authorized persons.
  
  

We do not use personal data for any form of advertising or profiling beyond the service’s functionality. In particular, we do not sell or rent your personal information to third parties, and we do not use your data for advertising purposes . Any data we collect is used solely to deliver the service to you and for the internal purposes outlined above.

Legal Bases for Processing

We process personal data only when we have a valid legal basis to do so under applicable data protection laws (such as the GDPR for users in the European Economic Area). The legal bases we rely on are:

• Contractual Necessity: In most cases, our processing is necessary to perform the contract between you (the user) and us, or to take steps at your request before entering into such a contract. For example, when you use our app to attach a transcript, we must process the transcript content, Google Drive data, and CRM data as part of delivering the service you requested. We consider our service usage terms as a contract with you that covers this data processing.
  
  
• User Consent: Where required, we rely on your consent. For instance, when you connect your Google account and grant our app permission to access your Drive transcripts, you are consenting to that access. You may revoke this consent at any time by disconnecting our app’s access via your Google account settings (which will prevent further data access). Similarly, connecting your HubSpot or Salesforce account is a form of consent to interact with your CRM data. In general, by voluntarily providing or selecting any data in the app, you consent to our processing of that data for the stated purpose. If we ever seek to use your data for a new purpose not described here, we will ask for your consent.
  
  
• Legitimate Interests: We process certain data as needed for our legitimate interests, in a manner that does not override your privacy rights. Our legitimate interests include improving and securing our service, communicating with you about product updates or security notifications, and understanding how the app is used. For example, we have a legitimate interest in collecting error logs to maintain the security and integrity of the service. When relying on this basis, we ensure that the processing is not overly intrusive and that it is limited to what is necessary (and you have rights to object, as described below).
  
  
• Legal Obligation: If we are required by law to retain or disclose certain information (for example, a court order to retain data, or obligations under financial/reporting laws if any payments are involved), we will do so to comply with that legal obligation. We will only disclose what is mandated by law.
  
  

How We Share or Disclose Information

We understand that your data is private, and we only share personal information in a few limited scenarios, always in line with the purposes above:

• With Your Chosen CRM Services: By design, the core function of our app is to send your transcript content to a third-party CRM system (HubSpot or Salesforce) at your direction. When you choose to attach a transcript to a deal, we will send the relevant data (e.g. transcript text and file name) to the CRM via their API, creating a note or attachment on that deal record. This transfer is only initiated by your action and goes to the account on the CRM that you have authorized. Please note that once data is transferred into your CRM, it will be subject to that platform’s own privacy policy and governance (e.g., it becomes part of your records in HubSpot or Salesforce). We are not responsible for how your CRM provider stores or uses that data after our integration delivers it (though it should only be within your account on that service).
  
  
• Service Providers (Subprocessors): We use trusted third-party service providers to help us operate and support the application. These include:
  
  
  
  • Cloud Hosting and Storage – We host our application and backend on secure cloud infrastructure (such as Amazon Web Services or Google Cloud Platform). All data (including any temporary transcript data and stored tokens or logs) resides on these servers. Our cloud provider acts as a data processor for us, storing data under strict security measures and only as we direct.
    
    
  • Database and Logging Services – We use secure databases to store information like account details and tokens, and logging services or tools to record application events. Access to these stores is restricted and encrypted.
    
    
  • Analytics/Monitoring Tools – (If used) We may utilize analytics or error tracking services to understand app performance (for example, Google Analytics for web traffic, or Sentry for error logging). These tools would only receive minimal data (like generic app usage info or crash reports) and are configured not to collect any unnecessary personal data or any transcript content.
    
    
  • Email/Communication Providers – If we send emails (for support or notifications), we might use an email delivery service (e.g., SendGrid or similar) which will process your email address and the content of the message.
    
    
• Each of these service providers is vetted for security and privacy practices. They are bound by contracts (Data Processing Addendums) to only process personal information on our behalf and in compliance with this Policy and applicable laws. They cannot use your data for their own purposes.
  
  
• Business Transfers: If in the future our company is involved in a merger, acquisition, investment, or sale of all or a portion of its assets, personal data may be transferred to the new owner/parties as part of that deal. If that happens, we will ensure the new owner honors the commitments we’ve made in this Privacy Policy, or we will notify you and give you an opportunity to opt-out or delete your data before the transfer occurs.
  
  
• Legal Compliance and Protection: We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to (i) comply with a legal obligation, government request, or applicable law; (ii) protect and defend the rights or property of Revenue-Growth.ai (including the enforcement of our Terms and Conditions); (iii) act in urgent circumstances to protect the personal safety of users of the service or the public; or (iv) protect against legal liability. We will only share the information that is reasonably necessary for these purposes and will object to requests we believe are improper.
  
  
• With Your Consent: Aside from the cases above, if we ever need to share your information for any other purpose, we will describe and request your explicit consent. For instance, if we wanted to use a testimonial that contains your name or wanted to share data with a new integration partner, we would ask you first.
  
  

No Selling of Data: We want to reiterate that we do not sell your personal information to data brokers or marketers . We do not share your data with third parties for them to use for their own advertising or any purpose unrelated to providing you with our service.

No Advertising Use: We also do not use any data we access (Google transcripts, CRM data, or any personal data) to serve you targeted ads or to build advertising profiles. The data is used strictly for the functions and improvements described in this policy, in line with Google’s Limited Use requirements under their API policies .

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. In general:

• Google Meet Transcript Content: As noted, we do not store transcript contents beyond the immediate processing needed to attach them to your CRM. This means that after the attachment operation is completed, we do not keep a copy of the transcript text in our systems. (Temporary cached data or server memory handling the transcript is cleared shortly after completion.) If, for some reason, a transcript is cached or logged (for example, in an error log due to a processing failure), we will purge such logs regularly. In any case, we aim to retain zero transcript content long-term.
  
  
• Account and Authentication Data: We retain your account information (like your name, email) and the OAuth tokens while your account is active so that you can continue to use the service without re-authorizing every time. This data is kept until you delete your account or unlink the integration. If you choose to disconnect our app’s access to Google or CRM, we will delete the corresponding stored tokens. If you delete your account with us, we will delete your associated personal information (account info, tokens, any settings) from our production databases within a reasonable time frame (typically immediately or within 30 days, save for any data we are required to retain by law).
  
  
• Usage Logs: Our server logs and usage data are generally retained for a short period for analysis and security (for example, raw logs might be kept for 30-60 days before automatic deletion). Aggregated usage statistics (which do not identify individuals) may be retained longer for historical analysis.
  
  
• Backups: Like many services, we perform routine backups of our systems for reliability. Backup files may contain your personal data (e.g., account info) and are retained securely for a limited period before they are overwritten. Even after you delete your data from our live systems, it might remain in backups for a short duration until those backups cycle out. We protect any such data in backups with the same security measures until deletion.
  
  
• Legal Requirements: If we are under a duty to retain certain data for legal compliance (such as tax, audit, or court order), we will hold that data for the required period. During that time, we won’t actively use the data except for the compliance purpose.
  
  

After the retention period expires, we will delete or anonymize your personal information. If deletion or anonymization is not possible (for example, because the data is stored in backup archives), then we will securely store the data and isolate it from any further use until deletion is possible.

Data Security

We take the security of your data very seriously. We implement industry-standard security measures to protect against unauthorized access, alteration, disclosure, or destruction of personal information. Our security practices include:

• Encryption: All communications between your browser and our service, as well as between our service and Google’s and the CRMs’ APIs, are encrypted in transit using HTTPS (TLS). Additionally, any sensitive data we store (such as OAuth tokens and personal identifiers) is encrypted at rest in our database . This means that even if our storage were accessed without authorization, the data would be unintelligible without the decryption keys.
  
  
• Access Controls: We restrict access to personal data to only those team members and service providers who need it to operate or support the service. For example, our support staff will only access your account data if needed to assist you with a problem and with your permission. All staff are bound by confidentiality obligations.
  
  
• Authentication Security: When you log into our service (if applicable), we follow best practices for account security. If we implement passwords, they are hashed and salted (not stored in plaintext). However, in most cases you will authenticate via OAuth with Google or other providers, meaning we do not handle your password directly. We strongly encourage you to protect your own account credentials and to use multi-factor authentication on your Google and CRM accounts for added safety.
  
  
• Monitoring and Testing: We regularly monitor our systems for vulnerabilities or unauthorized access. We use firewalls and network security measures to protect our infrastructure. We also keep our software and libraries up to date to patch security vulnerabilities. Penetration tests or security audits may be conducted periodically to evaluate our defenses.
  
  
• Token Security: OAuth access tokens and refresh tokens that our app stores are kept securely and are typically encrypted in our database . These tokens are only used to make API calls on your behalf for the intended purpose (fetching transcripts or updating CRM records). We do not expose these tokens to any outside party, and they are transmitted only to the relevant Google/CRM API endpoints over secure channels.
  
  
• Limited Data Access by Personnel: We follow Google’s Limited Use guidelines which, among other things, restrict human access to your Google data. Our systems are designed so that transcript content is processed automatically and not viewed by our team. We do not read or analyze the content of your transcripts except if it is absolutely necessary to do so for security or debugging and only after obtaining your permission, in accordance with Google’s policies . Routine operations do not involve any person at our company looking at your transcript text.
  
  

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. However, we continuously work to update and improve our safeguards. In the unlikely event of a data breach that affects your personal data, we will notify you and the appropriate authorities as required by law.

Your Rights and Choices

Users in different jurisdictions have rights regarding their personal data. We are committed to honoring those rights. Below is a summary of your rights and how you can exercise them:

• Access and Portability: You have the right to request a copy of the personal information we hold about you and to obtain it in a portable format. This includes data like your account info and any relevant usage data tied to you. You can request this by contacting us (see Contact section below). We will provide it to you electronically in a common format (such as JSON or CSV).
  
  
• Correction (Rectification): If any of your information is inaccurate or incomplete, you have the right to ask us to correct it. For example, if your name or email on file is wrong, please let us know and we will update it.
  
  
• Deletion (Right to be Forgotten): You may request that we delete the personal data we hold about you. For instance, you can delete your account via our app interface (if available) or by contacting us. Upon such request, we will delete or anonymize your personal information from our active databases, except to the extent we are required to retain it (as explained in Data Retention). Deleting your account or our app’s access will also revoke our ability to access your Google and CRM data.
  
  
• Withdrawal of Consent: If we are processing any of your data based on your consent, you have the right to withdraw that consent at any time. For example, you can disconnect our app from your Google account via your Google account’s security settings, which withdraws the consent for us to access your Google Drive. Similarly, you can disconnect from your CRM. Withdrawing consent will stop the related processing moving forward, but won’t affect processing already done.
  
  
• Objection to Processing: You have the right to object to certain processing activities that are based on our legitimate interests. If you object, we will re-evaluate whether we have compelling grounds to continue the processing. For example, you can object to us using your data for improvement analytics; if you do, we will disable or anonymize your data in such analytic processing.
  
  
• Restriction of Processing: You can ask us to restrict or pause processing of your data in certain circumstances (for example, while a data correction request is being resolved, or if you contest the lawfulness of processing).
  
  
• Non-Discrimination: If you exercise any of your rights (such as requesting deletion or opting out of a certain data use), we will not discriminate against you for doing so. In other words, we will not deny you the service or provide a lesser experience just because you exercised your privacy rights. However, please note that some features require certain data – for instance, if you revoke our Google Drive access, we cannot provide the core transcript attachment feature. But we will inform you of such consequences at the time of your request so you can make an informed decision.
  
  
• California “Shine the Light”: California residents may request a list of any third parties to which we have disclosed personal information for direct marketing purposes. However, be advised that we do not disclose personal information to any third party for direct marketing without your permission, so in practice there should be nothing to list.
  
  
• CCPA Rights (California): If you are a California resident, you have the right to: (i) know the categories and specific pieces of personal information we have collected about you, the categories of sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share personal information (this Privacy Policy is intended to provide all that information); (ii) request deletion of your personal information (with some exceptions as allowed by law); (iii) opt-out of the “sale” of personal information – although, as stated, we do not sell your data, and we treat any potential sharing for interest-based advertising as a “sale” only if required, which we currently do not engage in; and (iv) not be discriminated against for exercising these rights. You or your authorized agent can submit requests to access or delete your data by contacting us at our email or mailing address. We will verify your identity when processing such requests (for example, by confirming control of your email address or requesting additional info if needed) to ensure we protect your data from unauthorized requests.
  
  
• EU/EEA Data Subjects: If you are in the European Union or a similar jurisdiction, in addition to the rights above, you have the right to lodge a complaint with your country’s Data Protection Authority if you believe we have infringed your data protection rights. We encourage you to contact us first so we can address any issue.
  
  

To exercise any of your rights, please contact us at info@revenue-growth.ai. We will respond to your request as soon as possible, and no later than the timeframe required by applicable law (e.g., within 30 days for GDPR requests, which may be extendable once for complex requests). For certain requests, we might ask for additional information to verify your identity, in order to safeguard your data.

Google API User Data Policy Compliance

Our use and transfer of information received from Google APIs (such as data from your Google Drive transcripts) will adhere to Google’s API Services User Data Policy, including its Limited Use requirements . In practical terms:

• We only use Google data (your Drive files’ content and metadata) to provide or improve features that are user-facing and expected by you within our app’s interface (specifically, to let you manage and attach your meeting transcripts). We do not use that data for any hidden, secondary purposes.
  
  
• We do not transfer your Google data to others except as necessary for the above purposes, and with your consent (e.g., sending the transcript to HubSpot/Salesforce per your request, as detailed). We never transfer Google API-derived data to any third party for unrelated purposes (like advertising, or data brokers) .
  
  
• We do not allow human access to your Google data except in the very limited circumstances allowed by the policy (for instance, if you explicitly request support that requires our engineer to look at a specific transcript file to diagnose a problem, and even then, only with your consent, as described in Data Security above) .
  
  
• We maintain strict security measures to protect any data obtained via Google APIs (as described in Data Security), including secure encryption of credentials and data in transit and at rest .
  
  
• If you ever revoke consent or disconnect the Google integration, we will cease accessing your Google data immediately and delete any associated tokens, as required by Google’s policies.
  
  

In short, we handle Google user data in a manner that is transparent, secure, and limited to the app’s functionality that benefits you, in full alignment with Google’s requirements and your expectations.

Children’s Privacy

Our service is not intended for children under the age of 16. We do not knowingly collect personal information from anyone under 16 years old. If you are under 16, you should not use our app or provide any information to us. If we learn that we have inadvertently collected personal data from a child under 16, we will delete such information promptly. If you are a parent or guardian and believe we might have any information from or about a minor, please contact us and we will take appropriate steps to investigate and address the issue.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we update the policy, we will change the “Last updated” date at the top. If the changes are significant, we may provide a more prominent notice (such as by email notification or a pop-up in the app). We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

Your continued use of the service after any changes to this Privacy Policy constitutes your acceptance of the updated terms (to the extent permitted by law). If you do not agree with any updated terms, you should stop using the app and can disconnect your integrated accounts at any time.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Company: Revenue-Growth.ai
  
  
• Address: 1920 E Riverside Dr Ste A120, #421, Austin, TX 78741, USA
  
  
• Email: info@revenue-growth.ai
  
  

We will be happy to assist you and will respond as soon as possible. Your privacy is important to us, and we welcome your feedback.

(For the purposes of EU data protection law, Revenue-Growth.ai is the “data controller” of personal data collected through the service, except for the content of transcripts which we process on your behalf as a “data processor” – see our Terms and Conditions for more on this relationship.)