Privacy Policy

This Privacy Policy explains how Peaflow AI ("Peaflow", "we", "us") collects, uses, and protects your information when you use our web application and services (the "Service"). By using the Service you agree to this policy.

1. Information we collect

• Account information — your name, email address, and workspace details when you sign up.
• Content you provide — meetings, transcripts, tasks, comments, documents, and other content you or your team create in the Service.
• Connected-service data — when you connect an integration, we access data from that service using scopes you approve (see Section 3).
• Usage data — basic logs needed to operate and secure the Service.

2. How we use your information

• To provide the Service — transcription, summaries, task and decision extraction, search, and project intelligence.
• To sync and display data from the integrations you connect.
• To secure your account and enforce per-workspace and per-project access controls.
• To communicate with you about your account and support requests.

We do not sell your personal information, and we do not use your workspace content to train third-party foundation models.

3. Connected services (OAuth)

When you connect an integration, we request the minimum scopes needed and store an access token securely on our servers to sync data on your behalf. You can disconnect any integration at any time, which stops syncing and removes derived data.

• Google (Gmail, Drive, Calendar) — read-only access to messages, files metadata, and events you choose to index. Peaflow's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Slack — read access to channels you add the app to, for extracting decisions, tasks, and questions.
• GitHub — read access to repositories, pull requests, and issues you grant.
• Notion — read access to pages and databases you share with the integration.

4. Data storage and security

Data is stored with our infrastructure provider (Supabase / PostgreSQL) and protected with row-level security so users can only access data in their own workspaces and projects. Connector access tokens are stored server-side and are never exposed to the browser. Data is encrypted in transit.

5. Data retention and deletion

We retain your content while your account is active. You can delete individual items, disconnect integrations, or request deletion of your workspace by emailing us. Disconnecting a connector removes its synced data and derived records.

6. Sharing

We share data only with sub-processors that help us run the Service (e.g., cloud hosting and AI processing) under confidentiality obligations, and where required by law. We never sell your data.

7. Your rights

You may access, correct, export, or delete your personal data. To exercise these rights, contact us at me@shaheermalik.com.

8. Changes

We may update this policy; material changes will be posted here with an updated date.

9. Contact

Questions about privacy? Email me@shaheermalik.com.

← Back to Peaflow AI