Privacy Policy
The short version. Our AI coworkers (Maya on Microsoft Teams, Michael on Zoom) join meetings they are invited to. To listen and talk, meeting audio is sent to OpenAI, a third-party AI provider. We do not record or store meeting audio. We keep the documents they make for you, for a limited time. We do not sell your data, and we do not use it to train AI models.
This policy is from Metaworkers, Inc., a Delaware corporation (Metaworkers, Inc., “we”, “us”). It covers our website metaworkers.ai, the Maya portal at billing.metaworkers.ai, our AI coworkers in meetings, and our Zoom app, AI Worker by Metaworkers. Questions: info@metaworkers.ai.
Who this covers
- Customers: people and organisations who use our service, buy minutes, or add AI Worker to their Zoom account.
- Meeting participants: everyone else in a meeting an AI coworker joins. We process what they say on our customer’s instruction. The customer is responsible for telling them and for any consent the law requires (see our Terms).
- Website visitors.
What we collect
From meetings
- Meeting audio, while the AI coworker is in the meeting. It is streamed in real time to OpenAI to understand speech and to produce the AI coworker’s spoken replies. On Zoom, Michael hears the meeting only after the host allows recording, and Zoom shows everyone that recording is on.
- Transcripts derived from that audio, used during the meeting to follow and answer the conversation.
- Documents the AI coworker makes when asked (for example Word, PowerPoint or Excel files), and the request that produced them.
- Meeting details: the meeting link, start and end times, the number of participants, and whether recording permission was given.
We do not record or store meeting audio.
From Zoom, when you add AI Worker to Zoom
When you click “Add AI Worker to Zoom” and allow it, Zoom gives us:
- your Zoom user ID, account ID, name and email address (Zoom permission
user:read:user), so we know on whose behalf Michael joins and can show it to you; - an authorization to request a join token on your behalf (Zoom permission
user:read:token). Zoom only lets Michael into a meeting outside his own account on behalf of a signed-in person who is in that meeting. Each join token is for one meeting and is used only to join it.
We do not receive your meetings list, recordings, contacts, chats, calendar or any other Zoom data. Your Zoom authorization is stored encrypted and is used only to let Michael join meetings you are in.
From customers of the Maya portal
Your email address, a scrypt hash of your password (never the password itself), your Stripe customer identifier, your credit and usage records, the meeting links you submit, and your acceptance of our terms with the version and time. Card details go to Stripe; we never see them.
From website visitors
Our website uses Google Analytics to count visits and see which pages are used. Google Analytics sets cookies and receives your IP address and browser details. Our servers also keep request logs (IP address, time, page) for security.
Why we use it
| Purpose | Basis |
|---|---|
| Running the service: joining meetings, understanding and answering, making documents | Performing our contract with the customer |
| Joining Zoom meetings on your behalf | Your authorization in Zoom, which you can withdraw at any time |
| Billing and preventing fraud | Contract; our legitimate interest |
| Security, abuse prevention, rate limiting | Our legitimate interest |
| Website statistics | Our legitimate interest, or your consent where the law requires it |
| Legal and tax obligations | Legal obligation |
We do not use meeting content or Zoom data for advertising, marketing or profiling, and we do not use it to train or fine-tune any AI model.
Who receives it
| Service provider | What they receive | Why |
|---|---|---|
| OpenAI, L.L.C. (United States) | Meeting audio, transcripts, and the text of document requests | Speech understanding, replies and document writing. OpenAI does not use data sent through its API to train its models. |
| Amazon Web Services (Canada and United States) | Everything we store | Hosting and storage |
| Lambda, Inc. (United States) | The AI coworker’s own generated voice, never meeting audio | Animating the AI coworker’s face on video |
| Zoom Video Communications, Inc. | The AI coworker’s presence, voice, video and chat messages in your Zoom meeting | Zoom is the meeting platform |
| Microsoft Corporation | The AI coworker’s presence in your Teams meeting | Teams is the meeting platform |
| Stripe, Inc. | Your email and the payment details you give Stripe | Payments |
| Google LLC | Website analytics data | Website statistics |
Documents an AI coworker shares in a meeting are posted as links that anyone with the link can open until the link expires or is withdrawn. Treat them like the meeting itself.
We may also disclose information when the law requires it, to protect rights or safety, or to a buyer in a merger or sale, in which case this policy keeps applying until you are told of a change. We do not sell personal information and we do not share it for cross-context behavioural advertising.
How long we keep it
| Data | How long |
|---|---|
| Meeting audio | Not stored. Processed in real time only. |
| Transcripts, generated documents and the requests behind them | Deleted within 30 days of the meeting |
| Document share links | Stop working after 30 days, or as soon as they are withdrawn; the file is then deleted |
| Your Zoom authorization, Zoom user ID, account ID, name and email | Until you remove AI Worker from Zoom or ask us to delete it; then deleted at once |
| Maya portal account and credit records | While the account is open, then up to 7 years for tax and accounting |
| Terms acceptance and per-meeting consent confirmations | Up to 7 years, as the record that consent was confirmed |
| Security and request logs | Up to 30 days |
Removing AI Worker from Zoom, and deletion
Remove AI Worker in Zoom at any time: sign in at marketplace.zoom.us, open Manage, then Added Apps, and click Remove next to AI Worker by Metaworkers. Zoom tells us, and we delete your Zoom authorization, Zoom user ID, account ID, name and email straight away. Michael cannot join meetings for you after that. You can also ask us to delete them by writing to info@metaworkers.ai. Step-by-step help is on our Support page.
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, to restrict or object to its use, and not to be treated differently for using these rights. Write to info@metaworkers.ai. We answer within 30 days and may first need to confirm who you are. Maya portal customers can download their account, usage and session records at any time from the portal.
If you were a participant in a meeting rather than our customer, the meeting content belongs to the customer who invited the AI coworker; please contact them first. If you contact us, we will help where we can and tell you plainly if we cannot.
Security
Traffic is encrypted in transit. Zoom authorizations are stored encrypted (AES-256) and never leave our service; join tokens are held in memory for one join only. Passwords are hashed with scrypt. Access to production systems is limited to the staff who run them. No system is perfectly secure; if a breach affects your data, we will tell you and any regulator as the law requires.
Where data is processed
Our servers are in Canada and the United States. Our service providers may process data in the United States and other countries where they operate.
Children
Our service is not for anyone under 18, or for meetings involving children. We do not knowingly collect children’s data; if we learn we have, we delete it.
Changes
We post changes here and update the date above. For material changes we email customers 30 days before they take effect.
Contact
Metaworkers, Inc., a Delaware corporation, United States · info@metaworkers.ai