Five Minutes to Sign Up. Years of Data Shared.
Signing up for an AI meeting notetaker is easy. You create an account, connect your Google Calendar, authorise the app, and you're done. Meetings get transcribed automatically from then on.
What most people don't read — and what genuinely matters — is what they agreed to in those five minutes.
The Calendar Access Grant
Connecting your Google or Microsoft calendar sounds like a convenience feature. It is — but it also gives the tool a persistent view of every meeting on your calendar, every attendee, every title, every location, and every recurring event.
Calendar metadata is surprisingly revealing. The pattern of who you meet with, how often, and for how long can map your professional relationships, your deal pipeline, your hiring plans, and your organisational structure — before a single word is transcribed.
Check what calendar permissions you've granted. "Read-only" is reasonable. Broader access is worth questioning.
Broad Terms on Content Use
Most meeting tool terms of service include language like: "You grant us a worldwide, non-exclusive licence to use, host, store, reproduce, modify, and create derivative works from content you submit."
This is standard boilerplate and doesn't necessarily mean your meetings are being sold or misused. But it does mean the company has a licence to process your meeting content in ways that go beyond simply generating a transcript for you. The scope of that licence varies by tool and plan — and it's almost never explained during onboarding.
Third-Party Data Sharing
Meeting tools integrate with a lot of other services — CRMs, project management tools, communication platforms. Each integration is a potential data-sharing relationship. When your meeting transcript flows into a CRM like Salesforce or HubSpot, the data is now subject to that platform's privacy policy too.
Some tools also share data with analytics providers, advertising networks (primarily for consumer-facing products), and AI service providers who process transcription or summarisation on the tool's behalf. Each of these is a sub-processor, and under GDPR you're responsible for all of them.
What "Free" Actually Costs
Free plans on AI meeting tools are often subsidised by the data value of your content. The company is building a product — usually a better AI model — and your meetings are training material. This isn't inherently wrong, but it's worth understanding the exchange you're making.
Paid plans often (but not always) offer cleaner terms: no training data use, explicit retention controls, and the ability to request deletion. If you're using a free tier, it's worth reading what you've opted into.
The Questions Worth Asking Before You Connect Another Meeting
- What calendar permissions am I granting, and are they the minimum needed?
- Is my content used to train AI models — and can I opt out?
- Who are the sub-processors that may see my transcript data?
- What happens to my data if I cancel my account?
- Does the tool store audio, or just the transcript?
None of this means you shouldn't use AI meeting tools — the productivity gains are real. But informed consent starts with actually reading what you're agreeing to.
Beaver's approach: text-only transcription, no audio stored, no data used for model training, and a privacy policy short enough to read in two minutes. Try it free.
