Privacy Policy

1. Introduction

The Echo AI Zoom App ("Service" or "App") is operated by Calvo Dulce Productions LLC. The App enhances meeting productivity through real-time transcription, keyword detection, and summarization features. We act as a data controller for account and support information stored in our systems and as a data processor for meeting data processed on behalf of Zoom users.

2. Information We Collect

• Zoom account details: Basic information provided by Zoom (user ID and email) to link you to your Echo AI settings and enable app functionality.
• Meeting information: Meeting and participant identifiers needed for the app to operate during a session.
• Transcripts (temporary): Real-time text processed only while the meeting is active to detect mentions and generate recaps. This data is deleted automatically when the meeting ends.
• Support messages: Information you provide if you contact us for help.

We do not use analytics, cookies, or tracking technologies. If such services are introduced later, this policy will be updated and users will be notified before collection begins.

3. How We Use Information

• Operate and deliver the App’s core features, including live recaps and alerts.
• Generate text embeddings and AI-based summaries using OpenAI services. Only meeting text (no identifiers) is sent, and OpenAI does not retain or use data for model training.
• Maintain and improve reliability, security, and user experience.
• Provide support and respond to user inquiries.
• Comply with applicable laws and Zoom platform requirements.

4. How We Protect Information

We apply administrative and technical safeguards designed to protect your information from unauthorized access, loss, or misuse, including:

• Encryption in transit (TLS 1.2+) and encryption at rest for sensitive data.
• User emails are encrypted; all other identifiers (such as user IDs) are anonymized using secure hashing before storage.
• Transcripts are processed only in memory during meetings and deleted when the meeting ends.
• Secrets and credentials are stored in secure server-side environments and never exposed client-side.

5. Data Sharing

We do not sell or rent personal information. Limited data may be shared with service providers that support core functionality under strict confidentiality and data-protection agreements:

• Zoom Video Communications, Inc. – platform integration
• Vercel – frontend hosting
• Railway – backend hosting and data processing
• Redis Cloud – temporary in-memory processing
• PostgreSQL (managed cloud) – limited encrypted account data
• OpenAI, L.L.C. – transient AI processing of meeting text

These providers are SOC 2 and/or ISO 27001 certified where applicable. Data may also be disclosed to comply with legal obligations or in connection with a business transfer, subject to this policy.

6. Retention

• Transcripts: Deleted automatically when the meeting ends.
• Account settings: Retained while the account is active or as legally required.
• Support requests: Retained as needed to resolve your inquiry.

7. Your Rights & Choices

• Access & correction: Update your information through Zoom OAuth or by contacting us.
• Deletion: Uninstalling the Echo AI app from Zoom deletes your settings and related data from our systems.
• Contact: Reach out at john@calvodulce.com for any privacy concerns.

8. Updates to This Policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. Any material updates will be communicated within the App or by email before taking effect.

9. Contact Us

Email: john@calvodulce.com