Privacy Policy

Last updated: May 26, 2026

Drashai ("we", "us", or "the app") is an encounter recorder and content generator built for rabbis. This policy explains what data we collect, how we use it, and the choices you have.

1. Information We Collect

Google account data. When you sign in with Google OAuth we receive your name, email address, and profile picture. We do not receive or store your Google password.

Google Drive access. With your consent, the app reads and writes files in a dedicated Drashai folder within your Google Drive. We do not access files outside that folder.

Audio recordings. Encounter recordings you create are uploaded to secure cloud storage (Vercel Blob) for processing. Recordings are used solely to generate transcripts and content for you.

Generated content. Transcripts, drafts, sparks, and other outputs are stored in your Google Drive and in our application database to provide the service.

Usage data. We collect minimal server logs (timestamps, request paths, error traces) for debugging and reliability. We do not use third-party analytics trackers.

2. How We Use Your Data

  • Authenticate you and maintain your session
  • Transcribe and process audio recordings
  • Generate content using AI (Anthropic Claude)
  • Store your files in Google Drive on your behalf
  • Improve reliability and fix bugs

3. Third-Party Services

We send data to the following services strictly to provide app functionality:

  • Google — authentication and Drive file storage
  • Anthropic (Claude) — AI content generation from your transcripts and notes
  • ElevenLabs — audio transcription and text-to-speech
  • Vercel — application hosting and temporary blob storage

Each service is governed by its own privacy policy. We only share the minimum data needed for each service to function.

4. Data Retention

Audio uploads are retained in cloud storage only as long as needed for processing. Your Google Drive files persist until you delete them. Session cookies expire when you log out or after a period of inactivity.

5. Data Security

All data is transmitted over HTTPS. Sessions are encrypted using iron-session. We follow industry-standard practices to protect your information, but no system is 100% secure.

6. Your Rights

You can revoke Drashai's access to your Google account at any time via your Google Account permissions. You may also request deletion of your data by contacting us.

7. Changes

We may update this policy from time to time. Material changes will be communicated within the app.

← Back to login · Terms of Service