Privacy

In short

• The audio of your calls is never recorded, neither by us nor in your browser.
• Your CV is not kept on our servers: it is only used to prepare your card.
• No ads, no selling of data, no analytics tools.
• You can delete your account and your cards at any time from your space.

Who is responsible

PrepNotes is published by Adam Bayar, an independent developer based in France. For any question about your data: contact@prepnotes.app.

What we keep

On our servers (Supabase, in the European Union), for as long as your account exists:

• Your account: your email address. If you sign in with Google, Google also sends us your name and profile picture.
• Your cards: their name and topics.
• Your usage: seconds of listening and amount of text processed each day, to apply your plan's limit.
• Your plan: free or paid.

What stays in your browser

• On the website: the text of your CV or of what you offer, so you don't have to paste it again. PDF files are read in your browser and never uploaded.
• In the extension: your notes, your cards, their layout and your sign-in session.

Uninstalling the extension deletes its data. On the website, the “Effacer” (clear) button under your CV removes it.

What goes through our servers without being kept

AI features go through our server, which forwards the text or audio to OpenAI and returns the result. We keep no copy.

• Preparing or rewriting a card: the text you provide (CV, job offer, client description, extra details) is sent to OpenAI to suggest topics.
• Listening during a call, only when you start listening: the audio of the Google Meet tab, that is the voices of the other participants, is sent to OpenAI in chunks of 30 seconds at most to be transcribed.
• Finding the right tab: the transcribed text and the text of your topics are sent to OpenAI to be compared.

OpenAI is based in the United States. Under its API terms, OpenAI does not use this data to train its models and may keep it for up to 30 days for abuse monitoring.

Listening processes the voices of the other people on the call. Depending on your country or company, you may need to tell them.

Our providers

• Supabase: accounts, database and server (European Union).
• OpenAI: transcription, text comparison, card preparation (United States).
• Vercel: website hosting.
• Resend: sending sign-in codes by email.
• Google: Sign in with Google, if you choose it.

Extension permissions

• Access to meet.google.com: show your card over the call.
• Tab capture: listen to the Meet tab's audio, only after you click the extension icon.
• Storage: keep your notes and cards in your browser.
• Identity: sign in with your Google account.
• Access to our Supabase server: your account, your cards and the AI features.

The use of information received complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Your rights

You can access, correct, export or delete your data. To delete your account, its cards and its usage: “Supprimer mon compte” (delete my account) button in your space, or email us. If you think your rights are not respected, you can complain to the CNIL (cnil.fr) or to your local data protection authority.

Changes

If this page changes, the date at the top changes too. Important changes will be announced on the website.