Effective Date: 8 January 2026
This Privacy Policy (“Policy”) explains how Bluedot (“we,” “us,” “our”) collects, uses, discloses, and otherwise processes Personal Data when you access or use our websites, applications, extensions, integrations, and related services (collectively, the “Service”).
For Personal Data we collect and use to operate our business (for example, account registration, billing, customer support, security monitoring, and our website analytics), Bluedot acts as a “controller” (or similar term under applicable law).
When you (or your organization) use Bluedot to record, upload, transcribe, analyze, summarize, or store meeting data, Bluedot processes that content on behalf of the customer. In that context:
If your employer or another organization provides you access to the Service (an “Enterprise Customer”), their privacy policy and instructions may govern how your data is processed in that context.
We collect Personal Data from (a) you, (b) your organization, (c) your devices and browser, and (d) third-party integrations you connect.
Depending on your settings and how you use the Service, Customer Content may include:
Customer Content may contain Personal Data of you or other participants. Bluedot does not store voice profiles.
If you connect third-party services (e.g., Google Calendar, Google Meet, Zoom, Microsoft Teams, Slack, CRMs, ATS), we may receive:
Depending on the Google integration you enable and the permissions you grant, we access the account information, calendar details, meeting metadata, or selected files described above to connect your account, associate recordings with meetings, or import content you select. Google-derived Customer Content is subject to Sections 6 and 9 on retention and storage.
Bluedot complies with the Google API Services User Data Policy, including its Limited Use requirements, when using Google API data or transferring it to other applications.
For data covered by Limited Use, we limit processing to permitted user-facing features. We do not use it for advertising, sell it, or use it to train AI models. Transfers are restricted to permitted feature delivery with consent, security needs, legal requirements, or a merger, acquisition, or asset sale with explicit prior user consent. Human access is restricted to specific user permission, necessary security or legal purposes, or permitted aggregated internal operations.
You can revoke Bluedot's access through your Google Account settings. Revocation stops further access; deletion of previously received data is addressed in Section 6.
We use Personal Data for the following purposes:
We analyze usage trends and reliability metrics to improve the Service (e.g., reduce errors, improve UI, enhance features).
No Training on Customer Content:
Bluedot does not use Customer Content to train any AI models. We process Customer Content to provide the Service to you.
Where GDPR/UK GDPR or similar laws apply, we rely on the following legal bases, as applicable:
Enterprise Customers (controllers) determine their own legal bases for processing Customer Content.
We disclose Personal Data only as needed to operate the Service and our business:
We use vetted vendors to help deliver the Service, such as:
These vendors are contractually required to protect data and process it only for authorized purposes.
If you connect third-party integrations (e.g., Slack, CRM, ATS, Notion), we will share data with them at your direction (for example, pushing a summary into your CRM). Your use of third-party services is governed by their privacy policies.
If you use an Enterprise Customer workspace, authorized administrators may access account usage details, and may manage your access consistent with the enterprise agreement and their internal policies.
We retain account and business records as long as needed to provide the Service, meet contractual obligations, comply with law, and resolve disputes.
Enterprise Customers and users control Customer Content retention via the Service and/or enterprise agreement.
When Customer Content is deleted, we remove it from active systems promptly and remove remaining backup copies within 90 days. Account closure and deletion requests are handled in accordance with the applicable customer's instructions, workspace retention settings, and contractual obligations.
Where applicable law requires us to retain particular information, we retain only the information necessary for that requirement and delete it when the obligation ends. Account and business records remain subject to Section 6.1.
You can request deletion by contacting support@bluedothq.com. If an organization controls the relevant Customer Content, we will direct the request to that organization or assist it in responding, as appropriate.
We use cookies, SDKs, pixels, and similar technologies for:
Where consent is required, we obtain it before activating the relevant technologies. You can accept or reject optional technologies and change or withdraw your consent through the cookie preference controls provided on our website. Where a consent exemption applies but an objection mechanism is required, we provide that choice.
You can also manage cookies through your browser settings. Blocking essential cookies may affect Service functionality. Browser settings alone may not control every SDK, pixel, or similar technology.
Applicable rights concerning sale, sharing, targeted advertising, and Global Privacy Control signals are described in Section 10.3. Google API data is not used for advertising, as described in Section 2.5.
We maintain an information security program designed to protect the confidentiality, integrity, and availability of Personal Data and Customer Content, including:
Customer Content is stored and processed in the European Union by default. Customers may request storage and processing in the United States, subject to an agreed arrangement with Bluedot.
Account, billing, support, and website data may be processed in other countries by Bluedot or its service providers. Third-party integrations you enable may also process information in accordance with their own terms and privacy policies. These activities are distinct from the Customer Content residency arrangements described above.
Where international transfers require safeguards, we use an applicable adequacy decision or appropriate contractual safeguards, including EU Standard Contractual Clauses and, for UK transfers where required, the UK Addendum or International Data Transfer Agreement. We apply supplementary safeguards where necessary.
You can request information about applicable transfer safeguards, or a copy of them, by contacting support@bluedothq.com.
You can access, update, or correct certain account information in the Service. You can also request deletion as described below.
Depending on your location and applicable law, you may have rights to:
If you use the Service through an Enterprise Customer, requests regarding Customer Content should generally be directed to the Enterprise Customer (controller). We will support them as required.
Depending on your state of residence and whether the relevant law applies, you may have rights to:
Sale, sharing, and targeted advertising. Bluedot does not sell Personal Data for money. Depending on the website technologies used, disclosures of device identifiers, usage information, or browsing activity to advertising partners may constitute a sale or sharing under state privacy laws, even without a monetary payment.
Where these rights apply, you can opt out through our website's privacy or cookie preference controls or by contacting support@bluedothq.com. We honor recognized opt-out preference signals, including Global Privacy Control (GPC), to the extent required by applicable law. A valid opt-out signal is treated as a request to stop the activities it covers.
Email support@bluedothq.com with the subject “Privacy Request.”
We may request information reasonably necessary to verify your identity for access, correction, or deletion requests. We do not require identity verification for sale, sharing, or targeted-advertising opt-outs where the law prohibits it. An authorized agent may submit a request where permitted by law, subject to appropriate proof of authority.
We respond within the timeframes required by applicable law. Where a right to appeal applies, you can appeal by replying to our decision or emailing us with the subject “Privacy Request Appeal.” We will explain the outcome and any further complaint options required by law.
The Service is not intended for children under 13 (or higher age where required by law). We do not knowingly collect Personal Data from children. If you believe a child has provided Personal Data, contact us and we will take appropriate steps.
The Service may link to third-party websites or services. Their privacy practices are governed by their own policies. We are not responsible for third-party practices.
We may update this Policy from time to time. We will post the updated version and revise the “Last updated” date. If changes are material, we will provide notice through the Service or other appropriate means. Where required, we will obtain consent before implementing a change in how Personal Data is used.
For questions about this Policy, our privacy practices, or your rights, contact:
Email: support@bluedothq.com
