Privacy policy
Last updated October 13, 2026. Spudnik (spudnik.app) is a product of Tater AI, Inc. ("we", "us"). This policy covers the Spudnik website, web app and mobile apps.
Plain-language summary: your Spudnik data is stored separately, encrypted with your own key, used only to run the features you choose, never sold, and you can download or delete all of it at any time.
What we collect
| Data | Examples | Why |
|---|---|---|
| Your account | Name, email, sign-in provider, plan | To sign you in and apply your plan |
| Conferences and talks | Names, dates, locations, speakers | To organize your captures |
| People you meet | Name, title, company, email, phone, LinkedIn URL | For your own follow-up |
| Your notes and media | Typed notes, voice recordings and transcripts, badge and slide photos | To build your conference record |
| Drafts | Follow-up emails and LinkedIn posts | For you to review and approve |
| Connections | Encrypted tokens for Outlook, Gmail and CRMs you connect | To save drafts and sync contacts when you ask |
| Billing | Subscription status (card details are handled by Stripe, never by us) | To manage your subscription |
Signing in
You can sign in with an email address and password, or with your Tater AI, Microsoft or Google account. When you use Tater AI, Microsoft or Google, we receive only your name, email address and an account identifier from that provider, plus (for Tater AI) your plan, so we can apply it. We never see your password for those services. Email + password accounts store only a one-way hash of your password, and we confirm your email address before you can sign in.
Google user data
- Sign in with Google uses the
openid,emailandprofilescopes. We use your name and email only to create and sign in to your Spudnik account, show who is signed in, and contact you about your account. - Gmail (optional). If you choose to connect Gmail, Spudnik asks for permission to create drafts (
gmail.compose). We use it only to save a follow-up email draft to your Gmail Drafts folder after you approve it in Spudnik. We do not read, search, send or delete your email, and we never send anything automatically. - Storage. Your Google tokens are stored encrypted and used only for the actions above. Disconnecting in Spudnik deletes them; you can also revoke access at myaccount.google.com/permissions.
- No other use. We do not sell Google user data, use it for advertising, use it to train AI models, or let people read it, except with your permission, for security, or where the law requires.
- Spudnik's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Microsoft user data
If you sign in with Microsoft or connect Outlook or Dynamics 365, we use Microsoft's permissions only to sign you in, save approved email drafts to your Outlook Drafts folder, and create or update the contacts you choose to send to Dynamics 365. We do not read or send your email. Tokens are stored encrypted and deleted when you disconnect.
How we use your data
- To provide the features you use: capturing conferences, reading badges, finding LinkedIn profiles for you to confirm, transcribing voice notes, drafting follow-ups, and syncing to the tools you connect.
- To run your account and subscription, provide support, and keep the service secure.
- To keep usage and cost records (counts such as tokens and minutes, never your content) so we can run the service sustainably.
- We don't sell your data, share it for advertising, or use it to train AI models.
How it's protected
- Separate holding: Spudnik data lives in its own database and storage, separate from Tater AI's. Tater AI shares only your identity and plan with Spudnik.
- Encryption: HTTPS in transit. At rest, your notes, transcripts, slide text, drafts, email addresses, phone numbers and every photo and recording are encrypted with a personal key unique to you. You can rotate it, or destroy it, which makes your data unreadable everywhere at once, including backups.
- Honest limit: our servers decrypt your data to run the features you use, such as badge reading, transcription, drafting and CRM sync.
Retention and your controls
- Voice recordings and badge photos are deleted 30 days after processing by default. You can change this, or set whole conferences to expire.
- In the app, Settings → Data & privacy lets you download everything, delete everything, rotate your key, and see an activity log of exports, deletions and syncs.
- Deleting your Tater AI account also deletes your Spudnik data.
People you meet
Spudnik stores business contact details that you collect, for your own follow-up. You're responsible for having a legitimate reason to keep and use them. Only add someone to marketing (newsletters, campaigns) if they agreed. Spudnik records this per person and marks people without consent as "no bulk email" when you sync them to a CRM. Spudnik never identifies people from their faces. If someone asks to be removed, you can delete them in the app, or contact us for help.
Service providers
| Provider | Purpose |
|---|---|
| Anthropic (Claude) | Badge reading, LinkedIn lookup, tagging, captions, drafting |
| OpenAI or Deepgram | Voice transcription |
| Microsoft, Google | Saving approved email drafts to your mailbox (if you connect one) |
| HubSpot, Salesforce, Microsoft Dynamics 365 | CRM sync (if you connect one and choose to send) |
| Stripe | Payments |
| InMotion Hosting, Cloudflare | Hosting, DNS and network |
Under these providers' API terms, your data isn't used to train their models. We never sell your data or use it for advertising.
Children
Spudnik is a business tool for adults and isn't directed to children under 16.
Changes
If we change this policy in a way that matters, we'll update the date above and tell you in the app or by email before the change applies.
Contact
Questions, data requests or concerns: info@taterai.app.