Privacy Policy
Lungoor
Effective Date: July 22, 2026
1. Introduction
Lungoor AI is a suite of voice-first AI products for modern work, developed and operated by Surfboard India Pvt Ltd. The suite currently includes Lungoor Notes and Lungoor Voice, with Lungoor Coach coming soon.
This Privacy Policy explains how we collect, use, process, store, share, and protect personal data when you use lungoor.ai, the marketing website for Lungoor AI products, our product websites, desktop applications, integrations, and related services.
Some Lungoor products may also have product-specific privacy notices. If a product-specific privacy notice applies, it should be read together with this Privacy Policy. If there is a conflict between this Privacy Policy and a product-specific notice for a particular product feature, the product-specific notice will apply to that feature.
By creating an account, visiting our website, or using Lungoor services, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
2.1 Account Information
When you create or use a Lungoor account, we may collect:
- Email address
- First name and last name
- Organisation domain or workplace identifier, where applicable
- Organisation display name, where available from an authorised sign-in provider
- Authentication identifiers from third-party sign-in providers
We use this information to create accounts, authenticate users, provide support, send transactional notices, and deliver Lungoor services.
2.2 Usage and Product Information
To operate and improve Lungoor, we may collect:
- Product usage metrics
- Feature interaction data
- Credit consumption
- Speech-to-text usage counts
- Application performance metrics
- Crash reports, diagnostics, and error logs
- Billing, transaction, and plan-related records
Usage data helps us maintain reliability, prevent abuse, improve product quality, and understand which features are useful.
2.3 Content You Submit
Depending on the Lungoor product you use, you may submit or generate:
- Voice recordings
- Meeting recordings
- Transcriptions
- Dictated text
- Selected text for rewriting or formatting
- AI prompts and responses
- Meeting summaries and action items
- Documents, notes, files, or other content you choose to process
- Calendar event details and participant information, where you authorise calendar access
We process this content only to provide the features you request, maintain service quality, and support your account as described in this Privacy Policy and any applicable product-specific notice.
3. How We Use Information
We use information to:
- Provide, operate, and maintain Lungoor services
- Create and manage user accounts
- Authenticate users and protect accounts
- Process voice, text, meeting, and document workflows
- Generate transcripts, summaries, rewrites, translations, action items, and other AI-assisted outputs
- Synchronise content across devices where sync features are enabled
- Manage subscriptions, credits, billing, refunds, and transactions
- Provide customer support and respond to user requests
- Improve product reliability, performance, and usability
- Detect fraud, abuse, security incidents, and unauthorised activity
- Comply with legal, regulatory, accounting, and tax obligations
We do not sell your personal information.
4. AI Processing
Lungoor uses artificial intelligence to power features such as:
- Speech recognition
- Voice dictation
- Grammar improvement
- Text formatting
- Summarisation
- Writing assistance
- Meeting intelligence
- Action item extraction
- Translation
- Content restructuring
- Coaching and productivity workflows
Your content is processed only to deliver the functionality you request. We may use different AI and speech processing providers over time to improve quality, reliability, latency, or availability.
Your data is not used to train external AI models without your explicit consent.
5. Audio, Transcription, and Meeting Data
Lungoor products may process audio to provide speech recognition, dictation, transcription, meeting summaries, action items, translations, and related AI-assisted features.
For Lungoor Voice, audio and transcription content is generally processed transiently and is not retained after processing is complete, unless you enable a feature that stores content or provide consent for troubleshooting.
For Lungoor Notes, meeting transcriptions, summaries, metadata, and related artifacts may be retained to provide meeting intelligence, search, cross-meeting insights, integrations, and user-requested workflows.
Lungoor does not use voice recordings for:
- Biometric identification
- Voice profiling
- Advertising
- Training external AI models without consent
6. Local Storage, Cloud Sync, and Product Storage
Some Lungoor products store supported content locally on your device whenever possible.
Some features, such as cloud sync, meeting history, search, and integrations, require content to be stored securely on our infrastructure or with our service providers so the feature can work across sessions, devices, and connected services.
Where cloud sync or persistent storage is optional, you may enable or disable it in the relevant product settings where available. Disabling a sync feature may not automatically delete previously synced content; you may need to delete that content or request account deletion.
7. Third-Party Authentication and Calendar Data
Some Lungoor products, including Lungoor Notes, may use third-party authentication for sign-in or integration features.
Lungoor AI may use one shared Google authentication setup across Lungoor AI, Lungoor Voice, Lungoor Notes, and Lungoor Coach when available. When you sign in with Google, the permission may appear under Lungoor AI, Lungoor, Lungoor Voice, or Lungoor Notes. A single Lungoor account may be used to access supported Lungoor products.
Where calendar access is authorised, we access only the minimum calendar information required for the meeting workflow features you request. This may include:
- Event title
- Start and end time
- Attendee names and email addresses
Lungoor Notes currently uses read-only calendar access for meeting workflows. Calendar data is used to display upcoming meetings, link meeting sessions, support meeting summaries, and power user-requested meeting intelligence features.
We do not use third-party calendar or sign-in data for advertising or ad targeting. We do not sell this data. We do not use this data to train AI or machine learning models.
Our use of information received from third-party authentication and calendar APIs is intended to comply with applicable provider policies and limited-use requirements.
You can revoke access through the relevant provider's account permissions settings.
8. Integrations
Lungoor products may offer optional integrations, including calendar, messaging, issue-tracking, and other workplace tools.
When you connect an integration, we process only the information needed to provide the integration features you request. Integration tokens and credentials are stored securely and access is limited to backend services that require them.
You may disconnect available integrations from the relevant product settings where supported, or from the third-party provider's account permissions page.
9. Cookies and Analytics
Lungoor uses cookies and similar technologies on websites and applications for:
- Authentication and secure session management
- Account protection
- Product analytics
- Performance monitoring
- Reliability and crash diagnostics
We use product analytics tools to understand product usage, feature adoption, performance, and reliability. Analytics data is not used for advertising, and we do not sell analytics data.
Analytics providers do not receive calendar event content, transcription text, or meeting recordings unless expressly stated in a product-specific notice.
10. Third-Party Service Providers
To operate Lungoor, we work with trusted third-party service providers. Depending on the product and feature, these may include:
- Speech processing providers
- AI language processing providers
- Authentication providers
- Database and retrieval providers
- Product analytics providers
- Cloud infrastructure providers
- Payment processors
- Communication and transactional email providers
- Customer support and error monitoring providers
- Optional messaging, calendar, and issue-tracking integration providers
These providers process information only as necessary to deliver Lungoor services, maintain security, process payments, provide support, or comply with legal obligations. They are not permitted to use your personal data for unrelated purposes.
11. Payments and Billing
Where Lungoor products require purchases, subscriptions, or prepaid credits, payments are processed by third-party payment providers.
Lungoor does not collect or store complete payment card information, UPI credentials, or other sensitive payment credentials. Payment processors may provide us with transaction identifiers, payment status, invoice information, and limited billing details needed for accounting, support, fraud prevention, and compliance.
12. Legal Basis for Processing
Where required by applicable law, we process personal information based on one or more of the following legal bases:
- Your consent
- Performance of a contract
- Legitimate business interests
- Compliance with legal obligations
You may withdraw consent where processing depends on consent, subject to the limitations of applicable law and the continued ability to provide requested services.
13. Data Retention
We retain personal information only for as long as necessary to provide services, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, and maintain business records.
General retention practices include:
DataRetentionAccount informationUntil account deletion or as required by lawBilling, transaction, tax, and accounting recordsAs required for accounting, tax, compliance, and fraud preventionLungoor Voice audio and transcription contentNot retained after processing unless storage is enabled or troubleshooting consent is givenLungoor Notes meeting dataRetained while needed to provide meeting workflows, search, insights, and integrationsCloud-synced contentUntil deleted by you, disabled and removed according to product controls, or account deletion is completedOAuth tokens and integration credentialsUntil disconnected, replaced, expired, or account deletion is completedAnalytics and diagnosticsOnly as long as reasonably necessary for product improvement, security, and reliability
After account deletion, some information may remain for a limited period in backups, logs, accounting records, or legal records where required or permitted by law.
14. Deletion Requests and User Controls
Subject to applicable law, you may request access, correction, deletion, export, restriction, or withdrawal of consent for your personal information.
Lungoor Notes does not currently offer self-service account deletion in the app. To request deletion of your main account and associated data, email [email protected]. We aim to respond within 24-48 business hours and complete verified deletion requests within 30 days, subject to legal and operational requirements.
You may also revoke third-party access directly through provider settings, including:
- Your authentication provider's account permissions settings
- Your workplace issue-tracking provider's app permissions settings
- Your workplace messaging provider's app management settings
Revoking third-party access may stop future data access but may not automatically delete data already stored in Lungoor. To delete stored Lungoor account data, contact us.
15. Children's Privacy
Lungoor is intended only for users who are at least 18 years of age.
We do not knowingly collect personal information from children. If we become aware that a person under 18 has provided personal information, we will take reasonable steps to delete it.
16. Security
We use administrative, technical, and organisational safeguards designed to protect personal information, including:
- Encryption in transit
- Encryption at rest where applicable
- Access controls
- Restricted employee access
- Token encryption for supported integrations
- Security monitoring
- Logging and abuse detection
- Least-privilege access practices
No system can guarantee absolute security, but we continuously work to protect Lungoor and user information.
17. International Data Transfers
Your information may be processed on servers located outside your city, state, or country depending on the infrastructure and providers used to deliver Lungoor services.
Where international transfers occur, we implement appropriate contractual, organisational, and technical safeguards consistent with applicable data protection laws.
18. Data Breach Notification
If we become aware of a security incident affecting personal information, we will notify affected users and applicable authorities as required by law.
19. Grievance Officer
If you have complaints or concerns regarding the processing of your personal data, you may contact our Grievance Officer:
Kshitija Katare
Grievance Officer
Surfboard India Pvt Ltd
Email: [email protected]
We will acknowledge grievances within 48 hours and aim to resolve them within 30 days of receipt.
20. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our products, legal obligations, or data practices.
For material changes, we will notify registered users before the updated policy becomes effective. The Effective Date at the top of this page will indicate the latest version.
21. Contact Us
For privacy questions, data requests, or legal inquiries, contact:
Surfboard India Pvt Ltd
8th Floor, New Viva College
Y.K. Nagar, Virar West
Palghar, Maharashtra - 401303
India
Customer Support: [email protected]
Last Updated: July 22, 2026