Security and privacy: where your calls go

What stays on your computer

The Palmcard app keeps its work in its own folder on your Mac or PC. That includes:

• call transcripts and the lines it suggested
• summaries, meeting notes and prospect research
• your documents and the websites you ask it to read
• your voice profile and the meetings it reads from a connected calendar

We do not receive or store these unless you turn on the option described below. Your AI service keys and calendar sign-ins are kept encrypted in the macOS Keychain, or with Windows' own encryption on Windows.

What leaves your computer while it works

To write your next line, the app has to send parts of the conversation to outside services. Palmcard only listens when you turn it on, and you can pause it at any time.

These services act under their own terms and your agreement with them, so check their data retention settings, and choose EU services where you need to.

Keeping calls on your account (optional)

If you turn on “Keep my calls and meetings on my account”, each call is also sent to us after it ends. We encrypt each call with a key unique to your account before storing it in our database, which is in the EU. We decrypt it only to show it to you when you are signed in, to search it, or to answer a question you ask about it.

• It is off by default.
• You can delete one call or all of them, in the app or on the website, at any time.
• Share links are optional. Anyone with a link can read that call's summary until you stop sharing it.
• Deleting your account erases the account, the calls and meetings kept on it, your settings and every signed-in device straight away, and cancels any plan.

Your calendar, only if you connect it

Connecting Google or Outlook gives Palmcard read-only access to meetings from a few hours ago to about 14 days ahead. It uses them to show your upcoming meetings, pick the right meeting when you press Start and, if you turn it on, prepare a brief. Calendar data stays on your computer. We do not sell it, use it for advertising, or use it to train AI models. Adding the next meeting to your calendar is a separate permission you have to switch on.

The other people on your calls

When Palmcard listens, it also processes what the other people say. You are responsible for telling them the call is being transcribed and, where required, getting their consent. Palmcard reminds you at the start of every call. See is it legal to use AI on calls for the general picture. Nothing joins the meeting as a bot, and the card is excluded from screen sharing and recordings on Mac and Windows.

Who processes data for us

When data leaves the European Economic Area, it is protected by the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

This website

We always use the cookies needed to keep you signed in and protect the site. Google's advertising and analytics tags load only if you press Accept on the cookie banner. If you press Decline, none of it is loaded. You can change your choice at any time with Cookie settings in the footer.

Your rights and who runs Palmcard

Under the GDPR you can ask to see, correct, delete or export your data, object to how we use it, and withdraw consent. Email prashant@studiolab.digital and we will answer within one month. Palmcard is made by Studio Lab in Malta. The full text is in the privacy policy and the terms.