Naomi (“we,” “us,” or “our”) is operated by Naomi AI. This Privacy Policy describes how we collect, use, and protect information when you use the Naomi communication intelligence platform at getnaomi.com and app.getnaomi.com (the “Service”).
Information we collect
- Account information: when you create an account, we collect your name and email address through our authentication provider (Clerk). We do not store passwords.
- Call transcripts: when you paste a transcript or connect a recording source like Zoom or Google Meet, we receive the text content of your conversations. Transcripts are stored in our database and processed by our AI assessment engine.
- Zoom integration data: if you connect your Zoom account, we receive your Zoom display name, email address, account type, and recording settings through OAuth. When Zoom tells us that a cloud recording transcript or an AI Companion transcript is ready, we retrieve the text transcript and, where available, the AI Companion meeting summary. We also read the meeting’s participant list (each participant’s name and whether they belong to your Zoom account) to tag each speaker as you, a teammate, or an external participant. We never read participant email addresses, and we never download audio or video. We store your Zoom OAuth tokens encrypted with
AES-256-GCM. - Google Meet integration data: if you connect your Google account, we receive your name, email address, meeting transcripts, and meeting details such as title, date, duration, and participant names. If you allow Calendar access, we also read your calendar events to find meetings you attend, and keep their codes and times.
- Usage data: we collect standard server logs including IP addresses, request timestamps, and browser user-agent strings. The marketing site at getnaomi.com also uses Google Analytics (via Google Tag Manager) to understand how visitors find and use the site — see “Cookies and analytics” below for how this works and how you control it.
How we use your information
We use your call transcripts to generate communication assessments, extract entities and conversation dynamics, and produce personalized coaching insights. Anthropic’s Claude models analyze your transcripts. OpenAI turns passages of them into search embeddings. We reach both through OpenRouter, our AI gateway. We do not train AI models on your data.
We use your email to send transactional messages, such as account updates and the per-call debrief email. The debrief email summarizes each analyzed call and goes only to your own address. It is on by default, and you can turn it off in Settings. We will never sell your email to third parties or send unsolicited marketing email.
We use Zoom and Google Meet integration data to automate transcript retrieval so you do not have to paste manually.
Naomi also builds a memory across your calls from the people, companies, topics, and commitments mentioned in them. It stays until you delete the call.
SMS / text messaging
If you opt in to text notifications, we collect the mobile number on your account, your SMS-consent status, and the date and time of your consent (our record of your opt-in). We use your number only to send the coaching and account messages you opted into, and we share it only with a third-party messaging provider for the sole purpose of delivering those messages. We do not sell your number or share it with anyone for their own marketing. You can opt out at any time by replying STOP; we retain the consent timestamp as a record of your prior consent even after you opt out.
How we store and protect your information
Transcripts and assessments are stored in a PostgreSQL database hosted on Railway with private networking (no public TCP access). Zoom and Google OAuth tokens are encrypted at rest using AES-256-GCM with a dedicated encryption key.
API endpoints are protected by rate limiting, CORS restrictions, and Clerk authentication. Webhook endpoints verify a signature or a signed token from the sender.
Data retention and deletion
You choose how long Naomi keeps raw transcripts, in Settings under Configuration, then Data & Privacy: remove each transcript after it is analyzed, delete transcripts after one year, or keep them until you delete them. Removing a transcript deletes the raw text only. The call, its scores, its coaching, and its search embeddings stay in your account. No copy of a transcript stays in our job queue after a job finishes.
You can delete a single call from its call page. In Settings, under Configuration, then Your data, you can delete all transcripts, delete all calls, or delete your account. Deleting your account revokes Naomi’s access to Zoom and Google, cancels any paid plan with no refund, deletes your sign-in, and deletes all of your data. If any of those outside services can’t be reached, none of your data is deleted and we ask you to try again later. Stripe keeps its own customer and billing record, which this deletion does not remove. You can also request deletion by emailing naomi [at] getnaomi.com. We process emailed requests within 30 days.
If you disconnect Zoom inside Naomi, we revoke our authorization with Zoom and delete the stored OAuth tokens. Calls you already imported stay in your account until you delete them.
If you uninstall Naomi from the Zoom App Marketplace, we delete the stored OAuth tokens and mark the connection inactive. Your calls, coaching, and transcripts stay in your account until you delete them or your retention setting removes them.
If you disconnect Google Meet or remove Naomi from your Google account, Naomi can no longer access your Google data. Your calls stay until you delete them. Your stored tokens, Google name, and email are removed when you disconnect or delete your account.
Google user data
The use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.
We use Google data only to provide Naomi’s features to you. We do not sell it, use it for advertising or credit decisions, or use it to train AI models.
Naomi employees do not read your Google data, except to comply with the law or with your explicit permission. Our service providers process it as described below.
Third-party services
We use the following third-party services to operate the platform:
- Clerk Authentication (sign-in only, no call content)
- Anthropic Claude models — call analysis, Notes, coaching, and follow-up drafts
- OpenAI Search embeddings
- OpenRouter AI gateway that routes requests to Anthropic and OpenAI
- Zoom API Transcript retrieval, when connected
- Google Meet transcripts and Calendar events, when connected
- Postmark Transactional email, including the per-call debrief
- Twilio Coaching texts, only if you opt in
- Stripe Payments and billing (no call content)
- Slack Internal team notifications: your name and email when you sign up, and any feedback or support message you send (no call content)
- Railway Infrastructure hosting (API, database, and job queue)
- Vercel Frontend hosting
- Redis Job queue processing
- Google Analytics / Tag Manager Marketing-site analytics (getnaomi.com), consent-gated
Each provider processes data under its own privacy policy. We share your transcript content only with Anthropic, OpenAI, and OpenRouter, and only to analyze your calls. Postmark and Twilio receive only the summaries and coaching we send to you. We do not sell your data or use it for advertising.
If you opt in to coaching texts, links in those texts can show the call title, score, and summary in link previews.
Cookies and analytics
The Naomi application uses session cookies managed by Clerk for authentication.
The marketing site at getnaomi.com uses Google Analytics, managed through Google Tag Manager, to measure aggregate traffic and referral sources (for example, whether visitors arrive from a search engine or a social link). Google acts as a third-party analytics provider and, when enabled, sets analytics cookies (such as _ga) in your browser.
We use Google Consent Mode to respect your choice. For visitors in the European Economic Area, the United Kingdom, and Switzerland, analytics and advertising storage is denied by default and no analytics cookies are set until you select “Accept all” in the consent banner; you can decline with “Reject all.” For visitors elsewhere, analytics is enabled by default. Your consent choice is stored locally in your browser (using localStorage, not a cookie) so we can remember it on return visits. We do not use this data to build a cross-site advertising profile.
Children
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The “Last updated” date at the top of this page reflects the most recent revision.
Contact
For questions about this Privacy Policy or to request data deletion, contact us at naomi [at] getnaomi.com.