Privacy Policy — Figen AI Recorder

At Figen AI, respecting your privacy and protecting your personal data are our priority.

This privacy policy (hereinafter the "Policy") describes the processing of personal data carried out in connection with the use of the Figen AI Recorder Chrome extension (the "Extension"), in accordance with the GDPR (Regulation (EU) 2016/679) and the amended French Data Protection Act.

It complements the website's general Privacy Policy and our Cookie Policy.

1. Who is the data controller?

The data controller is Figen AI, a SAS registered with the Nanterre Trade and Companies Register under number 939277752, with its registered office at 49 rue de l'Abbé Jean Glatz, 92270 Bois-Colombes, France.

2. What does the Extension do?

Figen AI Recorder has a single purpose: to allow a user with a Figen AI account to record an online meeting (Google Meet, Zoom, Microsoft Teams) with their explicit agreement, to obtain a live transcription — together with meeting guidance suggestions displayed in the side panel — and to find the meeting summary in their Figen AI workspace.

Recording never starts automatically: it requires an explicit action on your part (clicking the Extension, then the start button) and stops as soon as you decide.

3. What data does the Extension process?

  • Account data: first name, last name, email address and organisation associated with your Figen AI account;
  • Authentication data: OAuth access and refresh tokens, stored locally by the Extension — never your password;
  • Meeting content: audio from the meeting tab and, where applicable, from your microphone, streamed in encrypted form to the Figen AI application, which relays it to our transcription processor; the transcript of the conversation, including the names of participants mentioned in it; the title and address (URL) of the recorded meeting; the generated summary;
  • Operating state: the state of the recording in progress and panel preferences, stored locally in the Extension.

What the Extension does not collect

  • No browsing history;
  • No geolocation data;
  • No monitoring of your activity (clicks, mouse, keyboard, network);
  • No data collected for advertising purposes.

4. Purposes and legal bases

  • Providing the recording, transcription and summary service

    • Legal basis: performance of the contract

  • Authenticating you with your Figen AI account (OAuth)

    • Legal basis: performance of the contract

  • Notifying you when a recording ends, a summary is available or an error occurs

    • Legal basis: performance of the contract

  • Ensuring the security and proper operation of the service

    • Legal basis: legitimate interest

Audio capture is only triggered at your initiative. Microphone capture is based on your consent, which you can withdraw at any time by stopping the recording.

Other participants' data: the voice and statements of the other meeting participants are processed at the initiative of the user who starts the recording; Figen AI processes them to provide the service. As the user recording a meeting, it is your responsibility to inform the other participants of the recording and to obtain their agreement where required by applicable regulations. Any participant may exercise the rights described in section 9 over recordings concerning them.

5. Who are the recipients of your data?

Your data may be shared with:

  • Authorised Figen AI staff;
  • Our transcription processor, used exclusively for the Extension's core functionality;
  • Competent authorities upon legal request (justice, police, administration).

The Extension communicates exclusively with the Figen AI application (https://v2.figenai.com), which relays the audio stream to our transcription processor. Your data is never sold or transferred to third parties, and is never used for advertising purposes or for creditworthiness or lending assessments.

Where the use of a processor involves a transfer of data outside the European Union, such transfer is governed by the safeguards provided for in Chapter V of the GDPR (adequacy decision or standard contractual clauses).

6. How long do we keep your data?

  • Recordings, transcripts and summaries: kept in your Figen AI workspace until you delete them or your account is closed;
  • Authentication tokens: until you log out or uninstall the Extension;
  • Local preferences and operating state: until the Extension is uninstalled;
  • Account data: kept for the lifetime of your Figen AI account, under the conditions detailed in the website's general Privacy Policy.

7. Chrome permissions requested

The Extension only requests the permissions necessary for its single purpose:

  • tabCapture / activeTab: capture the audio of the meeting tab, only after your explicit action;
  • offscreen: process audio during recording (mixing, encoding, streaming);
  • identity: sign you in to your Figen AI account via OAuth, without the Extension ever handling your credentials;
  • storage: store tokens, recording state and your preferences locally;
  • alarms: periodically renew your access token and resume interrupted operations;
  • notifications: notify you when a recording ends, a summary is available or an error occurs;
  • sidePanel: display the Extension's interface in Chrome's side panel;
  • Host access: limited to https://v2.figenai.com, the Figen AI application. Content scripts are limited to Google Meet, Zoom and Microsoft Teams meeting pages.

The Extension's use of data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

8. Security

Audio streams and data are transmitted in encrypted form (TLS) exclusively to the Figen AI application (https://v2.figenai.com), which relays them to our transcription processor. Authentication tokens are returned directly to the browser via the redirect URL provided by Chrome and are never shared with any third party. Figen AI implements appropriate technical and organisational measures to protect your data against unauthorised access, alteration or disclosure.

9. What are your rights?

You have the following rights:

  • Right to information (articles 13 & 14 GDPR)
  • Right of access (article 15)
  • Right to rectification (article 16)
  • Right to restriction (article 18)
  • Right to erasure (article 17)
  • Post-mortem directives
  • Right to withdraw your consent (article 7)
  • Right to data portability (article 20)
  • Right to object (article 21)

Exercising your rights:
Send an email to [email protected]

Proof of identity may be requested in case of reasonable doubt.

Complaint:
If necessary, you can contact the CNIL (3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07).

10. Changes

We may modify this Policy at any time, in particular in the event of legal or technical developments or changes to the Extension's features. Changes will take effect on their publication date. You will be informed of any significant changes.

Effective date: 18 July 2026