Introduction#
"Echo", "we" and "us" mean the operator of the Echo desktop app and related services, an individual developer based in Ontario, Canada. Read this policy together with our Terms of Use.
The Echo beta is not offered to or directed at people in Quebec, the European Union, the European Economic Area or the United Kingdom.
What we collect#
- Account information: your email address and how you sign in. If you use Google, the permanent ID Google assigns to your account and, for workplace accounts, your organisation's domain. If you use Microsoft, the permanent IDs Microsoft assigns to your account and its organisation, and whether it is a personal or a work or school account. If you use email and password, your password, which we keep only in scrambled form that can't be turned back into it. We also keep records that keep you signed in.
- Call content: audio captured while a call session is running, including other participants' voices; transcripts; notes and summaries made from them, which label who said what and can include a name another participant gives on the call; and your questions and Echo's answers.
- Screen content: an image of your screen, taken only when you ask a question.
- Usage records: records of requests we send to our service providers, such as the feature used, time taken, outcome and amount of data. They don't include what was said, asked or answered.
How we use it#
We process your call content only on your behalf and at your direction, to provide Echo to you. We don't use it for our own purposes. We don't sell personal information and we don't use it to train AI models. Our AI providers are not allowed to train on it under the terms on which we use their services.
We use personal information to:
- provide Echo and run your account;
- recognise your account each time you sign in;
- contact you about your account, Echo, and changes to our terms or this policy;
- keep Echo secure and find and fix faults, using usage records rather than call content;
- meet our legal obligations.
Your consent#
When you create an account or sign in, the screen tells you that continuing means you agree to this policy and our Terms of Use. By creating an account, signing in or using Echo, you consent to us collecting, using and sharing personal information as this policy describes.
You can withdraw your consent at any time by stopping use of Echo and emailing support@strategi.pro to have your account deleted. Echo can't work without the information it needs, so withdrawing consent means you can no longer use it.
Echo captures what other people say on your calls. You are responsible for getting their consent where the law requires it, as our Terms of Use explain.
Who we share it with#
- Service providers that handle personal information for us: AI and transcription services, cloud hosting, database hosting, sign-in and email delivery. They may use it only to provide their services to us.
- When the law requires or allows it, such as a court order or other lawful request, or to protect someone's safety or rights.
- If Echo is sold or reorganised, personal information may pass to the new operator, subject to this policy.
Some of our AI providers keep submitted data for a limited time, up to 55 days, to detect abuse, keep their systems secure and provide web search results. Deleting a call or your account doesn't remove that copy before the period ends.
Where your data is#
We store personal information in Canada, and our servers are in Canada. Some of our service providers, including our transcription and AI providers, process personal information outside Canada, including in the United States. While it is outside Canada, courts, law enforcement and national security authorities in those countries may be able to access it under their laws.
How long we keep it#
- Audio and screen images are not saved to our database. A screen image is held in memory only while Echo answers the question it was taken for.
- Transcripts, notes, summaries, and your questions and Echo's answers are kept until you delete the call, or for 12 months from the call, whichever comes first.
- Usage records are kept for 90 days.
- Sign-in records are deleted 7 days after they expire or are cancelled.
- Account information, including your scrambled password, is kept until your account is deleted.
- Unfinished sign-ups: if you start creating an account but don't confirm your email address, the address and scrambled password are deleted after 2 days.
Expired data is deleted automatically. This normally happens within a day of the period ending, but can take longer if Echo has not been in use.
Security#
We protect personal information with safeguards suited to how sensitive it is, including encrypting data in transit and at rest, and limiting access to those who need it. No system is perfectly secure, so we can't guarantee absolute security.
Your rights#
You can ask to see, correct or delete the personal information we hold about you. You can delete individual calls in the app at any time. For anything else, including deleting your account, email support@strategi.pro. We reply within 30 days and complete account deletion within that time.
Each way of signing in (Google, Microsoft, or email and password) is a separate Echo account, even with the same email address. When you write to us, tell us which ones you used.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca, or to the privacy regulator where you live.
If you are in the EU, EEA or UK#
The Echo beta is not offered to or directed at people in the European Union, the European Economic Area or the United Kingdom. If you use Echo from one of those places anyway, you still have the rights below.
Our legal grounds are: performing our contract with you, for your account and call content; our legitimate interest in keeping Echo secure and working, for usage records; and legal obligations where they apply. You can also ask us to restrict how we use your data, ask for a copy of it in a portable, machine-readable format, object to processing based on legitimate interests, and complain to your local data protection authority, or in the UK to the Information Commissioner's Office.
Do Not Track#
Echo doesn't track you across other websites or apps, so it doesn't change its behaviour in response to browser Do Not Track signals. Echo doesn't let other companies track you across websites or apps through it either.
Privacy breaches#
If a breach involving your personal information creates a real risk of significant harm to you, we will tell you and the Office of the Privacy Commissioner of Canada, and, if you live in Quebec, the Commission d'accès à l'information, as the law requires.
Children#
Echo is not for anyone under 18, and we don't knowingly collect their personal information.
Changes to this policy#
We may update this policy. We will post the new version here and change the date at the top.
For a material change, we will tell you in the app or by email at least 30 days before it takes effect. We may make a change sooner where the law requires it or to deal with a security risk, and we will tell you as soon as we can.
If a change would use your personal information for a new purpose or share it with a new kind of recipient, we will ask for your agreement before it applies to you.
If you don't agree to a change, stop using Echo before it takes effect and email support@strategi.pro to have your account deleted.
Contact us#
Our Privacy Officer is responsible for how we handle personal information. Send questions, requests and complaints to support@strategi.pro.