Legal
Privacy Policy
Nysa is an AI chief of staff: it joins your meetings and reads your email to keep your company's shared knowledge up to date, then helps get the resulting work done. Doing that job requires access to sensitive information, so this policy is written to be read — it says plainly what we collect, why, where it lives, and what we will never do with it.
What we collect
- Account information. When you sign in with Google we receive your name, email address, and profile picture.
- Google data you authorize. With your explicit consent through Google's permission screen, Nysa reads your Gmail and Google Calendar, and — where you approve the specific action — creates and sends email and creates or edits calendar events on your behalf. Access is scoped to what the product needs and every automated action is recorded in an activity log you can inspect.
- Meeting recordings and transcripts. When you invite Nysa's notetaker to a meeting, the meeting is recorded and transcribed, including who said what. The notetaker is visible to participants as an attendee. You are responsible for complying with meeting-recording consent requirements that apply to you; Nysa only joins meetings you or your team direct it to.
- Content you add. Transcripts you upload and knowledge you confirm or edit in the product.
- Product usage. Server-side product events (for example, that a meeting was captured or an action completed) used to operate and improve the product. We do not use third-party advertising trackers.
- Waitlist. If you join the waitlist, your email address, processed by Formspree.
How we use it
- To provide the product: turn meetings and email into structured company knowledge, and execute work you approve.
- To secure and operate the service: authentication, error monitoring, abuse prevention.
- To improve the product using aggregate usage patterns.
We do not sell your data. We do not use your data for advertising. We do not train general-purpose AI models on your content.
Google user data — Limited Use
Nysa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features described above, is never sold, is never used for advertising, and is transferred to third parties only as necessary to provide those features, for security, or to comply with law.
Where your data lives
Nysa runs on infrastructure providers who process data on our behalf:
- Railway — application hosting and database.
- Recall.ai — the meeting notetaker: joins meetings you direct it to and produces the recording and transcript.
- Anthropic — AI processing of transcripts and email to extract knowledge and draft work product; not used to train their models.
- Google — sign-in and, with your consent, Gmail and Calendar access.
- Sentry — error monitoring. PostHog — product analytics. Formspree — waitlist form.
Data is encrypted in transit. Google credentials are stored encrypted, and each workspace's data is isolated at the database layer — company workspaces never read personal or other companies' data.
Retention and deletion
We keep your data while your account is active, because a company memory is the product. To delete your account and its data, or to disconnect Google access, email hello@usenysa.com and we will complete the deletion within 30 days. You can also revoke Nysa's Google access at any time from your Google account permissions.
Changes
Nysa is in active development and this policy will evolve with the product. We will post updates here and note the effective date above; material changes will be announced to active users by email.
Contact
Questions, requests, or concerns: hello@usenysa.com.