Privacy Policy

Last updated: March 2026

TAD-POL ("we", "us", or "our") is a personal productivity tool that transcribes audio recordings and extracts action items using AI. This policy explains what data we collect, how we use it, and your rights.

Contact: tadpolhq@gmail.com

What data we collect

Account information — email address and display name at signup.
Audio recordings — downloaded from your Dropbox account for transcription, then permanently deleted from our servers immediately after processing. We do not store your audio.
Transcripts and analysis — the text transcript of each recording and AI-generated action items, stored encrypted in Google Cloud BigQuery under our account. Transcripts are encrypted at rest using HKDF per-user key derivation and Fernet (AES-128-CBC); each user's data is encrypted with a unique derived key so no two users share the same key.
Google OAuth tokens — access tokens for Google Tasks and Google Calendar, stored encrypted using industry-standard symmetric encryption (Fernet/AES-128). We use these to provide the integrations described below.
Google Calendar events — we read a window of calendar events around each recording. Event metadata (title, time, attendees) is stored in BigQuery to provide context in transcription analysis. We do not store the full content of calendar events beyond what is needed for this purpose.
Google Tasks — we read, create, and update task items in your Google Tasks list. We read your existing tasks to sync completion status, avoid duplicates, and reconcile changes; we create new tasks from action items extracted from your recordings.

How we use Google user data

TAD-POL uses the following Google API scopes:

Google Tasks (https://www.googleapis.com/auth/tasks) — Used to read, create, and update task items in your Google Tasks list. When our AI extracts action items from your recordings, we push them directly to your existing Google Tasks workflow. We also read your existing tasks to sync completion status, avoid duplicates, and reconcile changes you make directly in Google Tasks.
Google Calendar (https://www.googleapis.com/auth/calendar.events) — Used to read calendar events in the time window around each recording, and optionally to create follow-up events. Calendar context (meeting titles, attendees) is provided to our AI model to improve the accuracy of analysis and action item extraction.

We do not use Google user data for advertising, profiling, or any purpose other than providing the TAD-POL service to you. We do not share Google user data with third parties except as required to operate the service (OpenAI for AI processing — see below) or as required by law.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How data is stored and secured

Transcripts and analysis are stored in Google Cloud BigQuery in a dataset isolated to your account.
Google OAuth tokens are encrypted at rest using Fernet symmetric encryption; the encryption key is stored in GCP Secret Manager.
Account passwords are hashed using bcrypt and never stored in plaintext.
TAD-POL administrators (currently only the founder) have technical access to your stored data for support and operational purposes. This is disclosed explicitly in our Terms & Disclaimer.

Third-party services

TAD-POL uses the following third-party services. Their own privacy policies apply to data they process:

Dropbox — source of your audio recordings
Google — Tasks, Calendar, and Cloud infrastructure
OpenAI — AI transcription (Whisper) and analysis (GPT models)

Data retention

Audio recordings: deleted immediately after transcription (not retained).
Transcripts, action items, and calendar context: retained until you request deletion or delete your account.
Account information and OAuth tokens: retained until you delete your account.

Your rights

You may request deletion of your account and all associated data at any time by emailing tadpolhq@gmail.com. We will process deletion requests within 30 days.

You may revoke TAD-POL's access to your Google account at any time via Google Account Permissions.

Changes to this policy

We may update this policy as the service evolves. The "last updated" date at the top reflects the most recent revision. Continued use of TAD-POL after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email tadpolhq@gmail.com.

← Home