Akaska UG (haftungsbeschränkt)
Represented by the managing director: Benedict Krötz
Kratzerstraße 8A
80638 Munich
Germany
Commercial register: HRB 313064, Register court: Amtsgericht München
Email: support@taylos.ai
This Policy applies to taylos.ai, app.taylos.ai, the Taylos desktop app, demo booking, billing, and support interactions that link to it.
It does not automatically replace separate contractual privacy commitments we may enter into with business customers, including a data processing agreement.
When business customers decide which users, meetings, and workflows are processed through Taylos for service delivery, Taylos generally acts as a processor for that meeting content.
Taylos acts as an independent controller for its own operational processing, including website operation, accounts, authentication, billing, support, fraud prevention, security, and product analytics.
- IP address and technical request data
- browser, device, and operating system information
- pages visited and referral information
- information submitted through contact or demo-booking flows
- name, username, and email address
- account status and sign-in metadata
- Google or Apple sign-in data where you choose social login
- subscription, invoice, and payment-related metadata
- feature usage
- performance and latency metrics
- error and diagnostic information
- session and interaction metadata
- session replays of the web and desktop apps, which can include displayed meeting content and non-password input
- microphone audio and, where applicable, system audio during live sessions
- transcripts
- summaries
- question-and-answer history
- meeting-related notes and structured outputs generated from meeting content
Taylos is not designed to process screen content as part of its standard customer workflow. If that changes materially, we will update this Policy and the related in-product disclosures.
We use personal data to operate Taylos, authenticate users, process subscriptions and billing, transcribe and structure meeting content, generate AI-assisted outputs, respond to support requests, improve reliability, prevent abuse, and comply with legal obligations.
Where the GDPR applies, we rely on performance of a contract, legitimate interests, consent where required by law, and compliance with legal obligations.
We base product analytics and the server events described below on our legitimate interest in operating, securing and improving Taylos (Art. 6(1)(f) GDPR). Session replay and analytics storage in your browser in the web app are based on your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
We use PostHog product analytics and session replay to understand how the web and desktop apps work and to investigate failures and the quality of assistance.
Our servers also send analytics events to PostHog from live sessions. Each event contains the transcript lines a live suggestion was based on and the suggestion itself, linked to your account. We use them to measure and improve the quality of assistance and to investigate failures. Only our founders have access to product analytics and replay data.
Replays are not limited to masked interfaces. They can contain displayed text, non-password input, meeting transcripts (including other participants' words), prompts, suggestions, console logs, and captured network request and response headers and bodies. Password fields and elements marked as secrets are blocked; software also attempts to redact recognized credentials in captured network data. These protections may not remove every sensitive detail. Replay data is sent to PostHog's EU-hosted service.
In the web app, session replay and analytics storage in your browser only run if you allow them under Settings → Privacy ("Help improve Taylos"), and you can withdraw your consent there at any time. Without it, the web app sends analytics events without replay and without storing anything in your browser. Desktop app version 1.0.117 and later reads the same account setting after sign-in. Without consent, it does not record replay or store an analytics identifier on your device. Older desktop versions may behave differently; update to the latest version. Signing in associates activity with your account. The website cookie choice does not control the apps. If you need a copy of, or deletion of, data associated with your account, contact us using the address below.
Taylos processes meeting content to provide live assistance, transcripts, summaries, and related outputs. Customers and end users are responsible for ensuring that their use of Taylos complies with applicable laws, including any notice or consent requirements that may apply to recording or transcription.
Taylos uses AI systems to generate suggestions, summaries, draft text, and similar outputs. These outputs may contain mistakes, omissions, or inappropriate inferences. Users remain responsible for reviewing outputs before relying on or sharing them.
When a Taylos user runs Taylos during a call, what you say is transcribed and processed so that the user sees live suggestions and summaries. The Taylos user decides this and is responsible for it; for business customers we act as their processor. Taylos users must tell participants before they transcribe a call and obtain any consent required by law.
In addition, Akaska UG (haftungsbeschränkt) uses transcript lines and suggestions from these sessions in its product analytics (PostHog, EU) to find errors and improve Taylos, based on our legitimate interest (Art. 6(1)(f) GDPR). Only our founders have access to this data, and it is deleted after one year. You have the rights described in this Policy, including the right to object; contact support@taylos.ai.
We use service providers that support hosting, authentication, billing, analytics, transcription, AI processing, and scheduling. A current list is available on our Subprocessors page.
Some providers process data outside the European Economic Area, including in the United States. Where required, we use appropriate safeguards such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.
Payments sold through Link. For subscriptions sold through Link, Sold through Link, LLC and its Stripe affiliates process your payment, billing and tax data as independent controllers under their own privacy policy. We receive the order data Link shares with us, such as your name, email address, billing country, plan and payment status, but not your full card number.
We keep personal data only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.
- Account and subscription data are retained while your account is active and for a reasonable period afterwards as needed for security, dispute handling, or compliance.
- Meeting transcripts, summaries, and Q&A history are retained until deleted by the user, the customer, or us in connection with account closure or service administration, unless longer retention is legally required.
- Billing and transaction records are retained for the periods required by accounting and tax law.
- Support and diagnostic data are retained for as long as necessary to resolve and follow up on an issue, plus a reasonable period for service quality and auditability.
- Technical and security logs are retained for up to 30 days.
- Product analytics events, including the server events with transcript lines described above, are retained for one year, and session replays for 30 days; PostHog then deletes them automatically.
Depending on applicable law, you may have the right to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent.
Right to object. Where we process your data on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). Write to support@taylos.ai. We then stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.
To exercise privacy rights, contact support@taylos.ai.
You also have the right to lodge a complaint with a competent supervisory authority. For private-sector companies in Bavaria, the competent authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).
If you have questions about privacy, legal terms, support, or data requests you can contact us at support@taylos.ai.