Overview#
This policy describes how Lindy collects and uses personal information when you use our website and product. We only collect what we need to turn your meetings into tasks and briefs, and we never sell your data.
Information we collect#
- Account details - your name and email, so we can set up and personalise your workspace.
- Meeting content - calendar events, recordings, transcripts and notes you connect, which Lindy reads to draft tasks, along with the participants on those meetings.
- Google data you authorise - Google Calendar (your meetings and their times, titles and attendees), Google Drive (meeting notes and transcripts, for example Google Meet notes, and comments on your Google Docs, Sheets and Slides files that are assigned to you or mention you, which Lindy turns into tasks) and Gmail (only messages that carry notes or transcripts for your meetings, such as meeting-notes emails; Lindy does not read the rest of your inbox).
- Usage data - how you interact with the product, to keep it secure and improve it. Lindy's servers send PostHog events about how you use the product, labelled with your name and email. You can opt out at any time by turning off Share usage analytics in Settings, under Notifications.
- Billing details - handled by our payment processor; we never store full card numbers.
We request the minimum access needed to turn your meetings into tasks, and nothing unrelated to that purpose.
How we use your information#
We use your information to provide and improve Lindy - generating tasks and briefs, personalising your workspace, keeping accounts secure, processing payments and sending service messages. We do not use it for advertising or to build profiles for any other purpose. With your consent we may also send product tips and updates, which you can opt out of anytime.
AI processing of meetings#
To draft your action items, meeting content is processed by a third-party AI service.
Before your meeting content is sent for AI processing, Lindy removes personal identifiers - the names and email addresses of you and the other participants - and replaces them with anonymous labels. The real names are restored only inside Lindy after processing is complete, so the AI service does not receive them.
Meeting content is sent to Lindy AI, which runs on AI services from Fireworks AI and Google (see Sub-processors), only to create your action items, and it is pseudonymized first as described above - including your own name and email. It is not used to train or improve any AI model. Under Google's terms for its paid AI service, Google may keep prompts and responses for a limited period solely to detect abuse and comply with law; when Lindy uses Google's batch processing, the batch job and its files are deleted as soon as the results have been retrieved.
When we share information#
We do not sell your personal information, and we do not share it with data brokers or information resellers. We share it only with service providers that operate the service on our behalf, under confidentiality and data-protection obligations: cloud hosting and databases; Google (the Calendar, Drive and Gmail APIs you connect, and Google's AI service that powers Lindy AI, which receives only the de-identified content described above); Clerk (sign-in and session management); Loops (transactional and product email delivery); PostHog (product analytics, error tracking and session replay, with all on-screen text and everything you type masked, so meeting and task content is never recorded); and our payment processors Chargebee and Ziina. The current list is on our sub-processors page. We otherwise disclose your data only with your consent, as needed to provide a feature you requested, or where required by law.
Limited Use. Lindy's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Lindy does not use Google user data to serve advertising, to sell or transfer it to data brokers or others for their own use, to train generalized or non-personalized AI models, or to make credit or lending decisions. Lindy reads comments on your Google Docs, Sheets and Slides files that are assigned to you or mention you only to create and close your own tasks, and keeps no copy of the rest of the file. Human access to Google user data is limited to the cases the Limited Use requirements permit: with your consent, for security or to comply with law, or on aggregated and anonymized data.
How we protect it#
Your data is encrypted in transit and at rest. Access to production systems and stored data is limited to authorized staff who need it, and stored connector and AI credentials are encrypted. No system is perfect, but we work hard to keep your meetings and tasks safe.
Data retention#
We keep your content for as long as your account is active so the service continues to work. You can delete individual items or export your content at any time, and you can delete your account whenever you choose. When you delete your account or your content, we remove it from our active systems and backups within 90 days, except where a limited retention period is required by law. Billing records (invoices, payments and subscription history) are kept after you delete your account, and any active subscription is cancelled. De-identified content sent to Lindy AI is not used for training; Google may retain it for a limited period for abuse monitoring under its AI service terms, and Lindy deletes batch-processing jobs and their files once results are retrieved. When you disconnect a Google source or delete your account, we also revoke Lindy's access to your Google account at Google, so any stored access and refresh tokens stop working immediately.
Your rights & choices#
- Access, export or delete your content at any time from your workspace.
- Delete your account at any time.
- Disconnect any calendar, video or Google source in one click.
- Opt out of marketing emails using the link in any message.
Cookies#
We use cookies and your browser's storage to run the service, not to advertise to you.
- Keeping you signed in - when you log in, we store your session in your browser and remember basic preferences and where you were in the app.
- Understanding usage and fixing problems - we use PostHog for product analytics and error tracking. It stores a small identifier so it can recognise your browser across visits, and records app sessions to help us improve; all on-screen text and anything you type are masked in these recordings, and clicks are recorded without the text of what was clicked.
- Payments - at checkout, our payment provider may set its own cookies to process the payment securely.
We do not use advertising or cross-site tracking cookies. You can clear or block cookies and browser storage in your browser settings; blocking the essential ones may stop you staying signed in.
Changes to this policy#
We may update this policy as our product and regulations change. If a change is significant we will notify you in-app or by email.
Contact us#
Privacy questions or requests? Email legal@lindyhq.com or visit our contact page. We respond within one business day.