Personal Data Protection Policy

This policy explains how aerstech ("aerstech", "we") collects, uses, stores and protects the personal data of people who visit this site (attendmeet.com) or create an account or subscribe to AttendMeet. It applies to the website, account registration and the contact process, not to how each customer treats their own meeting data once they install AttendMeet on their own infrastructure, in which case the customer is the data controller and aerstech acts as processor.

01 Data controller

aerstech is the controller of the personal data you provide us through this site, account registration, the contact form, or direct email communication.

02 Applicable rules

This policy is primarily grounded in Colombian law, and also takes into account rules applicable to visitors from other jurisdictions:

03 Definitions

• Personal data: any information linked to, or that can be associated with, one or more identified or identifiable natural persons.
• Data subject: the natural person whose personal data is processed.
• Controller: the party that decides on the database and/or the processing of the data (in this case, aerstech).
• Processor: the party that processes personal data on the controller's behalf.
• Processing: any operation on personal data, such as collection, storage, use, circulation or deletion.
• Consent: the data subject's prior, express and informed authorization for the processing of their data.

04 Personal data we collect

We collect personal data only when you choose to provide it, through these channels:

• Account registration: name, email address and, for company accounts or identity verification, data such as national ID / tax ID, phone and company name. Used to create and manage your account.
• Payments: subscriptions are charged through Mercado Pago and Lemon Squeezy. Those gateways process your payment details under their own policies; aerstech does not store your full card number.
• Contact form: name, email address, WhatsApp number, company, team size, meeting platforms you use (Zoom, Google Meet, Microsoft Teams) and an optional message.
• Direct email to info@aerstech.com: whatever data you choose to include in your message.

This site does not use third-party analytics or advertising cookies. If that changes in the future, this policy will be updated before they are activated.

Google Workspace (Calendar) data and Limited Use

When you connect your Google Calendar, AttendMeet requests read-only scopes (calendar.events.readonly and calendar.calendars.readonly) solely to detect your meetings and have the assistant join them automatically. This data is not used for any other purpose and is never transferred to AI services or used to train, improve or fine-tune models.

Our use of data received from Google Workspace APIs adheres to theGoogle API Services User Data Policy, including theLimited Use requirements: "The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements."

AttendMeet browser extension

The AttendMeet Chrome extension lets you record your Google Meet, Microsoft Teams and Zoom meetings directly from the browser, without inviting an extra participant. When you use it, the following data is processed:

• Meeting audio: the audio of the meeting tab you choose to record is captured for the sole purpose of transcribing it. You always start the recording, and you must let participants know before recording.
• Participant names: on Google Meet, Microsoft Teams and Zoom, the extension reads the participants' visible names on the meeting screen to attribute who said what (diarization).
• Account identity and authentication: your email and your AttendMeet session credentials/token, to sign you in (Google or email login) and associate the recording with your account.

Audio and transcripts are processed and stored on our own infrastructure (Amazon Web Services), solely to generate the transcript, summary, decisions and tasks of your meeting and make them available in your panel and by email.We do not sell this data, do not share it with third parties for purposes unrelated to providing the service, and do not use it for advertising or to train artificial-intelligence models. You can request deletion of your recordings and data at any time (see "Your rights as a data subject").

05 Purposes of processing

• Creating and managing your AttendMeet account and subscription, and processing your payments.
• Responding to your information or support requests.
• Analyzing requests received in aggregate, to prioritize product development.
• Complying with legal, contractual and accounting obligations.

We do not sell your personal data or share it with third parties for commercial purposes other than those described here.

06 Your rights as a data subject

Under Art. 8 of Colombian Law 1581 of 2012, you have the right to:

• Know, update and rectify your personal data.
• Request proof of the authorization granted to aerstech.
• Be informed about how your data has been used.
• File complaints with the Superintendence of Industry and Commerce (SIC) for violations of the law.
• Revoke your authorization and/or request deletion of your data, when no legal or contractual duty prevents it.
• Access your personal data free of charge.

If you are located in the European Union, the GDPR also grants you the rights to data portability, restriction of processing and objection. If you are located in California, the CCPA/CPRA grants you the right to request deletion of your data and to opt out of the sale or sharing of data; aerstech does not sell or share personal data with third parties.

07 How to exercise your rights

You can exercise any of these rights by writing to info@aerstech.com, stating your full name and the right you wish to exercise. We will respond to inquiries within a maximum of 10 business days (extendable by 5 additional business days when necessary, Art. 14 of Decree 1377/2013) and to complaints within a maximum of 15 business days (Art. 15 of Decree 1377/2013).

08 Processors and data transfers

We use technology providers (for example, cloud infrastructure) to operate the site and the contact form. These providers act as processors under our instructions and only for the purposes described here. When those providers are located outside Colombia, we observe the safeguards in Art. 26 of Law 1581 of 2012 (or Art. 44 to 49 of the GDPR, if applicable) before transferring data.

09 Information security

We apply reasonable technical and organizational measures to protect your personal data, including encryption in transit (HTTPS/TLS) across all communications with this site and restricted access to the information received.

10 Data retention

We retain your personal data for as long as necessary for the purposes described in this policy, or until you request its deletion, unless a legal obligation requires us to keep it longer.

11 Minors

This site is not directed at minors. We do not knowingly collect personal data from minors.

12 Changes to this policy

We may update this policy when our practices or applicable rules change. The "last updated" date at the top of this document reflects the version currently in effect.

13 Supervisory authority

In Colombia, the supervisory authority for personal data protection is the Superintendence of Industry and Commerce (SIC).

Questions about this policy or about how your data is processed? Write to us at info@aerstech.com.