· Surfnote AI
Surfnote AI
Surfnote Privacy Policy
Last updated: 28 May 2026

Surfnote operates two products under a single platform: the Surfnote AI meeting assistant (Telegram bot at surfnote.io) and Silkway Platform (rt.surfnote.io), a startup accelerator management tool. This policy describes what data each product processes, how we protect it, and how to exercise your rights.

Who we are

Surfnote AI is a Telegram-based service (@surfnoteiobot) that transcribes and summarizes meetings for individual users. You send us a meeting link or an audio file — we return a structured PDF summary in your Telegram chat. Silkway Platform (rt.surfnote.io) is our companion product for startup accelerator programs, used by founders, experts, and program hosts to schedule and run consultations. Both products are operated by AI Surfers (aisurfers.ai) and share a common Google OAuth client.

Contact us anytime: support@salesaibootcamp.ink

What we collect

  • Telegram user identifiers (user ID, username, first name) provided by the Telegram platform when you start the bot or link Telegram to your Silkway Platform account.
  • Google account email and profile name when you sign in to Silkway Platform with Google.
  • Meeting links you send manually (Google Meet, Zoom, Yandex Telemost) for Surfnote AI.
  • Google Calendar events (read-only) if you connect Google Calendar — used to identify meeting links and trigger the Surfnote AI bot automatically.
  • Google Calendar free/busy data when you (or another user) view your availability on Silkway Platform — used to show available consultation slots.
  • Google Calendar events created on your calendar by Silkway Platform when you book or are booked for a consultation — these events are created by you, and we only modify the ones we created.
  • Audio files you upload directly in Telegram or via the Mini App cabinet — stored in Google Cloud Storage to enable transcription.
  • Transcribed text produced by processing your meeting audio or uploaded files.
  • AI-generated summaries based on your chosen prompt and the transcript.
  • On Silkway Platform: your role (founder, expert, tracker, host), startup affiliation, expertise area, country, optional LinkedIn URL, and expert availability window (days of week and hours).
  • Legal consent state (whether you have accepted the current Terms and Privacy versions).
  • Your custom summary prompts created and edited in the Mini App.

How we use the data

  • Surfnote AI: join meeting rooms (Google Meet, Zoom, Yandex Telemost) via Attendee bot on your behalf and obtain transcripts.
  • Surfnote AI: transcribe uploaded audio files using Deepgram with speaker diarization.
  • Surfnote AI: generate meeting summaries using Anthropic Claude based on your selected prompt.
  • Surfnote AI: deliver the final PDF (transcript + optional summary) to your Telegram chat.
  • Silkway Platform: authenticate you via Google OAuth and create your account using the email and name returned by Google.
  • Silkway Platform: display experts in a catalog with their stated expertise, country, and availability so founders can choose whom to book.
  • Silkway Platform: when a founder books an expert, create a calendar event on the founder's Google Calendar with the expert as an attendee, including an auto-generated Google Meet link. We send no other modifications to that calendar.
  • Silkway Platform: when either party cancels a consultation, delete the corresponding calendar event we created.
  • Silkway Platform: query Google Calendar free/busy data for an expert when a founder is choosing a time, so we can display only slots that are actually free.
  • Silkway Platform: send Telegram notifications about booking confirmations, reminders before consultations, the meeting link, and the summary after the call (when Telegram is linked).
  • Maintain service reliability, investigate incidents, and improve the product.

Data retention

  • Meeting audio captured by the bot: never stored — deleted immediately after transcription completes.
  • Uploaded audio files: stored in Google Cloud Storage until you delete the call or your account.
  • Transcripts and summaries: retained until you delete the call or your account.
  • Account and all associated data: permanently deleted when you use self-serve account deletion in the Mini App Profile section.
  • You can delete individual calls or your entire account at any time via the Mini App.

Legal basis & roles

  • You are the data controller for any meeting content you process through Surfnote AI.
  • You are responsible for obtaining consent from all meeting participants before recording or transcribing.
  • Surfnote AI acts as a data processor, handling data only to deliver the services you request.
  • Processing takes place to fulfill the service contract you accept when you start using the bot.

Subprocessors

We rely on trusted vendors who meet our security requirements:

  • Attendee — meeting bot service that joins video calls on your behalf and produces transcripts.
  • Deepgram — speech-to-text transcription with speaker diarization for uploaded audio files.
  • Anthropic — AI-powered summary generation via Claude models.
  • Google Cloud Storage — object storage for uploaded audio files (S3-compatible API).
  • Telegram — message delivery platform and Mini App host.
  • Google Calendar API — read-only calendar access for automatic meeting detection (optional).

Google user data & third-party disclosure

When you connect Google Calendar or sign in with Google, we access limited Google user data solely to provide the features you have requested. We request the following Google OAuth scopes:

  • userinfo.email and userinfo.profile — to identify you on Silkway Platform after Google sign-in, create your account, and pre-fill your display name.
  • calendar.readonly — to detect upcoming meetings with supported conferencing links so the Surfnote AI bot can join them automatically (opt-in via the Mini App; you can choose between auto-joining only events marked with '[RT]' or all events).
  • calendar.freebusy — to query an expert's busy intervals on Silkway Platform when a founder is selecting a consultation time, so we can display only the slots when the expert is actually available.
  • calendar.events — used on Silkway Platform to (1) create a Google Calendar event on the founder's calendar with the expert as attendee and a Google Meet link when a booking is confirmed, and (2) delete that same event when the consultation is cancelled. We only create events you explicitly initiate by clicking 'Book', and we only modify or delete events we created ourselves. We do not read, edit, or delete any pre-existing events on your calendar.
  • We do not transfer or disclose your Google user data to third parties for purposes other than those explicitly stated in this policy.
  • We do not use Google user data for advertising, marketing, machine learning model training, or any purposes unrelated to the features described above.
  • All Google user data is subject to the same security measures, retention policies, and data subject rights described in this policy.

Google API Services Limited Use disclosure

Surfnote AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

  • We only use Google user data to provide or improve user-facing features that are prominent in Surfnote AI's user interface.
  • We do not use Google user data for serving advertisements.
  • We do not allow humans to read Google user data unless we have obtained your affirmative agreement, it is necessary for security purposes, or to comply with applicable law.
  • We do not transfer Google user data to others unless necessary to provide or improve user-facing features, for security purposes, to comply with applicable law, or as part of a merger or acquisition (with prior notice).

Security measures

  • TLS encryption for all data in transit.
  • Google Cloud encryption at rest for databases and object storage.
  • Access restricted to vetted personnel with multi-factor authentication.
  • Regular vulnerability scanning, patching, and incident response procedures.

Your rights

You can exercise the following rights directly in the Mini App or by contacting us:

  • Delete individual calls (transcript, summary, and uploaded audio) from the Calls section.
  • Delete your entire account and all associated data from the Profile section — self-serve, no email required.
  • Disconnect Google Calendar at any time from the Profile section.
  • Access or correct your personal data by contacting support@salesaibootcamp.ink.