Ata
Privacy policy
Last updated: September 26, 2026
Ata is a browser extension that transcribes meetings on Google Meet, Zoom and Microsoft Teams and uses artificial intelligence to generate minutes, summaries and tasks. This page explains, in plain language, what data passes through Ata, what it is used for, and what you can do about it.
We do not sell your data, we do not show ads, and we do not use the content of your meetings for anything beyond delivering the features you use.
1. What we collect
- Account data. Your email and your account identifier, when you sign in with email and password or with Google. This lets you access your meetings from any device.
- Meeting content. The text of the captions shown by the meeting platform itself, with the name of who spoke and the time of each line, plus the title, the platform, the duration, and any notes, highlights and tags you add.
- Generated summaries. The minutes, summaries and chat answers you ask the AI for.
- Calendar, if you connect it. With read-only access, we read the title, time, link and attendees of upcoming events, to name the meeting and let you know when it is about to start. Ata never creates, changes or deletes events.
- Questions to the assistant and to the site FAQ. When you ask a question to the site assistant or in the FAQ field, the text goes to an AI model to generate the answer. We store the question and the answer, without your IP address and without any data that identifies you, to find out what people most want to know and to improve the site. The assistant conversation stays only in that browser tab and disappears when it is closed. Do not write personal data in your questions.
- Meeting ratings, if you give one. After a meeting, Ata asks how it went, on a scale of one to five stars, with an optional comment. We store the rating, the comment, and a few numbers about the meeting that help us understand the rating: platform, extension version, language, number of speaking turns, duration, how much of the speech had no speaker name, and whether minutes had already been generated. No excerpt of the conversation is included. We use this only to improve Ata.
- Testimonials, if you submit one. Through the site's testimonials page, we store name, role, email, rating, text and photo. The email is never published. Everything else appears on the site only with your authorization and after review, and you can ask for it to be removed whenever you want.
- Early access list, if you join it. Through the site's access page, we store your name, your email, how you said you heard about Ata, and, when it exists, the campaign or link that brought you to the site. We use this only to send your invitation and to understand which outreach works. You can ask to leave the list at any time, and your data is deleted.
- Subscription. If you subscribe to the Pro plan, we store the plan status. Payment is handled by Stripe, and we do not receive or store your card details.
2. Where the data lives
Meetings are stored first in your browser's local storage. When you are signed in to your account, they are also synced to our servers, hosted on Supabase, so that you do not lose anything when you switch computers. Each account can only read its own data, enforced by security rules applied on the server.
3. How we use artificial intelligence
- Summaries, titles and chat. When you generate minutes, a summary, or ask a question, the transcript text is sent to our server, which forwards the request to an AI model provider through OpenRouter. With the automatic title option turned on, the same happens with an excerpt of the transcript when the meeting ends. The text is used only to generate the answer.
- No audio and no video. Ata does not record or capture the meeting's audio or video. It only reads the caption text that the platform itself already shows on screen.
- Nothing is downloaded to run. All of the extension's code ships in the package installed from the Chrome Web Store. Ata does not download scripts, AI models or other programs while you use it.
4. When something is shared
- Public links. If you create a share link, anyone with the link can view that set of minutes. We count how many times the link was opened and through which channel (email, WhatsApp, Slack), to show you whether the minutes were received. We do not record who opened it or their address.
- Teams. Meetings you place in a team become visible, with the transcript and the minutes, to the people on that team. Team members can see each other's emails. When you leave the team, or remove the meeting from it, it becomes only yours again.
- Sending minutes. When you send minutes by email or WhatsApp, the message goes out through your own email or WhatsApp: Ata does not receive the list of recipients. On Slack, the message goes straight from your browser to the channel you connected, and the channel address is stored only in your browser.
- Connected AI assistants. If you connect Ata to an assistant compatible with MCP, that assistant can query your summaries using the personal URL you configured.
- Published testimonials. If you submit a testimonial and authorize it, your name, role, photo, rating and text become visible to anyone on the site.
- Ata's administration. The team that administers Ata sees account data (email, plan, access dates, number and titles of meetings) to provide support and handle billing. It does not read meeting content or minutes through the admin panel, and every change made to an account is logged.
- Service providers. Supabase (hosting and login), OpenRouter and AI model providers, Stripe (payments), Google and Microsoft (login and calendar, when you connect them). They receive only what is necessary to provide the service.
Outside of these cases, we only share data when the law requires it.
5. Analytics on this site
On the ataai.app site, we measure how people browse to understand what works and to improve the page. This applies only to the site, not to the extension.
- Cloudflare Web Analytics. Counts visits and page views without using cookies and without identifying you.
- Google Analytics and Microsoft Clarity. Record pages visited, clicks, scrolling and the path taken through the site, and Clarity also records the browsing session anonymously. These two tools use cookies and are only enabled if you click Accept on the cookie notice. The data stays with Google and Microsoft, who use it to generate these reports.
You can change your choice at any time through the Cookie preferences link in the site footer. If you decline, we delete the cookies from these tools on this site.
6. Your rights and controls
Under Brazil's General Data Protection Law (LGPD) and, where applicable, the GDPR, you can access, correct, export and delete your data. Inside the extension, under Settings, you can:
- export a copy of everything Ata has stored;
- delete all of your data, from this device and from the cloud, at once;
- delete your account, under Settings, Account, or at ataai.app/app: this deletes meetings, minutes, templates, any teams created only by you, and your login, and cancels the subscription immediately;
- set a time limit for old meetings to be deleted automatically;
- hide emails, phone numbers, and national ID or tax numbers in the recaps you share;
- disconnect the calendar at any time;
- dismiss the request to rate a meeting, by clicking "Not now".
When you delete a meeting or your account, the data is removed from our servers. Deleting all of your data also removes the ratings you gave. Feedback you submitted is kept without your email, only to fix errors. If you created a team with other people, transfer ownership of the team to someone else before deleting your account.
7. Meeting participants
Ata records what other people say in the meeting. You are responsible for informing participants and obtaining the authorization required by the law of your country. To help with this, the extension has a recording reminder you can turn on in Settings.
8. Security
All communication with our servers uses an encrypted connection (HTTPS). Access to data is restricted per account, and AI provider keys are kept only on the server, never in the extension.
9. Minors
Ata is not intended for anyone under 18, and we do not knowingly collect data from children.
10. Changes to this policy
If this policy changes in an important way, we will notify you inside the extension or by email before the change takes effect. The date at the top of this page shows the current version.
11. Talk to us
Questions, requests about your data, or any other privacy matter: [email protected].