Privacy policy

Effective Date: [ August 30, 2026 ]

1. Introduction

SpeakON ("we", "us", or "our") is a product operated by NOTTA PTE. LTD. We are committed to protecting the privacy of all our users. This Policy describes how we collect, use, process, and disclose your information when you use the SpeakON AI hardware device (the "Device"), mobile application (the "App"), and related services (the "Services"). Please read this Policy carefully. By using our Services, you acknowledge the practices described in this Policy.

"Agent Features" means features that can plan or perform multi-step tasks at your direction, including accessing or interacting with websites, applications, files, or Connected Services and taking actions on your behalf.

2. Information We Collect

SpeakON collects information that is reasonably necessary to provide, maintain, protect, and improve the Services, including the categories below. “Customer Content” means content you submit, upload, record, generate, or otherwise provide through the Services, including voice recordings, transcripts, generated text, prompts, edits, dictation history, and SpeakON Notes.

2.1 Account Information

Account information may include your name, email address, and password when you create an account. This information is used to create and secure your account, authenticate your access, maintain your preferences, and communicate with you about the Services.

2.2 Device and Hardware Information

Device and hardware information may include device serial number, firmware version, battery status, storage status, and related diagnostic data. This information is used to pair and manage your Device, deliver updates, diagnose technical issues, maintain security, and help ensure the Device functions properly.

2.3 Connection Information

Connection information may include Bluetooth connection logs between the Device and the App. This information is used to sync the Device with the App, transfer user-requested recordings or content, troubleshoot connection issues, and maintain reliable device performance.

2.4 Original Voice Recordings

Original voice recordings are processed to provide transcription, text generation, correction, SpeakON Notes, and related SpeakON features. They are retained only for the short term necessary to provide the service output, then deleted unless you explicitly consent for feedback analysis or retention is otherwise required or permitted by law. Voice recordings are processed only with your consent as the user. If recordings involve third parties, you are responsible for obtaining any consent required by applicable law before using SpeakON.

2.5 Transcribed Text, Dictation History, and SpeakON Notes

When you use SpeakON, transcripts, generated text, edits, dictation history, and SpeakON Notes may be generated and stored based on your recordings, instructions, or use of the Services. This content is used to provide the features you request, maintain your account, and support user-directed workflows. It is retained for as long as needed to provide the Services, maintain your account, support user-requested features, or comply with applicable legal obligations. You may delete saved content in the App, subject to retention required or permitted for legal, security, fraud prevention, dispute resolution, backup, or other legitimate business purposes.

2.6 Connected Services

If you choose to sign in with Google or connect a third-party service, SpeakON collects and processes only the account information, permissions, and content that you authorize and that is needed to provide the requested feature. This may include profile information, selected text, documents, calendar information, email, Slack content, Google Workspace information, or other connected-service content, depending on the features you use and the permissions you grant. This information is used to authenticate the connection, operate the connected feature, and process only the content you choose to use with SpeakON. SpeakON does not access connected-service content unless you connect or authorize the relevant feature.

2.7 Agent Task and Activity Data

When you use Agent Features, we process the task instructions, content, permissions, action data, confirmations, tool results, error information, and related technical information reasonably necessary to perform the requested task, show task progress, maintain security, troubleshoot issues, and prevent abuse.

2.8 User Feedback

If you voluntarily submit feedback, bug reports, support requests, or diagnostic information, that information may be processed to respond to your request, troubleshoot issues, understand the issue you reported, and improve the Services.

2.9 Device and Log Information

Device and log information may include operating system, unique device identifiers, crash data, feature usage, and session duration. This information helps maintain service reliability, diagnose errors, protect the Services, prevent abuse, and understand whether key features are working as intended.

2.10 Cookies and Similar Technologies

Cookies and similar technologies are used to provide website functionality, maintain user sessions, remember preferences, support analytics, and measure advertising effectiveness. These technologies help our website and related online services operate reliably and improve over time.

2.11 Voiceprints and Biometric Identification

SpeakON does not create voiceprints or use voice recordings to identify or authenticate you by your voice. This statement is included to clarify that voice recordings are processed to provide requested speech-to-text, text generation, correction, SpeakON Notes, and related features, not to identify you by biometric characteristics.

3. How We Use Your Information

3.1 To Provide and Improve Services

Information is used to provide, maintain, personalize, and improve SpeakON, including generating and correcting text, creating SpeakON Notes, syncing transcripts, generated text, dictation history, and SpeakON Notes across devices when Cloud Sync is enabled, and providing user-requested features.

3.2 AI Training

We do not use Customer Content, including voice recordings, transcripts, generated text, prompts, edits, dictation history, or SpeakON Notes, to train SpeakON AI models or third-party AI models. We also contractually require third-party AI and infrastructure providers that process Customer Content for us not to use that content for their own AI model training, independent advertising, or unrelated purposes.

3.3 Service Improvement

Technical information, diagnostics, error reports, usage information, and aggregated or de-identified information may be used to maintain, secure, troubleshoot, and improve the Services. This does not include using Customer Content for AI model training.

3.4 Marketing and Analytics

Information may be used to measure advertising performance and inform you about new features, promotions, and services that may be of interest to you. Marketing communications can be unsubscribed from at any time. Aggregated or anonymized data may also be used for business analytics and to explain the value of our Services.

3.5 Communication, Security, and Compliance

Information may be used to send service-related notices, provide customer support, protect the Services, and comply with legal obligations.

3.6 Safety and Abuse Prevention

We may use automated systems to detect fraud, abuse, malicious automation, attempts to circumvent safeguards, threats of violence, risks of serious harm, and other violations of our User Terms. Where activity is flagged, authorized personnel or service providers may review relevant Customer Content, Agent activity records, account information, and technical information on a need-to-know basis to investigate the issue, protect users and the Services, enforce our agreements, and comply with law. Safety and abuse review is separate from AI model training.

4. Children’s Privacy

The Services are not directed to children under the age of 13, or the applicable minimum age in the relevant jurisdiction. We do not knowingly collect Personal Information from anyone below that age. If you believe that a child below the applicable minimum age has provided Personal Information to us, please contact us, and we will investigate and, where appropriate, delete the information.

Users under 18 may use the Services only with the permission and supervision of a parent or legal guardian. A parent or legal guardian may contact us to exercise applicable privacy rights on behalf of a minor.

5. Service Providers, Legal Disclosures, and Non-Identifiable Information

5.1 Service Providers

Service providers are used where necessary to operate and support SpeakON, such as cloud hosting, data processing, speech and AI processing, analytics, security, and customer support providers. These providers process information only on our behalf and under contractual obligations. Third-party AI and cloud infrastructure providers are restricted from using Customer Content for their own AI model training, independent advertising, or any purpose other than providing services to SpeakON.

5.2 Aggregated or Non-Identifiable Information

Aggregated, anonymized, or otherwise non-identifiable information may be used for analytics, business operations, product improvement, and to explain the value of our Services. SpeakON does not sell your personal data.

5.3 Legal Requirements and Business Transfers

We may disclose information if required to comply with law, respond to valid legal requests, protect rights and safety, enforce our agreements, or in connection with a merger, acquisition, financing, reorganization, or sale of assets.

If we reasonably and in good faith believe that disclosure is necessary to address an imminent threat of death or serious physical harm, prevent fraud or a security incident, protect the rights and safety of users or third parties, or comply with applicable law, we may preserve and disclose relevant information to appropriate recipients, including service providers, affected parties, emergency services, or competent authorities, to the extent permitted or required by law.

6. Data Retention

Personal Information that SpeakON stores or processes, or that service providers process on our behalf, is currently hosted and processed in the United States, including through Amazon Web Services infrastructure located in U.S. regions. We require service providers that process Personal Information on our behalf to comply with our documented instructions, contractual confidentiality and security obligations, and applicable law. This U.S.-only statement does not apply to information that you direct Agent Features to transmit to a Connected Service, website, recipient, or other third party. Such third parties process information in accordance with their own terms and privacy policies, and their processing locations may differ. If we materially change the locations in which Personal Information is stored or processed by or on behalf of SpeakON, we will update this Policy and provide any notice or obtain any consent required by applicable law.

6.1 General Retention

Personal information is retained only for as long as necessary for the purposes outlined in this Policy or as required by law.

6.2 Original Voice Recordings

Original voice recordings are retained only for the short term necessary to provide the service output, then deleted unless you explicitly consent for feedback analysis or retention is otherwise required or permitted by law.

6.3 Transcribed Text, Generated Content, and SpeakON Notes

Transcripts, generated text, edits, dictation history, and SpeakON Notes are retained for as long as needed to provide the Services, maintain your account, support user-requested features, or comply with applicable legal obligations. You may delete saved content in the App, subject to retention required or permitted for legal, security, fraud prevention, dispute resolution, backup, or other legitimate business purposes.

6.4 Account Information

Account Information is retained while your account remains active so SpeakON can provide and secure your account, unless you delete it or retention is otherwise required or permitted by law.

6.5 Agent Task Data Retention

Agent task history and saved outputs are retained while they remain available in your account or until you delete them. If you delete an Agent task or your account, the associated Agent task data will be deleted from our active systems within 30 days and from backups within an additional 30 days, unless a longer period is required or permitted for security, fraud and abuse prevention, dispute resolution, enforcement of our agreements, or legal compliance.

Temporary execution data, including intermediate files, webpage screenshots, browser state, tool results, and diagnostic information, is retained only for as long as reasonably necessary to complete the task, maintain task continuity, secure and troubleshoot the Services, and prevent abuse. Unless you choose to save such information or a longer period is reasonably necessary for one of the purposes described above, temporary execution data will be automatically deleted within 30 days after completion or termination of the relevant task.

Authentication credentials, Cookies, and session tokens used to connect third-party services are encrypted and retained only for as long as necessary to maintain the connection authorized by you. They will be deleted, revoked, or otherwise rendered unusable after you disconnect the relevant service, the credential expires or is revoked, or the credential is no longer necessary for the authorized purpose.

Records reasonably necessary for security and abuse prevention, including relevant Agent action logs, confirmation records, and safety-review records, may be retained for up to 90 days, or for a longer period where reasonably necessary to investigate a suspected violation, protect users or the Services, comply with law, or establish, exercise, or defend legal claims.

Actual retention periods may vary depending on the type, amount, and sensitivity of the data; the purposes for which it is processed; your settings and deletion choices; the risk of harm from unauthorized use or disclosure; and applicable legal requirements. When data is no longer required, we delete or de-identify it in accordance with our retention schedule.

7. Your Rights and Controls

Depending on applicable law, you may have the right to:

7.1 Access, Correction, Deletion, and Restriction

You may request access to, correction of, deletion of, or restriction of processing for personal information associated with your account, where required by applicable law.

7.2 Data Portability

Where required by applicable law, you may request a copy of personal information associated with your account in a structured, machine-readable format. Some product data may not be available for export through the App.

7.3 Withdrawal of Consent

You may withdraw your consent at any time where processing is based on consent.

7.4 Marketing Opt-Out

You may opt out of receiving marketing communications from us.

7.5 Managing Your Data

You can delete saved content in the App. You can delete your account through Account > Sign out > Delete account. You may also contact us at support@speakon.app to request access, correction, deletion, or other privacy rights available under applicable law.

7.6 Connected Services

You may disconnect supported connected services through the applicable account or app settings. After disconnection, SpeakON stops accessing that connected service and deletes connected-service data that is no longer needed to provide the Services, maintain security, comply with legal obligations, or resolve disputes.

7.7 Verification of Requests

To help protect your privacy and security, we may need to verify your identity before responding to your request or exercising certain privacy rights. We may request additional information as reasonably necessary to verify your identity and process your request.

8. Additional California Privacy Notice

This section applies solely to California residents. Under the CCPA/CPRA, you have the right to:

8.1 Right to Know

You may request information about the personal information we collect and how it is used and disclosed.

8.2 Right to Delete

You may request deletion of your personal information.

8.3 Right to Correct

You may request correction of inaccurate personal information.

8.4 Right to Opt Out

You may opt out of the "sale" or "sharing" of your personal information. SpeakON does not sell personal data as defined by CCPA.

8.5 Sensitive Personal Information

You may limit the use and disclosure of sensitive personal information where required by applicable law.

8.6 Non-Discrimination

You have the right not to receive discriminatory treatment for exercising your privacy rights.

9. Data Security

SpeakON uses administrative, technical, and organizational safeguards designed to protect Customer Content, including encryption in transit and at rest, access controls, security reviews, and vendor controls. Voice recordings, transcripts, dictation history, and SpeakON Notes are processed in secure environments with limited access. SpeakON has obtained a SOC 2 Type 2 report covering specified systems and controls. While no system can be guaranteed to be completely secure, industry-standard practices are used to reduce risk.

10. Changes to This Policy

This Policy may be updated from time to time. For material changes, SpeakON will post a notice on our website and update the effective date. Continued use of the Services after such notice constitutes acceptance of the updated Policy.