Legal

Privacy Policy

Last updated: June 9, 2026

This Privacy Policy describes how LeapVision Technologies Inc. ("Stillnote," "we," "us," or "our") handles personal information in connection with the Stillnote desktop application and the Stillnote website. By using Stillnote, you agree to the practices described here.

1. Who we are

The data controller responsible for your personal information is:

• LeapVision Technologies Inc.
• Incorporated in Quebec, Canada
• Quebec enterprise number (NEQ): 1181486631
• Federal business number (BN): 757702436
• Privacy and data-subject requests: privacy@getstillnote.com

For the purposes of Quebec's Law 25, our privacy officer can be reached at the same address: privacy@getstillnote.com.

2. Stillnote is on-device by design

Stillnote records, transcribes, and summarizes your meetings locally on your Mac. Both the transcription model and the summarization model run on your own machine. This means:

• Your meeting audio is never sent to us or to any third party.
• Your transcripts and notes never leave your device.
• We do not collect analytics, usage telemetry, or crash reports from the app.
• Nothing about the content of your meetings is logged on a Stillnote server, and none of it is used to train any model.

We cannot see your meeting content. Because it stays on your device, it is yours to keep, export, or delete at any time using the controls in the app.

3. The data we do handle

A few features require limited information to leave your device. We keep this list short and specific. These are the only cases where we, or a service we use, handle your data.

3.1 Account and billing

If you create a paid account, we use Clerk for authentication and Paddle for payment processing. These services handle account metadata such as your email address, authentication details, and billing information (for example, the fact of a subscription and the payment method on file). We do not receive or store your full card number. This metadata is used to operate your account, provide access to paid features, and meet our tax and accounting obligations. Clerk and Paddle act as our service providers and process this data on our behalf.

3.2 One-time AI model downloads

The first time you use Stillnote, the app downloads the AI models it needs to run on your Mac. These models are fetched from HuggingFace and GitHub. This is a standard file download. Your meeting audio and transcripts are not part of it, and nothing about your meetings is sent during the download.

3.3 Google Calendar (only if you connect it)

Stillnote can read your Google Calendar to make recording your meetings easier, but only if you choose to connect it. This is strictly opt-in. If you connect Google Calendar, Stillnote reads your event details locally to surface your upcoming meetings. If you never connect it, no calendar data is accessed. You can disconnect at any time. Section 4 sets out the exact read-only scopes we request, why each is necessary, and our Limited Use commitments.

3.4 The website waitlist

If you join the waitlist on our website, we collect your email address and, optionally, your name. This information is stored in Amazon DynamoDB in Canada (the AWS ca-central-1 region). We use it for one purpose only: to contact you about access to Stillnote. This is a single, transactional launch email. We will not send you marketing email without first obtaining your separate consent.

4. Google user data, scopes, and Limited Use

This section describes exactly what Stillnote does with data obtained through Google APIs. It applies only if you choose to connect a Google account.

4.1 The scopes we request, and why each one is necessary

Stillnote requests the narrowest Google Calendar scopes that let the feature work at all. We request read-only access, and we do not request any scope that would let us write to, delete from, or share your calendar.

• https://www.googleapis.com/auth/calendar.calendarlist.readonly reads the list of calendars on your account so Stillnote knows which calendars exist and can show you upcoming meetings from the right ones rather than from a single hard-coded calendar. Without it, Stillnote cannot tell your work calendar from your personal one, and a user with more than one calendar would see an incomplete or wrong meeting list.
• https://www.googleapis.com/auth/calendar.events.readonly reads the events on those calendars: title, start and end time, and the conferencing link. Stillnote uses these to show your upcoming meetings, to name a recording after the meeting it belongs to, and to detect that a meeting is starting so it can offer to record. Without it there are no meetings to display and the entire calendar feature is inoperative.

We previously requested the broader https://www.googleapis.com/auth/calendar.readonly scope. We removed it because it granted more than the feature needs, including calendar settings, access-control lists, and free/busy information that Stillnote never reads. Stillnote calls three read-only Google Calendar endpoints and nothing else. No narrower scope exists that still returns the calendar list and event details the feature is built on.

4.2 What happens to Google data once we have it

• Calendar data is used only to display your upcoming meetings in the app, to title recordings, and to prompt you to record. It is not used for any other purpose.
• Calendar data is processed and held on your Mac. It is not transmitted to a Stillnote server, and we cannot see it.
• We do not sell, rent, transfer, or disclose Google user data to any third party, for advertising, credit assessment, lending, or any other purpose.
• No human at Stillnote reads your Google user data. We have no mechanism to do so, because the data never reaches us.
• You can disconnect Google Calendar at any time in the app, and you can revoke Stillnote's access at any time at myaccount.google.com/permissions. Disconnecting removes the locally stored calendar data and the stored credential from your Mac.

4.3 AI and machine-learning models: self-hosted and offline

Stillnote uses no third-party AI provider or generative AI service of any kind. Both models the app relies on, the speech-to-text model and the summarization model, are open-weight models that are downloaded once and then run strictly self-hosted and offline on your own Mac. There is no API call to any model provider at inference time, no prompt or transcript is transmitted to a model provider, and no data is returned to any model provider for any purpose, including model training, retraining, fine-tuning, or evaluation.

This applies to all data in the app and specifically to Google user data: no Google user data is used to develop, improve, or train any generalized or non-personalized AI or ML model, whether ours or anyone else's. Because inference happens entirely on your device, there is no path by which it could be.

4.4 Limited Use affirmation

Stillnote's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

5. Why we are allowed to handle this data

We handle the limited data above on the following bases, depending on the law that applies to you:

• To provide a service you asked for: operating your account, processing payment, and contacting you about waitlist access.
• Your consent: for example, connecting Google Calendar, or receiving any future marketing email.
• Our legitimate interest and legal obligations: keeping accurate billing and tax records.

You can withdraw consent at any time. Withdrawing consent does not affect processing that already took place, and may limit features that depend on it (for example, calendar-aware recording).

6. Where your data is stored

Waitlist information is stored in Canada (AWS ca-central-1). Account and billing metadata is handled by Clerk and Paddle, which may process data outside Canada. Where data is transferred across borders, we rely on the contractual and legal protections offered by those providers. Your meeting audio and transcripts are never stored by us anywhere, because they never leave your Mac.

7. How long we keep data

• Meeting audio, transcripts, and notes: kept only on your device, for as long as you keep them. We never hold a copy.
• Account and billing metadata: kept for the life of your account and for as long afterward as we are required to keep records for tax, accounting, and legal purposes.
• Waitlist email and name: kept until you ask us to delete it, or until it is no longer needed for the launch contact described above, whichever comes first.

8. Your rights

Depending on where you live, you have rights over your personal information under Quebec's Law 25 and Canada's PIPEDA, and, where they apply, the EU/UK GDPR and the California CCPA/CPRA. These include the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Request deletion of your personal information.
• Withdraw consent you previously gave.
• Request portability of, or further information about, the data we hold.

To exercise any of these rights, email privacy@getstillnote.com. We will respond within the time required by the law that applies to you. Because your meeting content lives only on your device, those files are managed entirely by you within the app, and we have no copy to access, export, or delete on your behalf.

If you are in Quebec and you are not satisfied with how we have handled your request, you may contact the Commission d'acces a l'information du Quebec.

9. Children

Stillnote is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@getstillnote.com and we will delete it.

10. Security

The strongest protection for your meeting content is structural: it stays on your device, so there is no central store of it for anyone to breach. For the limited account, billing, and waitlist data we do handle, we and our service providers use industry-standard technical and organizational safeguards. No system can be guaranteed perfectly secure, but we work to protect your information and to limit who can access it.

11. Changes to this policy

We may update this policy as Stillnote evolves or as the law requires. When we do, we will revise the "Last updated" date above. If a change is significant, we will take reasonable steps to let you know.

12. Contact

For any privacy question or to make a data-subject request, contact LeapVision Technologies Inc. at privacy@getstillnote.com.

This policy is provided by LeapVision Technologies Inc. for transparency about our data practices. Licensed Quebec privacy counsel is reviewing it in parallel.