🔒 Privacy Policy

Live Meeting Notes — Chrome Extension

Last updated: March 19, 2026

🎯 Summary

✅ 100% client-side processing
✅ No personal data collected
✅ No user behaviour tracking
✅ No analytics or cookies
✅ Your data stays on your device
✅ No sign-up required

📊 Data Storage

All data is stored 100% locally on your device — nothing is uploaded to our servers.

1. Local Data (on your device)

a) Chrome Storage (auto-backup)

localStorage — Meeting info, notes text, timestamps
IndexedDB — Audio blob (backup in case the browser crashes)

Purpose: Recover data when the browser closes unexpectedly. Auto-deleted after a successful save.

b) File System (File System Access API)

Audio recordings (.wav / .webm) — meeting audio
Meeting metadata (.json) — title, date, attendees
Notes (.json) — content + timestamps
Export documents (.docx)

Location: The folder you select via the "Select Folder" dialog. The extension only writes to that folder.

2. Data we DO NOT collect

❌ Personal information (name, email, phone)
❌ IP address
❌ Browser fingerprint
❌ Geolocation
❌ Usage analytics
❌ Cookies / tracking pixels
❌ Audio content (never uploaded)
❌ Meeting content (never uploaded)

🔐 Chrome Permissions

The extension requests the following permissions, each with a specific, narrow purpose:

storage

Store user settings (API keys, preferences) and auto-backup meeting data in Chrome local storage to safely recover from browser crashes.

unlimitedStorage

Audio recordings from long meetings (2+ hours) exceed Chrome's default 10 MB storage limit. Required for IndexedDB audio blob backup.

sidePanel

Display the main application UI as a Chrome side panel so you can take notes while attending an online meeting in the same window.

contextMenus

Add right-click options on the extension icon to open the app as a side panel, full tab, or popup window — your choice.

identity

Read the Chrome profile email to verify email-based licenses, so you can activate your purchased license on any device without re-entering credentials.

Host Permissions

generativelanguage.googleapis.com

Send meeting transcripts to Google Gemini API (using your own API key) for AI-powered summarization. No data is sent without your explicit action.

speech.googleapis.com

Send audio to Google Cloud Speech-to-Text API (using your own API key) for high-accuracy, multi-language transcription. Only activated when you configure this feature.

🌐 Network Activity

The extension connects to the internet only in the following scenarios:

Google Gemini API
Meeting transcripts are sent to generativelanguage.googleapis.com using your own API key only when you click "Summarize with AI". No automatic background uploads.

Google Cloud Speech-to-Text API
Audio is sent to speech.googleapis.com using your own API key only when you use the Gemini transcription feature. The free Web Speech API (Chrome built-in) does not use this endpoint.

Web Speech API (built-in Chrome)
Audio is streamed in real-time to Google's servers for free, on-device-initiated transcription. This is a browser-native feature, not operated by Live Meeting Notes.

LemonSqueezy — Purchase Page
Clicking "Buy Pro" opens hungnd-bn.lemonsqueezy.com in a new browser tab — the extension's payment processor. This is a standard external link; the extension does not make any API calls to LemonSqueezy. LemonSqueezy's own privacy policy applies on that page.

No third-party services

❌ Google Analytics
❌ Facebook Pixel / Meta SDK
❌ Advertising networks
❌ Cloud storage (Google Drive, Dropbox, etc.)
❌ Backend / proxy API servers operated by this extension

🛡️ Security

Data Encryption

Context	Encryption
Files saved on your device	Relies on OS-level encryption (no additional encryption applied by the extension)
Browser storage	Relies on browser security model
API calls to Google (Gemini, Speech)	HTTPS (TLS) — encrypted in transit

⚠️ Recommendation: Do not use this extension to record or transcribe information that is classified, highly confidential, or subject to strict data-handling regulations (e.g., HIPAA).

Code Integrity

All JavaScript is bundled at build time — no remote code execution
Content Security Policy: script-src 'self' — blocks any external script injection
No eval(), new Function(), or dynamic script loading

👤 Your Rights & Control

✅ Delete data — Delete local files or clear browser storage at any time
✅ Export data — Files are in standard formats: WAV, JSON, DOCX
✅ Revoke permissions — Revoke microphone and file system access via Chrome settings at any time
✅ Uninstall — Removing the extension clears all associated storage
✅ No vendor lock-in — Standard file formats, no proprietary data model

📜 Compliance

✅ GDPR — Compliant

✅ CCPA — Compliant

⚠️ HIPAA — Not certified

No personal data is collected, processed, or sold. No consent banner is required. If you record protected health information, you are responsible for ensuring your local device meets applicable data-security requirements.

🔄 Policy Updates

This policy may be updated when new features are added. Changes are announced via the extension's GitHub Releases page. Updates do not affect previously saved data.

History

March 19, 2026 — v1.1: Updated for Chrome Extension release
January 19, 2026 — v1.0: Initial policy

📞 Contact

Questions about privacy or security?

Telegram: t.me/hungnd99
Security vulnerabilities: Please report via GitHub Security Advisories (private disclosure)

Your data stays with you. Always. 🔒