Last updated: September 2026

Privacy Policy

Besluit.ai processes as little personal data as possible, for as short a time as necessary, and only to deliver the service. This policy explains what data we process, why, and what your rights are.

Data controller

Besluit.ai is a service of 4AT Media (KvK 42107739, VAT NL005499478B88), based in 🌷 the Bollenstreek, the Netherlands. For privacy questions, contact us at hello@besluit.ai.

What data we process

Account data
Your email address and an encrypted version of your password. We use your email address only for login and essential notifications (such as a password reset). We do not send marketing without explicit consent.
Audio file
The recording you upload. This file is deleted immediately after transcription. It is never stored longer than strictly necessary for processing.
Transcript
The automatically generated text version of your meeting. This transcript is stored on our own server in Germany and used to generate meeting notes.
Meeting notes
The summary, decisions and action items resulting from processing your transcript. These notes are stored on our server in Germany and accessible only to you.
Knowledge base
Notes about people and projects that you create yourself or that you approve after Besluit.ai proposes them from a meeting. These files are stored on our server in Germany and fully readable and editable in the app.
Referral code
An anonymous token used when you invite someone to the service. No personal data from third parties is stored before they create their own account.
Calendar URL
If you enable calendar matching, we store the private iCal URL you paste so a recording can be linked to the right event. That URL is readable only by you.
Integrations
If you connect Notion or Google Drive, we store the access tokens encrypted. We only export notes to the page or folder you choose.
Payments
Paid plans are processed by Mollie. We store your Mollie customer and subscription ids, not card details.

AI processing

To generate meeting notes, your transcript (and relevant knowledge base context) is sent to Anthropic (Claude) under a data processing agreement. Your data is not used to train AI models. That processing takes place outside the EU; results are stored on our EU server. Audio-to-text transcription is performed by RunPod on GPU servers in an EU data centre; your audio never leaves the EU and is not retained there after transcription. Transactional email (verification, password reset, notes-ready) is sent via Resend.

Retention periods

Audio files
Deleted immediately after transcription.
Other account and meeting data
Retained for as long as your account is active. You can delete your account at any time via Settings (password confirmation required). On deletion we immediately remove the account, meetings, notes and knowledge base from the server. Any backups drop off within 30 days.

Your rights

Under the GDPR you have the following rights:

  • Access to the data we hold about you
  • Correction of inaccurate data
  • Deletion of your data ('right to erasure')
  • Restriction of processing
  • Objection to processing
  • Portability of your data

You can exercise most rights directly in the app (view and edit your knowledge base, delete your account). For other requests, contact us at hello@besluit.ai. We respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

Security

Connections are encrypted via HTTPS. Passwords are stored hashed (bcrypt). Integration tokens (Notion, Google Drive) are stored encrypted. Transcripts and notes live on our own server in Germany; audio is deleted immediately after transcription. Our server is located in an ISO 27001-certified data centre.

Visitor statistics

Besluit.ai uses Umami, an open-source analytics tool that we self-host on our own server in Germany. We measure page views only: no session replay, no mouse movement, and no dashboard content. Umami does not set tracking cookies and shares nothing with third parties. Because no tracking cookies are placed, a cookie banner is not required.

Changes

If we make significant changes to this policy, we will notify you by email. The most recent version is always on this page.