Privacy policy

trepil records your meetings, so it holds some of the most personal things you say and hear. This policy says plainly what we collect, what we do with it, who else touches it and when it is gone.

Who we are

Attechy Ltd runs trepil and is the controller of the personal data described here. We are registered in England and Wales, company number 16498242, at 71-75, Attechy Ltd Shelton Street, London, United Kingdom, WC2H 9JQ. For anything about your data, write to hello@trepil.com with "privacy" in the subject.

The short version

• Nothing joins your calls. trepil records on your own device.
• Recordings are uploaded to be transcribed. Meeting audio is deleted as soon as the meeting is written up; voice memo recordings after 30 days, or when you choose in Settings.
• Your notes and transcripts stay until you delete them, and go with your account when you delete it.
• Voice recognition is off unless you turn it on. Then trepil keeps a voiceprint of your voice, and only yours: never one of anyone else.
• We don't sell your data, use it for advertising, or use your content to train AI models.

What we collect and why

Your account

Your email address, the name you give us, and, if you sign in with Apple, Google or Microsoft, the identifier and email address they pass on. We need these to give you an account (the contract between us).

Recordings

When you record a meeting or a voice memo, or upload a recording, the audio is uploaded so it can be transcribed. A meeting's audio is deleted as soon as the meeting is written up; if it is never written up, it is deleted after 30 days. A voice memo's recording is deleted 30 days later by default, and in Settings you can have it deleted as soon as its note is written, or kept for as long as you keep the memo. The note and its transcript are not deleted with the audio. We process recordings to provide the service (the contract).

Notes, transcripts and what you write

Transcripts, write-ups, checklists, the notes you type, folders, and the questions you ask and their answers, with a search index made from your notes so Ask can find things in them. These are what trepil is for (the contract).

Calendars

If you connect a calendar, the events trepil needs to remind you about meetings and name the people in them: titles, times, call links, and attendees' names and email addresses. Google and Microsoft calendars are read through their services, with the keys held only on our servers; an Apple calendar is read on your device. Attendees' details are processed on the basis of our legitimate interest in naming the speakers in your own notes, and you can disconnect a calendar at any time.

People in your meetings

A recording, a transcript and a note hold what other people said, and their names. You decide what to record and whom to share it with (see recording other people in the terms); we process it only to provide the service to you.

Before a meeting with people from another company, the brief can look them up on the public web: their role, their company and their LinkedIn profile. The search is told only their name and their company's web address, never their email, and finds only what is already public. What it finds is kept for 30 days so the same person isn't looked up again. This rests on our legitimate interest in helping you prepare for a meeting they agreed to, and briefs can be turned off in Settings.

Integrations and shared notes

If you connect Slack, Notion, HubSpot, Attio or Linear, we hold the access it grants and send it the notes you choose to send. When you share a note as a link, a copy is published at that link until you turn it off.

Billing

Your plan, its status and dates, and the customer reference Stripe or Apple gives us. We never see your card details.

Usage, devices and diagnostics

How much you have recorded and asked, so we can apply the fair use policy; anything you tell us in its request form; your devices' platform, app version and notification token, so we can sync and notify them; and crash and error reports, which leave out your content. In the apps we count how trepil is used, such as starting a recording, asking a question or reaching the plans, so we can see where it stops working for people. Those counts go to PostHog under an account id, with screen recording turned off, and never include what you wrote or said. You can turn this off in Settings, under Data and privacy, with Share usage data: nothing more goes to PostHog, and what went is removed. We still keep our own record of these counts, crash reports, and what we need to run your account, such as billing and fair use. It is also removed when you delete your account. The sign-in page counts that it was opened and that a try failed, with no cookie, no email address and no way to tell one visit from the next. These rest on our legitimate interests in running a working, fair service, and you can object at any time.

Feedback on briefs

When you rate a meeting brief, we keep the brief you rated with your rating and anything you tell us about it, and the trepil team reads them to make briefs better. Nothing else of yours is read for this. It rests on our legitimate interest in improving trepil.

Email

Sign-in emails, and notices about your trial, renewal, payments and fair use, which come with the service. If we send news about trepil, every email has a one-click unsubscribe.

Names on a call, on the Mac

On the Mac, trepil can work out who is on a call in two ways, each only if you allow it in System Settings. It keeps the names and when they showed, never a picture, and the other people on the call are not told by trepil, so tell them when you tell them you are recording.

• From the call's window. On a call with no calendar event, if you allow Screen Recording, trepil takes a few screenshots of the Zoom, Teams or Meet window in the first minutes. It reads the small text on your Mac and drops each picture straight away.
• From who is talking. If you allow Accessibility, trepil reads who Zoom, Teams or Meet shows as talking.

The names go to our servers and AI providers to put names on the transcript, as a calendar's invitees do. This rests on our legitimate interest in making notes you can follow. You can turn either off in System Settings, and rename any speaker.

Workspaces and teams

When you join a workspace, the people in it can see some things about you. Your private notes are not one of them.

The activity log. It records who joined or left, role and seat changes, invites, folders and notes shared and with whom, team templates, and changes to the workspace's settings. Only owners and admins can read it. We keep each entry for one year, then delete it.

People you invite. When you invite someone, you give us their email address and we email them the invite. If a member asks for a seat for someone, owners and admins see that request and who made it.

Company domains. If a workspace verifies a company domain, people who sign up with an email there may be able to find it or ask to join. If its owner turns on automatic joining, they join as free viewers.

Keeping notes. Owners and admins can set how long notes in a workspace are kept. Older notes then move to Trash, and this applies to everyone's notes in that workspace.

If you leave. Your own notes stay with you. The workspace's activity log still shows what you did there until those entries are a year old.

Business customers. If your company uses trepil and needs a data processing addendum, write to hello@trepil.com and we will send it.

Voices

Of who spoke when in a meeting, trepil keeps the result: which lines belong to which speaker. It keeps a voiceprint for one kind of person only, a trepil user who turned on voice recognition.

Voice recognition, if you turn it on

Voice recognition puts your name on your words when anyone using trepil records a meeting you're invited to, so nobody has to name you again, and in your own recordings it tells you apart from other people in the room. It is off until you turn it on, as its own choice during setup or in Settings, Data and privacy. Accepting our terms does not turn it on. We record when you agreed and the wording you agreed to.

• What we keep. A voiceprint: a list of numbers that describes how your voice sounds (a speaker embedding). It is made on your Mac, from a short passage you read aloud there and from your own microphone in meetings you record on it. The read-aloud recording is deleted on your Mac as soon as the numbers are made and is never uploaded. A voiceprint is biometric data, and we treat it as special category data under UK and EU law.
• What it is used for. Only to recognise your voice in meetings recorded with trepil. Never for advertising, never to train AI models, never to identify you anywhere else. We don't sell, lease, trade or otherwise profit from it, and we don't share it with anyone outside trepil and Supabase, which stores it for us.
• Who can be matched against it. Meetings recorded with trepil whose calendar invite includes your email address, by anyone who uses trepil, and your own recordings. Nothing else: a meeting you weren't invited to never compares your voice. The comparison runs on our servers. Nobody can download your voiceprint or see the numbers, including the people whose meetings it is compared with, and including you. What a match shows the person recording is your name on your words, or a suggested name they can accept or reject.
• How long we keep it. Until you turn voice recognition off, which deletes it straight away, or delete your account. If you stop using trepil it is deleted automatically after 3 years.

Our lawful basis is your explicit consent (Article 9(2)(a) UK and EU GDPR). In Illinois, Texas, Washington and other places with biometric privacy laws, turning it on is your written consent for the uses described here and this section is our retention and destruction policy. You can withdraw your consent at any time in Settings, as easily as you gave it.

Everyone else in a meeting

People who don't use trepil, and trepil users who haven't turned voice recognition on, never get a voiceprint. Voices are compared only in a meeting recorded on a Mac whose calendar invite includes someone who turned voice recognition on, and only against those invited people's voiceprints; and, when the person recording turned it on, the voices their own microphone hears are compared with their own voiceprint, to tell which one is them. A meeting with neither compares nobody's voice. The numbers describing the voices are used for that comparison and then thrown away, never stored. A voice that matches nobody stays Speaker A, B and so on until someone names it. The person recording is responsible for telling the others, as with the recording itself (see our terms).

AI and your content

Transcription, write-ups, briefs and answers are made by AI providers, listed below, which receive the audio or text needed for each job and return the result. They process it for us, under contracts that let them use it only to provide that service. We don't use your recordings, notes or transcripts to train AI models, and where a provider offers it, our requests ask it not to keep them. When Ask needs the web to answer, the words of your question are sent to a search provider; your notes are not.

Who else receives it

These companies process data for us, each only for the job described:

• Supabase. Supabase, Inc. Holds your account, notes, transcripts and recordings, in its European region, and runs the service that processes them.
• Cloudflare. Cloudflare, Inc. Hosts this website, shared note pages, live sync between your devices, and app updates; stores the list of people waiting for Windows and the iPhone app.
• Stripe. Stripe, Inc. and Stripe Payments Europe Ltd. Sells the plan on the web, Mac and Windows through Stripe Managed Payments, and handles card details, tax and receipts under its own privacy policy.
• Apple and RevenueCat. Apple Inc. sells the plan on iPhone; RevenueCat, Inc. tells us which plan an iPhone purchase is for.
• Groq, Soniox and ElevenLabs. Groq, Inc., Soniox, Inc. and ElevenLabs, Inc. Turn recordings into text. Which one depends on the device and the kind of recording; one stands in when another is down.
• Anthropic and OpenAI. Anthropic, PBC and OpenAI, L.L.C. Write up meetings and memos, name speakers, answer Ask, write briefs and titles, and make the search index of your notes; each stands in for the other when one is down. OpenAI also checks shared pages for content that breaks our terms.
• Tavily. Tavily, Inc. Reads a web link when you ask about one.
• Resend. Plus Five Five, Inc. Delivers our email: sign-in links and codes, trial and renewal reminders, payment and fair use notices.
• Sentry. Functional Software, Inc. Collects crash and error reports from the apps, in its EU region. Reports leave out note text, transcripts, email addresses and searches.
• PostHog. PostHog, Inc. Counts how the apps are used, and the home page of this website, in its EU region, with screen recording turned off. It gets an account id and what was done, never note text, transcripts, questions, names or email addresses.
• Google and Microsoft. Only if you connect a Google or Microsoft calendar, or sign in with either.

We don't sell your data, share it with advertisers, or use it for advertising.

We may also share data if the law requires it, for example under a court order, or to protect people's safety or our legal rights. Where we can, we will tell you first.

If trepil or Attechy Ltd is sold or merged, your data would pass to the new owner under this policy, and we would tell you first.

Transfers outside the UK

Several of the companies above are in the United States and may process data there. Those transfers rely on the UK Extension to the EU-US Data Privacy Framework where the company is certified under it, and otherwise on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. Ask us and we will send you a copy of the relevant safeguards.

How long we keep it

• Recordings: meeting audio until the meeting is written up (30 days at most); voice memo recordings 30 days, or sooner or for as long as you keep the memo, as you choose.
• Notes, transcripts and your account: until you delete them. A note in Trash is deleted for good 30 days after it went there. Deleting your account cancels your plan and deletes your notes, transcripts and recordings.
• Shared notes: until you turn the link off or delete the note.
• Calendar events: while the calendar is connected; disconnecting it removes them.
• Web lookups for briefs: 30 days.
• Brief ratings: until you delete your account.
• Your voiceprint, if you turned voice recognition on: until you turn it off or delete your account, and at most 3 years after you last use trepil. The record of when you agreed is kept with your account, as proof of consent.
• A workspace's activity log: one year.
• Billing records: as long as the law requires us to keep them for tax and accounting, usually six years.
• Usage counts and diagnostics: only as long as they are useful for fair use and fixing problems.

How we protect it

Data on our servers is encrypted at rest with AES-256, and connections between the apps and our servers use TLS. Notes stored on your device are protected by your device's own security, such as FileVault or BitLocker, so keep that turned on. No system is completely secure, but we work to protect your data and to limit who can reach it.

If there is a data breach

If a breach is likely to put you at high risk, we will tell you without undue delay, with what happened and what we are doing about it. Where the law requires it, we also report it to the Information Commissioner's Office within 72 hours.

This website

trepil.com sets no cookies and runs no advertising trackers. It keeps two things in your own browser: whether you chose the light or dark theme, and a note that the logo has already played its entrance in this visit. Neither is sent anywhere.

The home page counts its visits and tests two versions of its top section against each other, with PostHog, to learn which one makes it clearer what trepil is. This uses no cookies and stores nothing in your browser. PostHog gets which page you opened, which version you saw, how far you scrolled, and which of the Download for Mac and Use on the web buttons you pressed, through trepil.com, in its EU region. It tells visits apart with an anonymous code it makes from your connection and browser details and changes every day, so it can't follow you from one day to the next or to other sites, and we don't tie it to your email address. If your browser sends Do Not Track, nothing is sent.

If you ask us to email you when Windows or the iPhone app is ready, we keep your email address, which one you asked about, where on the site you asked, and the country your connection came from, to write to you once, when it is ready. We keep it until we have written or you ask us to remove it. Cloudflare, which hosts the site, records connection details such as IP addresses for security, for a short time.

Your rights

Under UK and EU data protection law you can ask us to:

• tell you what we hold about you and give you a copy;
• correct it;
• delete it;
• restrict or object to how we use it, including anything we do on the basis of legitimate interests;
• give it to you in a portable form;
• and, where we rely on your consent, withdraw it at any time.

Much of this you can do yourself: export or delete any note, download everything in one zip from Settings, and delete your account there. For the rest, email us. We reply within one month.

We don't make decisions about you based only on automated processing that have legal or similarly significant effects.

Children

trepil is not for anyone under 16, and we don't knowingly collect their data. If you think a child has an account, tell us and we will delete it.

Changes and complaints

We will update this policy when what we do changes. The date at the top shows the last change, and if a change matters to you we will email you first.

If you are unhappy with how we have handled your data, tell us first if you can. You can also complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk, or to the data protection authority where you live.