Privacy policy
Your conversations remain your private context.
Effective 18 July 2026
Nandi is a private memory and work assistant operated by STAGE. This policy explains what information Nandi processes, why it is needed, and the controls available to each account.
Information we process
- Account information such as your name, email address, and encrypted session data.
- Audio captured by a paired Nandi device while listening is enabled.
- Transcripts, summaries, evidence, tasks, decisions, and speaker labels derived from that audio.
- Optional Gmail, Google Calendar, and Slack content only after you authorize that source.
- Device identifiers, battery and upload status, and operational logs needed to run the service.
- Encrypted voice embeddings when you explicitly consent to voice enrollment.
How we use information
We use your information to transcribe conversations, organize private context, create summaries and action items, identify consented speakers, synchronize connected sources, secure your account, and operate and troubleshoot Nandi. We do not sell personal data, serve advertising, or track you across other companies' apps or websites.
Audio retention
Transcript text and its derived records remain until you delete the conversation or your account. Successfully deleted raw audio cannot be recovered or played back.
Connected accounts
Gmail, Google Calendar, and Slack are optional. Nandi requests only the permissions shown during authorization. You can review or disconnect a source from the app. Disconnecting stops future synchronization; you can separately delete previously imported private context.
Google API data is used only to provide Nandi's user-facing features and is handled in accordance with the Google API Services User Data Policy, including its Limited Use requirements.
Service providers and disclosure
Nandi uses infrastructure and model services, including Google Cloud and Vertex AI, to host and transcribe data. Google Workspace and Slack process data when you connect those services. We disclose information only to operate the product, comply with law, protect security, or complete a business transfer subject to appropriate safeguards.
Security and account isolation
Data is transmitted over TLS. Sensitive integration tokens and voice embeddings are encrypted at rest. Member APIs are scoped to the signed-in account; another member cannot access your conversations or connected-source content. Authorized organization administrators can access organization data for governance and support.
Your controls
You can stop listening, delete individual or multiple conversations, disconnect sources, sign out, and delete your account from the Nandi app. Account deletion permanently removes the account and associated private workspace data, subject only to records we must retain by law.
Children and changes
Nandi is a workplace product and is not intended for children under 13. We may update this policy as the product or legal requirements change and will post the effective date here.
Contact
Questions or privacy requests can be sent to [email protected].