Privacy

Local-first by design

On the Free tier, everything runs locally. Your recordings, transcripts, and knowledge base never leave your machine. You control where your data goes and which services you connect.

What we collect (cloud tier only)

If you use our cloud tier, we collect your email for authentication and usage metrics to improve the service. We do not sell your data.

Third-party services

Depending on your configuration, you may connect:

• Resend: For transactional emails (verification, password reset)
• Stripe: For payment processing on paid tiers — Stripe is a PCI-DSS-compliant payment processor; we never see your card details
• Cloudflare R2: For file uploads (cloud tier)
• Northflank: For application hosting (cloud tier — backend and web run there)
• Ollama, Anthropic, or OpenAI: For LLM processing — your choice; BYOK supported
• Sentry: For error monitoring (no message content; stack traces and request IDs only)

Where data lives

For cloud-tier accounts, application data (accounts, meetings, transcripts, themes) is stored in a Postgres database hosted on Northflank in the EU region. Stripe customer records sit in Stripe's infrastructure (US/EU per their data residency). Uploaded audio is processed and discarded; only derived text artifacts are retained.

Backups and logs may persist for up to 30 days after deletion before being purged from infrastructure.

Your rights

You can:

• Access the data we hold on you (request via privacy@haberdash.io)
• Correct inaccurate personal information
• Export your data at any time in standard formats
• Delete your account and all associated data — the in-app "Delete account" button drops your tenant schema and cancels any active subscription
• Object to processing or restrict it (where applicable under GDPR/CCPA)
• Modify your settings to change which third-party services you use

Questions?

Reach out to us at privacy@haberdash.io