1. Introduction
Vertigo Tech LLC ("Vertigo Tech," "we," "us," or "our") provides an AI-powered meeting notes service for businesses and their teams. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to our marketing website, our waitlist, and — once available to your organization — the Vertigo Tech application (together, the "Services").
We are currently in private beta. Some practices described here apply to the product as it becomes available to your organization; where a section is specific to the waitlist stage or the product stage, we say so.
2. Information we collect
2.1 At the waitlist stage
When you join our waitlist, we collect the email address you submit, along with the page it was submitted from and a timestamp. If you contact us directly, we may also receive your name, company name, and anything else you choose to include in your message.
2.2 When your organization uses the product
Once your organization is onboarded, the Services process the following categories of information so we can deliver structured notes:
- Meeting content — audio, recordings, and the transcripts, summaries, action items, and extracted dates we generate from the calls and meetings you choose to include, including recordings you upload.
- Calendar data — meeting titles, times, and participants from calendars you connect, used to identify which meetings to capture.
- Account and usage data — user names and work email addresses, roles and client or engagement assignments, authentication events, and product usage logs used for security and support.
Meeting content and the clients or engagements it relates to are controlled by your organization. In this context your organization is the controller of that data and Vertigo Tech acts as a processor on your organization's behalf under your agreement with us.
3. Our commitment on AI training
We do not use customer meeting content to train or fine-tune our AI models. Audio, transcripts, summaries, and other customer data are used solely to provide the Services back to your organization. We do not sell this data, and we do not share it with model providers or any third party for their own training or product-improvement purposes. This commitment is binding and is reflected in our Terms of Service.
4. How we use information
We use the information we collect to:
- Operate and deliver the Services, including transcription, summarization, and date extraction;
- Send notifications and reminders about action items and upcoming dates found in your meetings;
- Authenticate users, enforce role-based access to clients and engagements, and maintain audit logs;
- Provide support, communicate about your account, and respond to your requests;
- Manage the waitlist and tell you when early access is available to your organization;
- Protect the Services against fraud, abuse, and security threats; and
- Meet our legal, tax, and compliance obligations.
5. How we store and secure data
We encrypt data in transit using industry-standard TLS, and we encrypt stored data at rest. Access to production systems is restricted to authorized personnel on a least-privilege basis and is logged. We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction.
We are working toward SOC 2 Type II attestation as part of our path to general availability. No method of transmission or storage is completely secure, but we work continuously to strengthen our safeguards and to limit access to the minimum needed to run the Services.
6. Subprocessors and integrations
We rely on a small set of vetted service providers ("subprocessors") to run the Services. These fall into the following categories:
- Cloud hosting and storage — infrastructure providers in North America that host our application and store data.
- Transcription and AI processing — infrastructure used to transcribe audio and generate summaries. Where third-party model infrastructure is involved, it is engaged under agreements that prohibit using your content to train their models.
- Calendar and productivity integrations — services such as Microsoft Outlook and Google Calendar that you choose to connect.
- Operational tooling — providers for email delivery, error monitoring, and customer support.
Subprocessors are bound by contractual obligations to protect your information and to process it only for the purposes we specify. Enterprise customers can request our current subprocessor list and advance notice of material changes.
7. Data retention and deletion
At the waitlist stage, we keep your email address until you ask us to remove it or until we determine it is no longer needed for the waitlist. For product data, we retain meeting content and account information for as long as your organization maintains its account, and according to the retention schedule in your agreement. Enterprise agreements can specify custom retention periods.
When your organization cancels, you can export your summaries and transcripts, and we delete customer content in line with your agreement. You may also request earlier deletion of specific content, subject to legal and backup-cycle limitations. Backups are purged on a rolling schedule.
8. Your privacy rights
Depending on where you live, you may have rights over your personal information, including the right to access, correct, delete, or receive a copy of it, and to opt out of the "sale" or "sharing" of personal information as those terms are defined under applicable law. We do not sell personal information.
For residents of California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), provides rights to know, delete, correct, and limit the use of sensitive personal information, and the right not to be discriminated against for exercising these rights. Residents of other U.S. states with comprehensive privacy laws have comparable rights. Where Vertigo Tech acts as a processor for your organization, we will direct rights requests concerning customer data to the organization that controls it.
To exercise your rights, contact us using the details below. We will verify your request and respond within the timeframes required by applicable law. You may use an authorized agent where the law permits.
9. Cookies and analytics
Our marketing website uses only the cookies and local storage necessary to make the site work and to understand aggregate traffic. We do not use third-party advertising cookies or cross-site tracking, and we do not sell information gathered on the marketing site. Where privacy-respecting analytics are used, they are configured to measure aggregate usage rather than to profile individuals. You can control cookies through your browser settings.
10. Contact us
Questions about this Privacy Policy or our data practices can be sent to our privacy team at privacy@vertigotech.ai. We will update this policy from time to time; when we make material changes, we will revise the "Last updated" date above and, where appropriate, notify you directly.