Privacy Policy

Last updated 2026-11-11

Abalmon is provided by Abalmon Inc., a Delaware corporation, 1606 Headway Circle, Austin, TX 78754, United States. Contact: hello@abalmon.com.

What Abalmon stores

  • Account: name, email address, a hash of your password (or your linked Google identity), your language (initially your browser's, changeable in Settings) and the timezone detected from your browser.
  • Connected accounts (Google, Microsoft Outlook or Slack): the mail, calendar or message content each provider makes available under the access you grant, imported into your searchable memory.
  • Recorded sessions (web, phone app or Chrome extension): the recorded audio — your microphone and, for meeting recordings, the audio of the meeting tab you selected, which includes the other participants — plus the transcript, contextual cards and the generated review. They are saved persistently in your account and become part of your searchable memory.
  • Abalmon Chrome extension: it captures audio only after you click Start recording on a tab, and only that tab’s audio plus your microphone; it does not read page content, your browsing history or other tabs, and it pauses if that tab is closed or leaves the meeting page. The recording is sent to Abalmon and processed like any other session (it is not kept only on your computer). To link the recording to a calendar meeting, it sends the meeting page address without its query to Abalmon, which does not store it. The extension keeps a revocable sign-in credential in Chrome’s extension storage, and keeps audio that has not finished uploading on this computer, encrypted with a key held by your Abalmon account. Abalmon uses what the extension captures only to provide recording, its session panel and chat.
  • Assistant conversations: your messages and the replies, the files and photos you choose to attach (including photos you take with the camera in the phone app), and the emails and calendar changes made from them. Attached files are stored encrypted with their conversation. The “About me” text you write on the About you page is also stored encrypted and used as context for the assistant.
  • Notifications about your sessions, imports and briefings. If you allow push notifications in the phone app, Abalmon stores that device's push token to send generic alerts that don't include your content; the token is removed when you sign out or delete your account.
  • Reports: if you report AI-generated content, Abalmon keeps a copy of the reported content with your reason and optional note, and shares them with Abalmon's administrators for review. Reports are deleted with your account.

Your content is stored on Abalmon's servers and is not end-to-end encrypted: the service processes it to provide search, transcription, the assistant and reviews.

Service providers

  • OpenAI — generates assistant replies, contextual cards and session reviews, and creates search embeddings that index your imported mail, calendar and session content. The relevant messages, the files and photos you attach to a chat, your “About me” text, and transcript and memory excerpts are sent to OpenAI for these purposes. In voice mode, your voice is streamed to OpenAI's realtime service to understand you and to speak the replies; Abalmon saves only the text of the conversation, not the audio. OpenAI processes this data under its own terms.
  • Public web research (OpenAI, Tavily and Firecrawl) — when you ask about something public, the assistant can search the web with OpenAI's web search, or with Tavily, and can have Firecrawl read one public web page. They receive only a short search query written for that request, or a public web address. Your conversation history, memory, “About me” text and attachments are not sent to them. The links found are kept with the reply so you can open them again later.
  • Google Maps Platform — when you ask about places, Abalmon sends Google only the text of the place search and the language of the app, not your profile, conversations or memory. Google's results are shown to you directly in a separate “Google Maps” block below the reply, with Google's links. They are not sent to OpenAI or used by the assistant's AI model, and they are not added to your memory. Abalmon keeps these results in your chat history for one year and then deletes them. Google processes this data under the Google Privacy Policy, and the Google Maps/Google Earth Additional Terms of Service apply.
  • AssemblyAI — transcribes recordings made with current versions of the web app, the phone app and the Chrome extension. While you record, the session audio passes through Abalmon's servers to AssemblyAI, which returns the transcript with speaker labels and detects the spoken language automatically. Speaker labels group similar voices and may start again after a reconnection, so the same person can appear under more than one label; they do not identify who is speaking. You can rename them in your session, but that only changes how they are displayed and does not verify anyone's identity.
  • ElevenLabs — transcribes recordings made with older installed versions of the apps or the Chrome extension that do not use AssemblyAI. During meeting recordings, ElevenLabs also transcribes a second microphone-only stream so you can ask “Hey Abalmon”; it is not saved as audio or as a transcript, and only the requests it recognises are kept in the session chat. If the live transcript has gaps, Abalmon sends the saved audio from its servers to ElevenLabs to transcribe it again before the review; in recordings with speaker labels, the recovered text only fills the gaps and is shown without a speaker label.
  • Google — sign-in with Google, and the mail and calendar data of accounts you connect.
  • Microsoft — the mail and calendar data of Outlook accounts you connect.
  • Slack — the messages and workspace details of Slack workspaces you connect, under the access you grant.
  • Resend — delivers account emails such as verification and password reset.
  • Stripe — processes subscription payments. It receives your email address, payment details and billing records; Abalmon never stores your full card details. If you delete your account, an active subscription ends immediately without an automatic refund, and billing records Stripe must keep, such as invoices, remain with Stripe under its own terms.
  • Apple and Google — deliver push notifications to the phone app (Apple Push Notification service on iPhone, Firebase Cloud Messaging on Android) if you allow them. They receive that device's push token and a generic alert, not your content.

Provider credentials are held on Abalmon's servers and are never sent to your browser or device.

ChatGPT and Claude

  • What they receive — if you connect Abalmon to ChatGPT (OpenAI) or Claude (Anthropic), Abalmon sends that assistant only the content your connection’s permissions allow, and only when the assistant asks for it to answer your requests. Depending on the permissions you approve, this can include: basic account details (your name, time zone, language and what the connection can access, but not your email address); the titles, dates and saved reviews of finished sessions; your session and meeting notes; the names and saved summaries of your Memory collections; and full transcripts only if you turn that permission on. If you choose specific collections, only content within them is included. The connection does not include your recordings’ audio, your conversations with the Abalmon assistant, or direct access to your connected email, calendar or Slack accounts.
  • Their own terms — OpenAI or Anthropic processes what its assistant receives under its own terms and privacy policy, and it can remain in your chats there. Abalmon does not ask for your chat history with that assistant; it receives only the request the assistant sends, such as the words to search for.
  • Disconnecting — disconnect at any time in Settings → Connected apps. This stops future access, but it can’t remove content the assistant has already received or that is already in your chats there. Resetting your password or deleting your account also disconnects every connected app.
  • Connection records — Abalmon keeps a record of each connection (which assistant, the permissions and collections you chose, when you approved it and whether it is still active), including after you disconnect. It also keeps a log of connection events, such as approvals, refusals and disconnections, without your content; these entries are deleted after 30 days. Approval requests expire after 10 minutes and are deleted within two days. All of these records are deleted when you delete your account.

Abalmon does not sell the content it sends to these assistants and does not use it for advertising.

Your choices

  • Delete your account at any time in Settings, in the phone app's Profile or at abalmon.com/account/delete. Every sign-in and device is signed out at once, any recording stops, Abalmon asks Google, Microsoft and Slack to revoke its access, and your recordings, transcripts, memory, conversations, notes, briefings, shared links, push registrations and reports are deleted, usually within minutes. Backups are erased within 7 days and system logs are kept for up to 30 days. Service providers handle any data they processed under their own terms. A record that the deletion happened (without your content) is kept for 30 days after it completes so you can check its status.
  • Disconnect a connected account at any time: Abalmon stops reading it and its content no longer appears in your memory or answers. For anything else about your data, write to hello@abalmon.com.
  • Recording only happens when you start it, on the web, in the phone app or in the Chrome extension. Disconnecting the extension, or removing it from your devices in Abalmon, revokes its access; recordings already saved stay in your account.
  • Signing out clears the private cache this website keeps in your browser. Recorded audio that has not finished uploading is kept in this browser, encrypted with a key held by your Abalmon account, and uploads only after you sign in again with the same account.

Cookies and analytics

  • Necessary cookies keep you signed in, protect requests from forgery and remember your language. They are always on and are not used for analytics.
  • Optional analytics uses Google Analytics on our public home, Terms, Privacy and Cookie Policy pages only, and only after you accept. It records the page address (never a query, fragment or anything you type) and sets two cookies, _ga and _ga_…, whose standard lifetime is two years, renewed on each measured visit; Google also receives your IP address and browser details with each request. Google signals, ad personalization and advertising storage stay off. Sign-in, the app and shared session pages are never measured.
  • Marketing cookies are not used. You can record a preference, but Abalmon has no marketing or advertising service; if one is ever added, you will be asked again.
  • Choose Accept all, Deny all or Customize. Your choice is kept in this browser for six months and can be changed at any time; turning analytics off stops it and deletes its cookies.

All cookies and browser storage are described in our Cookie Policy.

Contact

Privacy questions: hello@abalmon.com.