Legal
To provide Prinotes, Priyora Company works with a small number of trusted third parties that process personal data on our behalf. We hold each of them to contractual obligations to protect your data and to process it only on our instructions. This page lists our current sub-processors and is kept up to date as they change.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Oracle Cloud Infrastructure (OCI) | Cloud hosting, database, and encrypted object storage | All account and meeting data at rest | Saudi Arabia (Riyadh; backups in Jeddah) |
| Cloudflare | Content delivery, TLS, and security (firewall / bot protection) | IP address and connection metadata | United States / global |
| Sentry | Error and performance monitoring | Diagnostic error data (configured to minimize and filter personal data before it is sent) | European Union / United States |
We use the providers below, collectively, for transcription, structuring, and summaries. To protect our product, we do not break down which provider performs which specific function.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| OpenAI | AI processing of meeting content | Meeting audio and/or transcript text | United States |
| Google Gemini | AI processing of meeting content | Meeting audio and/or transcript text | United States / global |
How your content is handled: Our AI providers may retain content for a short period (approximately 30 days*) solely to detect abuse and keep their services safe, after which it is deleted. They do not use it to train their models, and we do not retain or use your raw audio to train or improve our own models. On our own systems, meeting audio is deleted as soon as processing finishes, and is kept only if you have turned on audio retention.†
* Based on the published API data-usage policies of our AI providers (OpenAI and Google Gemini, paid API tiers), which do not use customer content for training. Exact windows are set by each provider and may change.
† Kept only if you are on a paid plan and have turned on audio retention, for the period included in your plan. See our Pricing page for the retention included with each plan.
The following are used only if you choose to connect them, and only for the features you enable. Your use of these services is also governed by the providers' own terms.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Google Workspace | Calendar, Tasks, Drive, and Contacts sync | Calendar events, tasks, files you create, contacts (read live) | United States / global |
| Microsoft 365 (Graph) | Calendar, To Do, OneDrive, and Contacts sync | Calendar events, tasks, files you create, contacts (read live) | United States / global |
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Moyasar | Payment processing for paid subscriptions | Name, email, and payment details (card data is handled and tokenized by Moyasar; Prinotes stores only card brand and last four digits) | Saudi Arabia |
We update this page whenever we add or remove a sub-processor. The "Last updated" date above reflects the most recent change. For questions about our sub-processors, contact privacy@prinotes.com