Privacy Policy

FacetMD is a personal hub that brings together your meetings, calendar, email, bookmarks, notes, tasks, and feed reading in one place. Right now we are in beta, with closed sign-ups. This policy applies to every module of the product and also to the waitlist (people who leave their WhatsApp to be notified about the launch). We handle your data following the LGPD (Brazil's General Data Protection Law).

The party that decides how your data is used here is FacetMD (what the law calls the "controller"). If you have any privacy question, want to exercise your rights, or want to be removed from the waitlist, reach out through our privacy channel: contact@facetmd.com. This is the official point of contact for any data protection matter.

We collect the minimum needed for the product to work. By category:

• Account data: your email and/or WhatsApp number (used to authenticate your access) and the display name you choose.
• Your content: notes, tasks, calendar events, bookmarks, messages, feed items (RSS), and meeting recordings that you create or store in the app.
• Connected email: if you link your inbox, we read the messages only to show them inside the app (more details in the connected email section).
• Waitlist data: if you are a visitor and leave your WhatsApp to be notified about the launch, we keep the number, the country that matches that number, where the sign-up came from (landing page or login screen), your consent, and the date.

While sign-ups are closed, visitors can leave their WhatsApp on the landing page or the login screen for one thing only: to be notified when sign-ups open. At that point we keep your number, the country that matches it, where the sign-up came from, and the record that you agreed to be notified. At sign-up we use your IP address only for two things: to pre-suggest the right country in the form and to limit repeated attempts (to prevent abuse) — we do not tie your IP to your number or build a profile of you. We use that number only to notify you about the launch, nothing else. You can ask to be removed from the list at any time by writing to contact@facetmd.com, and we will delete your number.

In the meetings module, you can record the audio of a meeting. When you ask, FacetMD does two things: first it turns the speech into text (the so-called transcription) and then it generates an automatic summary of that text. This only happens when you request it — we do not process your recordings on our own. The audio file is kept in our file storage (see the section on where we store things). Because this process is automatic, the summary may contain errors or leave something out — always double-check before relying on it 100%.

If you connect your inbox, we read your messages only to display them inside the app, so you don't have to jump from one place to another. Your inbox password is stored in encrypted form (scrambled, in a way that only the system can use) and is never shared with anyone. You can disconnect your inbox whenever you want, right inside the app.

We only use your data to operate the service for you. The LGPD requires that each use have a justification (the "legal basis"). In plain language:

• Providing the service — authenticating your access, showing your information, syncing across devices, and generating summaries when you ask. Legal basis: performing the service you signed up for (what the law calls performance of a contract).
• Notifying about the launch — using the waitlist WhatsApp only to notify you when sign-ups open. Legal basis: your consent.
• Security and abuse prevention — protecting accounts and the system against fraud and misuse. Legal basis: legitimate interest (our legitimate interest in keeping the service secure).

We do not sell your data. For some specific functions, FacetMD relies on outside providers. When that happens, we send only the content of that specific operation — never your personal identifiers such as email or phone number. The types of provider that help us are:

• An audio transcription provider (turns meeting speech into text).
• A summary generation provider (summarizes the meeting text).
• A translation service (when you use translation in the app).
• A quote-of-the-day service (the phrase that appears in the app).
• Hosting and CDN — where the app runs and from where it is delivered (Vercel plus our own server) and Cloudflare.
• WhatsApp through Meta's official API (to send the waitlist notification).

Files (such as meeting audio) are kept on Cloudflare R2, and the rest of your data lives in the Supabase database. In both we use per-user isolation — in practice, only you can read what is yours. About timeframes: your account data and your content are kept for as long as your account exists. If you delete your account, we remove everything within 30 days, including from the backups. The waitlist number is discarded when you ask for removal or when it no longer makes sense to keep it.

We protect your data with encryption in transit (the connection uses HTTPS, that little padlock in the browser) and at rest (when stored). Sensitive credentials, such as your inbox password, are kept encrypted. And per-user isolation ensures that access to your content stays limited to you. Even so, it is fair to say: no system on the internet is 100% foolproof, so we work to reduce risks as much as possible.

The LGPD gives you control over your data. You can:

• Confirm whether we process your data.
• Access the data we hold about you.
• Correct incomplete or wrong data.
• Anonymize or block unnecessary data or data processed outside the law.
• Port your data (take it elsewhere) — we provide it in a JSON file, a format other systems can read.
• Delete your data and your entire account.

If you have an account, just go to the Settings screen: there you can export everything as JSON and delete your account (full removal happens within 30 days, including from the backups). If you are only on the waitlist (no login), write to contact@facetmd.com to access or remove your number — since you don't have an account, that is the way to exercise your rights.

Some of the providers we use (such as hosting, Cloudflare, WhatsApp/Meta, and the transcription, summary, and translation services) may process data outside Brazil. When that happens, it is done with appropriate safeguards and following what the LGPD requires for this kind of transfer.

We use only what is essential for the app to work — mainly to keep you logged in and remember your basic preferences. We do not use advertising tracking cookies or third-party pixels to follow you around the internet.

FacetMD is not intended for anyone under 13. We do not knowingly collect data from children in that age range.

We may update this policy from time to time, for example when we launch a new feature. When a change is significant, we will let you know. The date of the latest version is always at the top of the page.

If you connect your Google account, FacetMD accesses only what is needed for two things you ask for: Google Calendar (viewing and creating events in your agenda) and Google Drive — and here only the files you choose in Google's own picker, never your entire Drive. FacetMD's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we do not use this data to train artificial intelligence, do not sell this data, and do not share it with third parties — only to operate the feature you use, for security, for a legal obligation, or with your consent. You can disconnect your Google account whenever you want, right inside the app.

Any privacy question, or to exercise your rights and ask for removal from the waitlist, just write to contact@facetmd.com. We will respond.