Privacy Policy

Information we collect

We collect information you provide directly and information created while you use Resona:

• Account information, including your email address and authentication identifiers.
• Conversation content you upload or record, including audio files, titles, source type, transcripts, summaries, and extracted details.
• Generated workspace data, including people, action items, opportunities, memory facts, follow-ups, tool suggestions, and processing status.
• Google Calendar connection data, including the Google account email, OAuth scopes granted, encrypted access tokens, and encrypted refresh tokens.
• Technical information needed to operate the service, such as request metadata, logs, error reports, and security events.

How we use information

We use your information to provide and improve the product features you choose to use:

• Authenticate your account and keep your workspace separated from other users.
• Store uploaded audio and conversation records.
• Transcribe audio and extract structured memories, people, action items, opportunities, and follow-ups.
• Suggest calendar actions from conversations and create Google Calendar events only after you approve the action.
• Debug, secure, monitor, and maintain the service.
• Respond to support, deletion, privacy, or security requests.

Google user data

Resona requests Google Calendar access only to support the visible calendar feature in the app. The current requested Google OAuth scopes are openid, email, profile, and https://www.googleapis.com/auth/calendar.events.

When you connect Google Calendar, Resona may use Google user data to:

• Identify the connected Google account email.
• Store encrypted OAuth tokens so the app can create calendar events after user approval.
• Create events on your primary Google Calendar when you approve a suggested calendar action.

Resona does not read your existing Google Calendar events, does not sell Google user data, does not use Google user data for ads, and does not transfer Google user data to third parties except as necessary to provide the user-facing calendar feature, comply with law, or protect the service from abuse. Resona's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI processing

Resona uses Google Gemini to transcribe audio and extract structured information from transcripts. Conversation content may be sent to Google AI services for that processing. AI output can be incomplete or inaccurate, so calendar actions and other external effects should be reviewed before you approve them.

Service providers

We use third-party providers to run Resona. These providers process information only as needed to deliver their services to us:

• Supabase for authentication, database storage, private audio storage, and row-level access controls.
• Google APIs for Gemini AI processing and Google Calendar event creation.
• Trigger.dev for background processing orchestration.
• Vercel for hosting and deployment.

Storage and security

We use access controls, private storage, encrypted calendar tokens, HTTPS in transit, and per-user database policies to protect user data. No online service can guarantee absolute security, but we use reasonable safeguards designed for the sensitivity of conversation and calendar data.

Retention and deletion

We retain account data, conversation records, generated memories, uploaded audio, and calendar connection data while your account is active or as needed to operate the service. You can ask us to delete your account data or disconnect Google Calendar by contacting us. After Google Calendar is disconnected, Resona will no longer use stored Google OAuth tokens for your account.

Your choices

• You can choose not to connect Google Calendar.
• You can deny a suggested calendar action instead of approving it.
• You can revoke Google access from your Google Account permissions page.
• You can request access, correction, export, or deletion of your Resona data by contacting us.

Children

Resona is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this policy as Resona changes. If a change is material, we will update the date above and take reasonable steps to notify users through the product or another appropriate channel.

Contact

For privacy, security, or deletion requests, contact anaybauskr@gmail.com.