Privacy Policy
Last updated: 21 October 2026
botato ("we", "us") lets the AI agent you already use join your video calls, take notes and answer questions about the meeting. This policy explains what we collect, why, who helps us run the service, and the choices you have. Questions: hello@doable.team.
What we collect
Your account
Your email address and name, and the details of your sign-in, handled by our sign-in provider (Clerk). We also keep the name and settings of your agent, and the API keys you create for it.
Your meetings
When you send the bot to a meeting we process the meeting link, its title and time, the audio of the call, the platform's live captions, who spoke, the meeting chat (what people type to the bot and what it replies), and the transcript and notes we produce from them. This includes what other people in the call say.
Usage and technical data
Basic logs needed to run and protect the service, such as request times, IP addresses (used for rate limits and abuse prevention) and error reports. We store your time zone in a cookie so times show correctly.
Payments
Paid plans are billed through a payment provider. We receive confirmation of your plan and billing status, not your full card number.
How we use it
- To run the service: join your meetings, transcribe them, write notes, answer questions in the meeting chat, and make everything available to you and your agent through the dashboard, the API, MCP and webhooks.
- To keep the service secure, prevent abuse and fix problems.
- To bill you and to contact you about your account.
We do not sell your data, and we do not use your meeting content for advertising.
Who helps us run it
We use these types of providers, and share with them only what they need to do their job:
- Meeting bot provider (Attendee): joins the call and records audio and captions.
- Speech-to-text provider (Soniox): turns the recording into a transcript. Files and jobs are deleted from it after processing.
- AI model provider: writes the notes and answers questions from the transcript.
- Sign-in provider (Clerk): accounts, sessions and API keys.
- Hosting and database providers: where the service and your data run.
- Payment provider: subscriptions and invoices.
If you set a webhook URL, we send your meeting results to that address. It is yours to protect.
The people on your calls
The bot joins under its own name ("Your agent via botato") and tells the meeting in the chat that it is an AI notetaker recording the call. You are responsible for having the right to record and transcribe your meetings, including telling participants and getting consent where the law requires it. Anyone in the call can ask the bot to leave by typing its name and "leave" in the chat, or ask the host to remove it.
How long we keep it
The recording is deleted from the meeting bot provider once your notes are ready. Your notes, transcript and chat answers stay in your account until you delete them. You can delete a single meeting, or all of your meetings, from the dashboard, and you can delete your agent, which also revokes its API keys. Deleting a meeting removes its notes, transcript and recording. Some data may remain for a short time in backups and logs.
Your choices and rights
You can see and delete your meetings in the dashboard. You can also ask us to export, correct or delete your data, or close your account, by emailing hello@doable.team. Depending on where you live, you may have further rights, such as objecting to certain processing or complaining to your data protection authority. If you are a participant in someone else's meeting and want your data removed, contact us or the person who invited the bot.
Security
Data is encrypted in transit. API keys are managed by our sign-in provider and shown only once when created. Access to your meetings is limited to your own account and agent. No system is perfectly secure, so we cannot guarantee absolute security.
Cookies and this website
The app uses cookies that are necessary to keep you signed in and to remember your time zone. We do not use advertising cookies. This website loads fonts from Google Fonts, which means your browser contacts Google when the page loads.
International transfers
Our providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
Children
botato is for people aged 18 and over. We do not knowingly collect data from children.
Changes
We may update this policy. If the changes are significant we will tell you, for example by email or in the app. The date at the top shows the latest version.