Privacy Policy

Steflow ("we", "us") makes two products: Steflow, a sales outreach tool, and Bookedt, a meeting assistant. This policy explains what data we collect, why, and what we do with it. Questions? Email us at support@steflow.ai.

• Your account: your name, email address, and password (stored hashed — we cannot read it). If you sign in with Google, we get your name, email, and profile picture from Google.
• What you put in: leads, contacts, notes, tasks, and campaign content you create or upload.
• Your meetings (Bookedt): if you record a meeting, we process the audio to create a transcript, a summary, and follow-up notes. We also read the meeting title and attendee list from your calendar so we know who the meeting was with.
• Connections you set up: when you connect a CRM (like HubSpot, Pipedrive, or Close), a chat tool (like Slack or Google Chat), or your calendar, we store the keys needed to talk to those tools. These keys are stored encrypted.
• Basic usage data: logs of what happened in the product (for example, "a sync ran"), used to keep the service working and debug problems.

• To run the product: sync meetings and contacts to the CRM you connect, prepare meeting briefs, and send hand-off cards to the chat tool you connect.
• To improve reliability and fix bugs.
• To email you about your account or the service.

We never sell your data and we do not show ads. When Bookedt posts a card to Slack or Google Chat, the card contains only the task and a link — never meeting content. The full brief stays behind Bookedt sign-in.

Transcripts, summaries, and briefs are created with the help of AI providers (currently Groq for transcription and Anthropic for summaries). They process your data only to provide the service to us, and they are not permitted to use your data to train their models. AI output can contain mistakes — the product always shows it to a human for review and never sends anything to your customers on its own.

If you connect a Google account, here is exactly what we access and why:

• Google sign-in: your name, email, and profile picture — to create and identify your account.
• Google Calendar: your free/busy times — to suggest meeting slots; events we create at your request (with invites and a Meet link); and the title and attendees of meetings you record — so briefs and CRM records are attached to the right people.
• Google Chat: if you connect a space, we post mention cards to that space.

Our use of Google user data follows the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except as needed to provide the features above, we do not use it for advertising, and we do not use it to train AI models.

We use a small number of service providers to run the product:

• Hosting and databases: Vercel, Railway, Neon, and Supabase.
• AI: Groq (transcription) and Anthropic (summaries), as described above.
• Contact enrichment: FullEnrich, to find business contact details for people you are already meeting with.
• The tools you connect: your CRM, calendar, and chat tool receive the data needed to do what you asked (for example, a meeting note synced to your CRM).

These providers may only use your data to provide their service to us.

Laws about recording conversations differ by country and state. When you record a meeting with Bookedt, you are responsible for telling participants and getting any consent your local law requires.

Data moves over encrypted connections (TLS). Passwords are hashed. API keys, tokens, and webhook URLs are encrypted at rest. Access to production systems is limited to people who need it.

We keep your data while your account is active. If you delete a connection, its keys are removed. To delete your account and its data, email support@steflow.ai and we will remove it within 30 days, except for records we must keep by law.

You can ask us to show you the data we hold about you, correct it, export it, or delete it. Email support@steflow.ai. If you are in the EU/EEA or UK, these are your GDPR rights and you may also complain to your local data protection authority.

Our products are for business use and are not intended for anyone under 16.

If we change this policy in a meaningful way, we will update this page and the date at the top, and for significant changes we will tell you by email or in the product.