Privacy Policy

Last updated: April 30, 2026

SubScan ("we", "our", or "us") provides a real-time sales intelligence platform. This policy explains how we collect, use, and protect your information.

Information We Collect

We collect the following when you use SubScan:

Account information (name, email address) provided during sign-up
Zoom OAuth tokens necessary to connect your account to Zoom meetings
Call metadata (meeting ID, duration, participant count)
Aggregated sensor scores generated during calls
Transcript text from your sales calls (rep and prospect utterances)

Audio and Video Processing

SubScan processes audio and video streams from your Zoom calls in real time via Zoom's Real-Time Media Streaming (RTMS) infrastructure. Audio and video data is:

Processed server-side on Railway.app infrastructure
Used solely to generate real-time sensor scores and insights
Not stored as raw audio or video files by default
Discarded immediately after processing unless you explicitly enable call recording

How We Use Your Information

To provide and improve the SubScan service
To generate call analytics and coaching insights
To display your call history and performance dashboard
To send product updates if you have opted in

Data Sharing

We do not sell your data. We share data only with:

Zoom — to authenticate your account and access call streams
Google (Gemini API) — anonymised transcript and biometric data for AI analysis
Deepgram — audio stream for real-time transcription
Railway / Supabase — infrastructure and database hosting

Data Retention

Call sensor logs and transcripts are retained for 90 days by default. You may request deletion of your data at any time by contacting us.

Two-Party Consent

You are responsible for obtaining any legally required consent from call participants before using SubScan. Recording and analysis laws vary by jurisdiction. Please ensure compliance with applicable laws in your location.

Security

We use TLS encryption for all data in transit and encrypt sensitive credentials at rest. OAuth tokens are stored in an encrypted database and never exposed in client-side code.

Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at the address below.

Contact

Questions about this policy? Email us at privacy@subscan.ai.