Privacy Policy

Who runs Corder

Corder is a Mac application and the marketing site at getcorder.com, built and operated by a small independent team. Contact for any privacy question, data subject access request, or complaint: hello@getcorder.com. We aim to reply within 5 business days.

What data, where it lives

Corder has two surfaces with separate data flows. The tables below describe each in plain language.

1. The Mac app

The macOS application records audio that plays through your speakers and microphone, transcribes it, and saves a transcript + summary. What happens to that data depends on your tier.

Free tier (Bring Your Own Key, on-device only)

• Recordings, transcripts, summaries, and the application database live ONLY on your Mac, under ~/Library/Application Support/Corder/.
• Transcription runs via the Google Gemini API using a key you supply in Settings. Audio chunks travel from your Mac directly to Google. We do not see them and we do not proxy them.
• Optional local Whisper model (Apple Silicon only) keeps transcription fully on-device. Nothing leaves the Mac.

Pro and Max tiers (Corder-hosted transcription)

• Audio chunks are uploaded from your Mac to our infrastructure for transcription. We hand each chunk to Google Gemini (default) or OpenAI Whisper (Max), wait for the transcript, and discard the audio chunk immediately afterwards. The retention window inside our cloud is at most 48 hours and only as long as the transcription queue holds it.
• The transcript, summary, speaker labels, and meeting metadata are stored in a Supabase Postgres database hosted in the EU (Frankfurt region). Encrypted at rest (AES-256) and in transit (TLS 1.2+).
• Optional screen video and a copy of the original audio file may be uploaded to Supabase Storage if you turn on cloud sync. You can disable cloud sync per-meeting or globally in Settings. With cloud sync off, Pro and Max fall back to the on-device flow of the Free tier.
• Auto-summary and summary template processing call Google Gemini and never store the prompt or completion anywhere except your meeting record in Supabase.

2. The marketing site (getcorder.com)

The site is a static export hosted on Vercel. It loads three third-party analytics scripts. None of these see anything that happens inside the Mac app.

• Microsoft Clarity for heatmaps and session replays. Clarity does not record keystrokes; form inputs are masked. Data lives on Microsoft Azure in the United States.
• Plausible Analytics for aggregate pageview and event counts. Plausible is cookie-less and runs on EU servers. No personal data is collected.
• X (Twitter) Conversion Pixel when a paid ad campaign is live. Used for conversion attribution. You can opt out via X privacy settings.

Sub-processors

We use the following third-party services to operate Corder. Each is covered by the Data Processing Agreement that the provider publishes under its standard terms (for example, Supabase DPA).

Account data

If you create an account on getcorder.com we store: your email address, your display name (which you choose, can edit anytime, and defaults to the local part of your email), an opaque internal user id, your subscription status, and a list of meetings you have synced to cloud if any. We use your email to send a one-time magic-link sign-in code on request, receipts, and any optional product-update emails you opt into in your account preferences. We do not sell, rent, or share this data with anyone outside the sub-processors named above.

Data retention

• Audio chunks at our cloud transcription tier: discarded immediately after the transcript is produced, at most within 48 hours.
• Transcripts, summaries, meeting metadata in Supabase: kept as long as your account is active. You can delete any meeting from the app, which cascades to delete the row, the linked storage object, and all derived data.
• Cloud-synced screen recordings + audio originals: kept as long as your account is active. Delete the meeting to delete the storage object.
• Account row, after you click Delete account: deletion happens from inside the Mac app (Profile menu → Delete account, confirmation prompt). The app immediately removes every row tied to your user id (meetings cascade to speakers, segments, summaries, recording metadata) and lists + deletes every Storage object stored under your user id. The linked Paddle subscription is canceled and your email is unsubscribed from every list. A residual empty auth row may remain in our identity provider (Supabase auth.users) until a scheduled cleanup removes it; that row contains no personal data after the deletion above.
• Billing records (Paddle): retained by Paddle for 7 years to meet tax law in their jurisdictions.
• Web analytics (Clarity, Plausible, X pixel): Clarity 90 days, Plausible 24 months, X pixel 540 days per the providers' defaults.

Diagnostics

• Corder sends anonymous reliability diagnostics: counts of recordings, whether a recording lost the other side on Bluetooth, app and macOS version, and similar aggregate numbers. No recordings, transcripts, titles, speaker names, or audio are ever included, and your email is sent only as a one-way hash. You can turn diagnostics off in Settings.

What we do not do

• No selling, sharing, or licensing your audio, transcripts, summaries, or any derived data.
• No training of any AI model on your data. The providers we forward chunks to (Google Gemini, OpenAI Whisper) operate under their API terms which prohibit training on data sent through the API.
• No advertising profiles built from your meetings.
• No third-party bot is added to your calls. The other participants see nothing different in their attendee list.

Your rights under GDPR / UK GDPR / CCPA

You have the right to:

• Access your data. Email hello@getcorder.com with the subject "Data export request" and we will send a machine-readable copy within 30 days.
• Correct inaccurate data. Most fields (name, email, notification prefs) are editable directly in /account; for the rest, email us.
• Delete your data (right to be forgotten). Open the Corder Mac app, click your profile in the top-right, then Delete account. The app removes every meeting + storage object tied to your account immediately. Individual meetings can also be deleted one-by-one from the Library.
• Port your data to another service. Same export request channel as Access; the export is JSON for the database and a folder of files for any cloud-synced audio + transcripts.
• Restrict processing or object to processing. Email us with the specific scope you want restricted.
• Complain to your local supervisory authority. For EU residents the right of complaint is in your country's data protection authority. For California residents, see your rights under the CCPA at oag.ca.gov.

Cookies on this website

Strictly necessary: none. The site does not require any cookie to function.

Analytics: Microsoft Clarity sets a first-party cookie for session continuity. Plausible is cookie-less. The X pixel sets a third-party cookie when loaded. You can block these via browser settings or a tracker blocker; the site still works without them.

Children

Corder is not directed at children under 16. We do not knowingly collect data from minors. If you believe a child has created an account or sent us data, email hello@getcorder.com and we will delete it.

Changes

We will date the next revision at the top of this page and note material changes. For questions, write to hello@getcorder.com.