Privacy Policy
This policy explains how AssistaNote processes personal data when providing its services, including the AssistaNote browser extension.
1. Controller, processor and scope
AssistaNote is a B2B service. For account, billing, security and service-administration data, AssistaNote acts as controller where applicable. When a customer uses AssistaNote to process content on its instructions, the customer generally acts as controller and AssistaNote acts as processor under the applicable Data Processing Agreement (DPA).
2. Data categories
Depending on how the Service is used, we may process account and company information, contact details, authentication or session identifiers, audio, conversation transcripts, documents and other content supplied by users, limited content from the active web application used with the browser extension, and technical or security logs. Content may include personal data or special-category data, such as health information, when users choose to process such information.
3. AssistaNote browser extension
The browser extension processes the current tab only as needed to provide functions requested by the user, such as identifying fields, reviewing mappings and filling mapped fields. It may process audio and transcripts for transcription and note generation, and it uses the AssistaNote session to authenticate requests. Temporary working state, including the current transcript, may be stored locally in the browser. The extension does not collect general browsing history, monitor unrelated websites, or log general mouse, scroll or keystroke activity.
4. Purposes and legal basis
We process data to provide and secure the Service, transcribe and structure user-provided content, perform requested integrations and field filling, administer accounts and subscriptions, provide support, prevent abuse, and comply with legal obligations. Legal bases may include contract performance, legitimate interests, legal obligations and, where required, another lawful basis identified by the relevant controller.
5. Retention
We retain personal data only for as long as required for the relevant service, operational, contractual, security and legal purposes. Temporary browser-extension state is kept only for the working session or until the user resets it, while server-side data follows the applicable service and retention settings.
6. Sharing and subprocessors
Data may be processed by vetted service providers and subprocessors that support functions such as hosting, transcription, AI processing, security, communications and billing. They are subject to contractual and data-protection safeguards. We do not sell personal data.
7. International transfers
Where personal data is transferred outside the EEA or another protected jurisdiction, we apply appropriate safeguards as required by applicable law, such as Standard Contractual Clauses and supplementary measures where appropriate.
8. Rights and requests
Data subjects may have rights under applicable law, including access, rectification, deletion, restriction, portability, objection and complaint rights. Where AssistaNote acts as processor, requests concerning customer-controlled content should normally be directed to the relevant customer organization.
9. Contact
For privacy questions or DPA-related matters, contact AssistaNote through the official channels listed on assistanote.com.