Legal
Privacy Policy
Last updated November 3, 2026
This policy explains what data Attendly ("we", "us"), operated by Attendly, processes when a HighLevel account installs the app, and how it is used, stored and protected.
Summary
- We use your data only to mark meeting attendance and write meeting notes in your HighLevel account.
- Results are written to your HighLevel account. We store only the access tokens needed to do that, encrypted.
- Transcripts and participant lists are processed in memory and never stored.
- We do not sell data, use it for advertising, or use it to train AI models.
Data we access
| Source | Data | Why |
|---|---|---|
| HighLevel | Appointments (time, status, meeting link, owner), contact name and email, user name and email, custom fields and values | Find online appointments, match attendees, write statuses, notes, fields, tags and tasks |
| Zoom, Microsoft Teams, Google Meet | Connected account's name and email; for meetings that account hosts: participant names, emails where provided, join and leave times; transcripts or platform summaries | Decide attendance and write meeting notes |
What we store
- OAuth access and refresh tokens for HighLevel and connected platforms, encrypted with AES-256-GCM, kept until you uninstall or disconnect.
- A short queue of upcoming meetings (appointment IDs and times only), deleted once each meeting is processed.
- Technical logs (event type, sub-account ID, short messages, no transcript content), kept in a fixed-size log that overwrites old entries.
Attendance results, notes, tags, tasks and settings are stored in your HighLevel account, under your control.
AI processing
To write notes, the meeting transcript or platform summary is sent to Google's Gemini API, which returns a structured summary. The text is not stored by us after the note is written. Google processes it under its Gemini API terms. We do not use your data to train models.
Service providers
| Provider | Purpose |
|---|---|
| Vercel | Hosting |
| MongoDB Atlas | Encrypted token storage and job queue |
| Google (Gemini API) | Generating meeting notes |
| HighLevel, Zoom, Microsoft, Google | The platforms you connect |
Google user data
Attendly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Meet data is used only to provide attendance and notes to the account that connected it. It is not transferred to others except as needed to provide the service, for security, or by law, and is never used for advertising or read by people except with your permission, for security, or by law.
Your choices and deletion
- Disconnect a platform on the app page: its tokens are deleted and revoked where the platform allows.
- Uninstall the app in HighLevel: the sub-account's tokens and queued meetings are deleted.
- Notes, tags and fields already written stay in your HighLevel account; you can edit or delete them there.
- To request deletion or a copy of the data we hold, email malikrayad110@gmail.com.
Security
All traffic uses HTTPS. Tokens are encrypted at rest. Webhooks from HighLevel are signature-verified. Access to production systems is limited to the operator.
Your responsibilities
You are responsible for having a lawful basis to process your contacts' data and for giving any notices required for recording or transcribing meetings.
Children
The service is for businesses and is not directed to children under 16.
Changes
We may update this policy. The date at the top shows the latest version.
Contact
Questions about privacy: malikrayad110@gmail.com.