Privacy policy

Who we are

Inzyde is run by SPEED CONTROL s.r.o., IČO 02596733, Prokopa Velikého 606/32, 703 00 Ostrava-Vítkovice, Czech Republic, registered in the Commercial Register of the Regional Court in Ostrava, section C, file 58146 (“we”).

For anything about your data, write to support@inzyde.com. If you only contacted us through this website, contact@inzyde.com works too.

Whose data it is

• Your organization's data (its projects, hours, clients, contracts, meetings, bank transactions and everything else people put into Inzyde) belongs to your organization. For that data your organization is the controller and we process it on its behalf, under our agreement with it. Questions about that data are best asked of your organization first; we help it answer them.
• Your account, this website and messages you send us: for these we are the controller.

The short version

• We keep what Inzyde needs to work for your organization: accounts, the organization's data, and the services it connects.
• No ads, no tracking, no analytics or advertising tools, on the website or in the app. We don't sell or rent data.
• Data reaches another company only when it's needed to run Inzyde, such as hosting and e-mail delivery, or when your organization connects that company's service itself, such as a bank, an AI provider or a meeting platform.
• We don't use your data to train AI models.

What the app keeps and why

• Account: your e-mail address, name, an internal user id, and a password hash if you sign in with a password. If you sign in with your organization's identity provider, we receive your e-mail and name from it. Needed to sign you in.
• Organization data: projects and tasks, time entries, reports, clients and the people at them with the notes your colleagues keep about them, contracts, estimations, invoices, bank accounts and transactions, inventory, vacations, decisions, wiki pages and files. This is the service itself.
• Meetings: when your organization sends the notetaker into a call, the call's audio is recorded and transcribed, with each speaker's display name and the time they spoke. Inzyde keeps the transcript, a summary and action items. Recordings your organization uploads itself are kept with the meeting.
• Agents: when you use the agent plugin, your agent sends Inzyde what it records for you: tasks, time entries with their descriptions, decisions, and, if you choose, a redacted copy of a session attached to a task. Hours are measured on your own computer from the session's timestamps; the session itself stays there unless you attach it.
• Credentials your organization adds: bank tokens, API keys and tokens for connected services. They're stored encrypted.
• Usage records: an audit log of security-relevant actions, such as sign-ins and changes to accounts, roles and credentials, with IP address and time. We use it for security.
• Public data: Inzyde collects public tenders, real-estate listings and flight fares from public sources for the organizations that use those features. Personal data in them, such as a contact person in a tender, is what the source published.

Legal basis (GDPR): performing our contract with you or your organization, Article 6(1)(b), and our legitimate interest in keeping the service secure, Article 6(1)(f). For organization data, the basis is your organization's, and we act on its instructions.

People in meetings with the notetaker

When the notetaker joins a call, it shows up as a participant named after Inzyde and posts a message in the meeting chat saying that the meeting is being transcribed and for whom. If you don't want to be recorded, ask the host to remove it; it leaves at once. The organization that sent it is responsible for having a reason to record and for telling the participants.

The recording is held by the recording service for up to 30 days, so a failed transcription can be repeated, and then deleted. The transcript stays with the meeting in Inzyde until the organization deletes it.

Zoom

When an organizer connects their Zoom account, Inzyde receives permission to join that person's meetings as a notetaker. It uses the meeting's details (topic, time, link) to join, and the meeting's audio and participants' display names to make the transcript. It does not read your Zoom contacts, chats outside the meeting or recordings in your Zoom cloud. Disconnecting Zoom in Inzyde, or removing the app in Zoom, stops it at once; the stored Zoom authorization is deleted, and transcripts already made stay with your organization until it deletes them.

AI

• Summaries, action items, answers from the organization's knowledge and drafted wiki pages are made by the AI model your organization connects (for example through LiteLLM or OpenRouter). Inzyde sends that model only the text the task needs, such as a meeting's transcript or the passages an answer cites.
• Coding agents (Claude Code, Codex, OpenCode) sign in with your own accounts at those providers. What they send to their provider is governed by your agreement with that provider.

This website

• E-mails you send to contact@inzyde.com or support@inzyde.com, to answer them.
• Server logs: your IP address, briefly, to keep the site running. The legal basis is our legitimate interest, Article 6(1)(f) GDPR.

This website uses no cookies, no analytics and no tracking. It remembers the language you picked in your browser's local storage, which never leaves your device. The app keeps your sign-in in your browser's local storage on the address you use.

Who processes data for us

• Hetzner Online GmbH hosts the servers, the database, files and recordings, in data centers in the European Union.
• ElevenLabs, Inc. turns meeting recordings into text.
• Resend, Inc. delivers Inzyde's e-mails, such as invitations, password resets and notifications.
• Cloudflare, Inc. answers for the inzyde.com domain and forwards e-mail sent to its addresses.
• The meeting platforms your organization uses (Zoom Communications, Inc., Google LLC, Microsoft Corporation) carry the calls the notetaker joins.
• The services your organization connects itself (banks such as Fio and Revolut, Fakturoid and iDoklad, git forges, Google Calendar, Slack, Telegram, AI providers) receive what your organization directs Inzyde to send them, and send Inzyde what it asks for.

Transfers outside the EU rely on the EU Commission's standard contractual clauses or the EU–US Data Privacy Framework.

How long we keep it

• Organization data: until the organization deletes it, or until the end of our agreement with the organization; after that we delete it within 30 days, unless the organization asked for an export first.
• Your account: until you or your organization's admin deletes it.
• Meeting recordings at the recording service: up to 30 days. Transcripts and uploaded recordings: until the organization deletes them.
• The audit log: as long as the account exists. After that, an anonymised record remains, so past security events stay traceable.
• E-mails you send us: as long as needed to deal with them, and at most one year unless you become a customer.
• Backups: overwritten on a rolling schedule; deleted data leaves them within weeks.

Your rights

You may ask for a copy of your data, its correction or deletion, a restriction of its processing, or an export in a common format. You may also object to processing based on our legitimate interest. Write to support@inzyde.com; for data your organization controls, we pass the request to it and help it answer. We answer within one month.

You may also complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.gov.cz) or to the authority where you live.

Security

Every request acts in one organization, checked against the person's membership and role. Credentials are encrypted at rest, connections use TLS, and access to the servers is limited to the people who run them. If a breach affects your data, we tell your organization without undue delay.

Changes

When this policy changes, we update the date at the top. If a change matters for how we use your data, we tell organizations by e-mail before it takes effect.