Privacy Policy

Welcome to Superdone LLC (we, us, or our). We are committed to protecting your privacy and being transparent about how we handle your information. This Privacy Policy describes how we collect, use, process, and safeguard data when you use the Superdone platform, including our meeting intelligence features and related services (collectively, the Services).

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please do not use the Services.

This policy applies to all users of the Superdone platform, including individuals who access our services through our website, mobile applications, or integrations with third-party meeting platforms. It covers all data we process in connection with delivering the Services, including meeting content you submit for analysis.

We collect information in the following categories to operate and improve the Services:

3.1 Account and Contact Information

When you register or communicate with us, we may collect:

• Name and email address
• Company, organization and job title
• Other contact details you voluntarily provide

3.2 Meeting and Communication Content

The core function of Superdone is to analyze meetings on your behalf. When you invite Superdone to participate in or connect to your meetings, we capture and process meeting-related information including, but not limited to:

• Audio, video, and transcript data from meetings you authorize Superdone to attend or access
• Metadata associated with those meetings (such as date, duration, and participant identifiers)
• Summaries, notes, action items, and analytical outputs generated from that content
• Questions you submit to the platform and the responses generated in connection with your meeting data

We want to be explicit about the scope of this collection: Superdone analyzes, infers, and evaluates meeting-related information comprehensively in order to deliver product features such as summaries, project graphs, question-answering, and other AI-powered outputs. By authorizing Superdone to access a meeting, you acknowledge that such analysis will occur.

3.3 Usage and Technical Information

When you use our website or platform, we automatically collect certain technical information, including:

• IP address and device type
• Browser type and version
• Pages visited and time spent
• Referring website addresses

This information is collected via cookies and similar tracking technologies, including Google Analytics.

3.4 CRM and Marketing Data

We use third-party platforms (currently Posthog, Airtable and Hubspot) to manage customer relationships and communications. These platforms may store your contact information to facilitate onboarding, product updates, and support.

We use the information we collect solely for the following purposes:

• To provide, operate, and maintain the Superdone platform and its features
• To analyze meeting content on your behalf and generate product outputs such as summaries, project graphs, and responses to queries, all within the scope of your organization's use
• To improve the reliability, accuracy, and performance of our systems using anonymized or aggregated data
• To respond to your support inquiries and provide customer service
• To send you product communications, updates, and (where opted in) marketing emails
• To comply with applicable legal obligations

We believe it is equally important to be clear about what we do not do with your data:

• Your meeting content and organizational data are never used for Superdone's own external-facing analysis, research, or commercial purposes unrelated to delivering the Services to you.
• Your data is never sold, licensed, or otherwise transferred to third parties for their marketing or commercial purposes.
• Your meeting content and business data will never be made accessible to individuals outside your organization, except as required by law or as described in this policy.

To state this plainly: the analysis Superdone performs is purely in service of your use of the platform. We process your data to help you, not to extract value from it for ourselves or others

Superdone is designed with organizational data boundaries as a foundational principle. Meeting content, analytical outputs, and derived data associated with your organization are accessible only to authorized users within your organization as configured by your account settings.

Superdone personnel may access customer data only to the limited extent required to provide technical support, investigate reported issues, or comply with legal obligations. Such access is governed by internal access controls and confidentiality obligations.

We use a limited set of trusted third-party providers to operate our infrastructure and deliver the Services. These providers process data only on our behalf, only to the extent needed to operate the platform, and under contractual obligations consistent with this policy.

7.1 Providers That May Process Meeting or Calendar Content

The following providers may process meeting content, calendar data, or data derived from them in the course of delivering product features to you:

• Anthropic (Claude): AI model provider used to generate summaries, agendas, tasks, and other analytical outputs.
• Google (Gemini API): AI model provider used for the same categories of analysis.
• OpenAI: AI model provider, and text embeddings used to power search across your content.
• Recall.ai: Meeting recording and transcription for meetings you authorize Superdone to attend.
• Supabase: Primary application database, authentication, and file storage.
• DigitalOcean: Application hosting, background job processing, and managed infrastructure.
• Langfuse: Observability and tracing for our AI features. Traces may include the content sent to and returned from AI models.
• Novu: Delivery of in-app and email notifications, which may include meeting summaries and recaps.
• Resend: Delivery of transactional and notification email, which may include meeting summaries and recaps.

7.2 Providers That Do Not Process Meeting Content

The following providers support our website, analytics, and customer communications. They do not receive your meeting content or calendar data:

• Google Analytics: Website usage analytics. Collects device and interaction data. See Google's Privacy & Terms for details.
• Posthog: Platform for product and website analytics.
• Hubspot: CRM and marketing automation system.
• Airtable: Customer communication database.

7.3 Integrations You Choose to Connect

Where you connect an optional integration, Superdone sends data to that service at your direction and according to your configuration. For example, if you connect Slack, we deliver meeting recaps and notifications to the channels you select. You control whether these integrations are enabled, and you can disconnect them at any time.

We do not share your meeting content or organizational business data with any provider beyond what is technically necessary to operate the platform or to deliver a feature you have enabled. We will update this list as our subprocessors change, and will notify affected users of material changes.

Superdone's core features are powered by artificial intelligence. We do not train, host, or operate our own AI models. Instead, we send content to third-party AI providers - currently Anthropic (Claude), Google (Gemini API), and OpenAI - which process it and return results that we surface to you in the product.

We send data to these providers under their commercial API terms, which prohibit the use of API inputs and outputs to train their general-purpose models. We do not enable any setting that would permit such training.

8.1 Limited Use of Google User Data

Superdone's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, and without limiting the above:

• We do not use Google user data to develop, improve, or train generalized or non-personalized AI or machine learning models.
• We use Google user data only to provide or improve user-facing features that are prominent in the Superdone interface, such as syncing your meetings, generating agendas, and writing agendas back to your calendar events.
• We do not sell Google user data, and we do not use it for advertising, marketing, credit assessment, or any other unrelated purpose.
• We do not transfer Google user data to third parties except as necessary to provide or improve those user-facing features, to comply with applicable law, or as part of a merger or acquisition, and only under obligations consistent with this policy.
• Humans do not read your Google user data except where you have given affirmative consent for specific content, where it is necessary for security purposes or to comply with applicable law, or where the data has been aggregated and anonymized for internal operations.

8.2 Google Calendar Access

Superdone requests a single Google OAuth scope, https://www.googleapis.com/auth/calendar. We use it to list the calendars on your account, read the events on the calendars you select so that Superdone can join and organize your meetings, and write agenda content back into the description of events you choose. You may revoke this access at any time from your Superdone integration settings or from your Google Account permissions page.

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include encryption in transit and at rest, access controls, and regular security reviews.

While we take data security seriously and apply reasonable safeguards, no system is completely secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

We retain your data for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Meeting content and related analytical outputs are retained for the duration of your account unless you request deletion or your account is terminated, at which point data is securely deleted or anonymized in accordance with our internal retention schedule.

You may request deletion of your data at any time by contacting us at privacy@superdone.ai.

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request that we correct inaccurate or incomplete information
• Right to deletion: Request that we delete your personal data, subject to applicable legal exceptions
• Right to restriction: Request that we limit the processing of your data in certain circumstances
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to certain types of processing, including direct marketing
• Right to withdraw consent: Where processing is based on your consent, withdraw it at any time

To exercise any of these rights, please contact us at privacy@superdone.ai. We will respond within the timeframes required by applicable law.

If you are located in the European Union, European Economic Area, or United Kingdom, your personal data is processed in accordance with the General Data Protection Regulation (GDPR) and, where applicable, the UK GDPR.

Superdone LLC acts as the data controller for personal data collected through our platform. We process personal data on the following legal bases:

• Contractual necessity: To deliver the Services you have engaged us to provide
• Legitimate interests: To improve our platform and maintain security, where not overridden by your rights
• Consent: For marketing communications where you have opted in
• Legal obligation: Where processing is required by applicable law

You have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully. For questions or to exercise your GDPR rights, contact us at privacy@superdone.ai.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). For more information about your California-specific rights and our practices, please refer to our California Privacy Notice, available at the link in the footer of our website.

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16 without verifiable parental consent. If we learn that we have inadvertently collected data from a child under 16, we will delete it promptly. Please contact us at privacy@superdone.ai if you believe we have collected information from a minor.

We use cookies and similar tracking technologies to collect information about how users interact with our website and platform. Cookies help us maintain your session, remember preferences, and analyze usage patterns to improve the experience.

You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of our website. You may also opt out of Google Analytics data collection by using the Google Analytics Opt-out Browser Add-on.

Superdone LLC is headquartered in the United States. If you access our Services from outside the United States, your data may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using our Services, you acknowledge that your information may be transferred to countries that may not have the same data protection laws as your home jurisdiction. Where required, we implement appropriate safeguards (such as standard contractual clauses) to protect such transfers.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will post the updated policy on this page with a revised effective date and, where appropriate, notify you by email. We encourage you to review this policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: