Privacy Policy
The short version
Ovllo is a local-first, bring-your-own-key (BYOK) desktop app. Your meeting audio, transcripts, notes, and answers are processed on your device and sent directly to the AI provider you configure with your own API keys. Ovllo’s servers are not in that path and do not receive or store your meeting content. The only data we hold is what we need to sign you in and run your subscription.
Your meeting content
To produce live notes, recaps, answers, and follow-ups, the desktop app captures audio during a note-taking session, transcribes it, and sends the transcript and prompts to the AI and transcription providers you have configured (for example Anthropic, OpenAI, or Deepgram), using the API keys you supply. That processing happens under your own provider account and is governed by that provider’s terms and privacy policy.
Ovllo does not route this content through our servers, and we do not retain your audio, transcripts, notes, or answers. Because we never receive your meeting content, we cannot and do not use it to train any models.
Your API keys
The provider API keys you enter are stored locally on your device using your operating system’s secure credential storage. They are sent only to the provider they belong to, directly from your device. They are never transmitted to or stored on Ovllo’s servers.
Account & subscription data
Signing in uses Supabase authentication. To provide access we process your email, your account identifier, and your subscription status. We also process limited operational signals — app version, and device/session identifiers — to enforce the free-session trial, the household seat limit, and your subscription. This is account-level metadata only; it does not include your meeting content.
Preventing abuse
To stop automated sign-up and free-trial farming, we process a device signal and request-level signals from Cloudflare (such as IP-derived risk indicators) when you create an account or start a trial session. These signals are used only for abuse prevention and contain no meeting content.
Billing
Payments are processed by Razorpay. Ovllo receives confirmation of your subscription status and related identifiers from Razorpay, but we do not receive or store your full card number. Razorpay’s handling of your payment information is governed by its own privacy policy.
What we do not do
The desktop app is not a meeting bot and does not join your calls or appear on the attendee list. We do not embed third-party advertising or analytics SDKs in the desktop app, and we do not sell your personal data.
This website
ovllo.com uses storage that is essential to the site working — for example, remembering your cookie choice. With your consent, we also use Google Analytics (GA4) to understand which pages are useful and improve them. Analytics runs in a privacy-friendly mode: it stays off until you accept the cookie banner (Google Consent Mode), you can decline instead, and you can change your mind at any time by clearing the Ovllo cookie choice in your browser. We do not run third-party advertising or cross-site ad-tracking cookies on the marketing site.
Your choices & rights
You can remove your locally stored API keys at any time from the app’s settings. To access or delete the account-level data we hold, email support@ovllo.com and we will action your request as required by applicable law.
Changes & contact
We may update this policy as the product evolves; material changes will be reflected by the “last updated” date above. Questions? Email support@ovllo.com.