We take privacy seriously

What information is collected?

At bluecap™, we respect your privacy and value our relationship with you. Your personal information will be protected, and will never be sold. Our goal is to enhance our product and your experience with us.

We collect information from you when you subscribe to our newsletter, fill out a form, or sign up and use the application bluecap™.


When ordering or registering on our site, as appropriate, you may be asked to enter your: name, e-mail address, mailing address, phone number, and / or authorize the bluecap™ app to access your calendar(s) in order to activate the application. With user consent, bluecap™ enables users to manage their calendars and captures all event-related information including meeting conversation audio, video, and text to process speech-to-text and features of the application as described below.

Our data analytics tools and capabilities enable our customers to collect, store, analyze and share the contents of audio, video, image, and text-based communications such as phone calls, video calls, emails, chats, webinars, and meetings, along with associated data and documentation.

These recordings and analysis thereof may also contain personal information, such as names, titles, and contact information. We may reproduce, analyze, summarize and disclose these files, recordings, and any results of our Services with such customers and their relevant personnel and other team members, and customers may share this information with their personnel and others. You may choose to give us access to additional user contacts to make it easy for you to do things like share and collaborate, send messages, and invite others to use the Services. If you do, we may store those contacts within our systems for you to use.

If you provide us with any personally identifiable information about another person, whether through a telephone conference recording or otherwise, you represent and warrant that

  1. you have that person’s consent to do so;
  2. such person has given consent, whether explicit or implicit,
    1. for us to collect, process, use and store such information as set forth in this Privacy Policy and any commercial agreement you have entered into with us; and
    2. for any other ways, you may use that information.
  3. you are responsible for ensuring that your (and any of your personnel or representatives, if applicable) use, control, processing, and treatment of such information and any of your legal policies relating thereto are in compliance with all applicable laws, rules, and regulations.

We collect information related to how you use the Services, including actions you take in your accounts, such as accessing and sharing files and reports. This helps us provide you with additional features, and to personalize, monitor, and improve the Services. We also collect information from and about the devices you use to access the Services, such as IP addresses, the type of browser and device you use, the web page you visited before coming to our sites, and identifiers associated with your devices. Your devices (depending on their settings) may also transmit location information to the Services.

Data Storage and Protection

We have personnel and third-party auditors dedicated to keeping your information secure and testing for vulnerabilities. We practice a variety of security measures to maintain the safety of your personal information and data when you enter, submit, access, or use our sites and the bluecap™ application. We ensure the user that the use of their Google Meet, Zoom, and Microsoft Teams is limited to the way disclosed to the user.

Personally identifiable and sensitive information is managed with additional enhanced security using DLP, De-Identification processes including BAA with all third party vendors and customers where applicable. All Data is encrypted in transit and at rest. However, no means of transmission over the internet or electronic storage is 100% secure, and while we endeavor to use commercially reasonable means to protect personal information, we cannot guarantee its absolute security. bluecap™ offers additional security with MFA (Multi-Factor Authentication) and SSO (Single Sign On) with third-part applications and CRMs such as Google Workspace and Microsoft Office 365.

All information pertaining to credit cards is processed by Stripe. Absolutely no information pertaining to your credit cards will be saved in our database.

We manage compliance requirements at the HIPAA, GDPR, and PIPEDA security levels.

Data Retention Policy

Some data you can delete whenever you like, some data is deleted automatically, and some data we retain for longer periods of time when necessary. When you delete data, we follow a deletion policy to make sure that your data is safely and completely removed from our servers or retained only in anonymized form.

Information retained until you remove it

We offer a range of services that allow you to correct or delete data stored in your bluecap app. For example, you can:

  • Edit your personal and organization information
  • Edit or delete activities such as recent searches and results, contents like calendar events, meetings transcripts, summaries, notes, contacts, etc.
  • Delete your bluecap account entirely including all data generated from the use of the application (unless specified otherwise for certain business cases and compliance purposes such as healthcare data).

Data that expires after a specific period of time

In some cases, rather than provide a way to delete data, we store it for a predetermined period of time. For each type of data, we set retention timeframes based on the reason for its collection. For example, to ensure that our services display properly on many different types of devices, we may retain browser width and height for up to 9 months. We also take steps to anonymize certain data within set time periods. For example, we anonymize advertising data in server logs by removing part of the IP address after 9 months and cookie information after 18 months.

Information retained until your bluecap Account is deleted

We keep some data for the life of your Google Account if it’s useful for helping us understand how users interact with our features and how we can improve our services. For example, after you delete a specific search from search activities, we might keep information about how often you search for things, but not what you searched for. When you delete your bluecap Account, the information about how often you search for things is also removed.

Information retained for extended time periods for limited purposes

Sometimes business and legal requirements oblige us to retain certain information, for specific purposes, for an extended period of time. For example, when bluecap processes a payment for you, or when you make a payment to bluecap, we’ll retain this data for longer periods of time as required for tax or accounting purposes. Reasons we might retain some data for longer periods of time include:

  • Security, fraud & abuse prevention
  • Financial record-keeping
  • Complying with legal or regulatory requirements
    • Customers require additional compliance such as HIPAA.
  • Ensuring the continuity of our services
  • Direct communications with bluecap

Deleting Data

Data you put into our system is yours. Users have options to delete accounts and all account-related data. Users can send requests to delete@bluecap.ai. Once deleted, the account and information can no longer be recovered.

Upon receiving the request, we immediately start the process of removing it from the product and our systems. We then begin a process designed to safely and completely delete the data from our storage systems. Safe deletion is important to protect our users and customers from accidental data loss. Complete deletion of data from our servers is equally important for users’ peace of mind. This process generally takes around 3 months from the time of deletion. This often includes up to a month-long recovery period in case the data was removed unintentionally. Each bluecap storage system from which data gets deleted has its own detailed process for safe and complete deletion. This might involve repeated passes through the system to confirm all data has been deleted, or brief delays to allow for recovery from mistakes. As a result, deletion could sometimes take longer when extra time is needed to safely and completely delete the data. Our services also use encrypted backup storage as another layer of protection to help recover from potential disasters. Data can remain on these systems for up to 8 months. As with any deletion process, things like routine maintenance, unexpected outages, bugs, or failures in our protocols may cause delays in the processes and timeframes defined in this article. We maintain systems designed to detect and remediate such issues.

HIPAA (PIPEDA for Canada) Compliance

It is important to note that there is no certification recognized for HIPAA compliance and that complying with HIPAA is a shared responsibility between the customer, bluecap and bluecap’s cloud infrastructure providers. Bluecap takes all the required measures set by GCP’s recommendations and has entered with all necessary and required BAA with its cloud vendors. Customers that are subject to HIPAA must review and accept bluecap's Business Associate Agreement (BAA). bluecap ensures that the cloud products covered under the BAA meet the requirements under HIPAA and align with our ISO/IEC 27001, 27017, and 27018 certifications and SOC 2 report.

Information Breach Notification

bluecap will immediately notify you and the required parties including authorities following a breach of unsecured protected health information. To learn more please visit hhs.gov.


We use Google Analytics, Google AdWords Conversion tracker, and other Google services that place cookies on a browser across the website. These cookies help us increase the website’s effectiveness for our visitors. These cookies are set and read by Google. To opt-out of Google tracking, please visit this page.

We use AdWords remarketing to market our sites across the web. We place a cookie on a browser, and then a 3rd party (Google) reads these cookies and may serve an ad on a 3rd party site. You may opt-out of this ad serving on Google’s opt-out page. If you are concerned about 3rd party cookies served by networks, you should also visit the Network Advertising Initiative opt-out page.

Do we use cookies?

Yes. We may collect and store information about your visit on an anonymous, aggregate basis using “cookie” technology. A cookie is an element of data that a Web site can send to your browser, which may then store the cookie on your hard drive. Cookies may tell us the time and length of your visit, the pages you look at on our sites, and the site you visited just before coming to ours. We may also record the name of your Internet service provider. This information allows us to measure site activity to tailor the consumer’s experience within our Website. The goal is to save you time and provide you with a more meaningful visit. Cookies used by bluecap on its Web sites are solely to facilitate navigation and security across the site, and are not used to capture or reveal any of your personal information.

We use cookies to understand and save your preferences for future visits and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future for our clients.

If you are concerned about cookies, you may modify your browser settings to notify you when you receive a cookie. If you do not know how to modify your browser settings please consult your browser documentation or the supplier web site. You may visit the UC Lab site with your cookies turned off. However, you may not be able to access some of the areas of our site, which require cookies for customization and personalization.

We may also use third parties to serve UC Lab advertisements on other Web sites. In serving UC Lab advertisements these third parties may place cookies on your browser computer and may collect certain anonymous information about your visits to other Websites. This information includes browser type, IP address, Web activity, and time of day and is used to better understand and optimize UC Lab’s online advertising campaigns. To opt out of these cookies, please review the privacy policies of that website and follow the instructions on their site.


Remarketing is powerful ads used to serve ads across the content network to people who previously visited our website. This is done by using cookies.

Third Party Links

Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We, therefore, have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

Children’s Online Privacy Protection Act Compliance

We are in compliance with the requirements of COPPA (Children's Online Privacy Protection Act), we do not collect any information from anyone under 13 years of age. Our website, products and services are all directed to people who are at least 13 years old or older.

Online Privacy Policy Only

This online privacy policy applies only to information collected through our website/application and devices and not to information collected offline.

Your Consent

By using our site, you consent to our privacy policy.

Changes to our Privacy Policy

Contacting Us

If there are any questions regarding this privacy policy you may contact us using the information below.

Privacy Officer: Fuad Miah