Effective date: 19th May 2026
Last updated: 19th May 2026
Milago Technologies Private Limited ("Milago", "Milago AI", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, store, and safeguard personal data when you use our website, web application, dashboard, browser extension, meeting bot, integrations, and related services (collectively, the "Service").
Milago AI is an AI-powered meeting intelligence platform designed for business and professional users. The Service helps users capture meetings, generate transcripts, and produce AI-assisted summaries, action items, decisions, insights, knowledge items, and other structured outputs. Because the Service involves meeting recordings, transcription, artificial intelligence, workspace collaboration, and third-party technology providers, this Privacy Policy is drafted to explain our practices in a practical and transparent way.
We aim to handle personal data in line with India's Digital Personal Data Protection Act, 2023 and applicable rules, together with broadly recognised global privacy principles such as transparency, purpose limitation, data minimisation, security, user control, and accountability.
Our registered office is located at 9th Floor, Brigade IRV, Nallurhalli Road, Whitefield, Bangalore 560066, Karnataka, India.
We collect only the information that is reasonably necessary to provide, secure, operate, support, and improve the Service. The type of information we collect depends on how you interact with Milago AI and which features you choose to use.
We collect different categories of data depending on how the Services are used. The categories below describe the main types of information processed by Milago AI.
When a user creates or manages a Milago AI account, we may collect information such as name, email address, profile image, account role, workspace membership, plan tier, billing status, account status, and related identifiers. If a user signs in through an OAuth or single sign-on provider, we may receive basic account information from that provider, such as name, email address, profile image, and authentication identifiers.
Passwords, where used, are stored only in hashed form. We do not store passwords in plain text.
We process authentication and access-related data to keep accounts secure and to provide the Services. This may include OAuth account linkages, access sessions, browser session identifiers, login metadata, and technical records required to authenticate users and maintain secure access.
Where users connect third-party accounts, such as calendar or identity providers, we may store tokens or credentials necessary to enable that integration. These are used to provide the connected functionality requested by the user, such as calendar-based meeting scheduling or third-party sign-in.
Milago AI may process meeting-related data when users capture meetings through the meeting bot or browser extension. This may include meeting title, date, time, meeting URL, platform information, attendee details, participant names, recording source, processing status, audio recordings, video recordings where enabled, screen-share content where captured, and related meeting metadata.
Audio is generally captured when a meeting is recorded through Milago AI. Video capture is configurable and may include meeting video or screen-share content if the user enables that setting or uses a recording mode that supports it.
After audio is captured, it may be transcribed using third-party speech-to-text technology. Transcript data may include spoken words, speaker labels, timestamps, diarisation data, per-utterance segments, and related processing metadata.
Speaker labels may be based on the information available in the meeting or generated by the transcription provider. While the Services are designed to provide useful transcription and speaker attribution, diarisation and transcription may not always be complete or fully accurate.
Milago AI uses artificial intelligence to generate structured outputs from meeting transcripts and related metadata. These outputs may include meeting summaries, action items, owners, decisions, key insights, knowledge items, feedback items, meeting category classifications, and responses generated through chat-with-transcript functionality.
AI outputs are generated from the meeting content made available through the Services. They should be reviewed by users for accuracy, completeness, and context before being relied upon.
If users connect their calendars or other integrations, we may process calendar event titles, meeting times, attendee lists, meeting links, scheduling preferences, bot preferences, and related metadata necessary to schedule, join, or process meetings through the Services.
The scope of information available to us depends on the permissions granted by the user through the relevant third-party integration.
For individual and organisation workspaces, we process workspace-related information such as organisation name, workspace members, user roles, shared meetings, boards, tasks, knowledge items, feedback items, shared links, access permissions, and collaboration activity.
Where a user generates a shared link to a meeting, transcript, board, or other content, that link may allow read-only access to the relevant content depending on the sharing settings selected by the user.
We process subscription and billing-related information such as plan identifiers, billing cycle, invoice records, subscription status, payment gateway references, and transaction-related webhook information. Payments are processed through third-party payment gateways. Cardholder data is handled by the payment gateway and does not pass through or remain stored on Milago's own systems.
When users visit our website or use the Services, we may collect technical and usage information such as page views, in-app events, anonymous session identifiers, user ID where applicable, IP address, URL, referrer, user-agent, browser type, device information, operating system, event timestamps, and related analytics data.
We use this information to understand product usage, improve performance, support reliability, identify errors, prevent abuse, and maintain security.
If users contact us for support, billing, sales, or legal inquiries, we may process the information included in those communications. We may also maintain records of transactional emails, account notifications, support activity, administrative actions, data export requests, deletion requests, and other operational records.
Internal administrative actions taken on user accounts may be recorded in audit logs for accountability, security, and compliance purposes.
Milago AI is not designed to intentionally collect highly sensitive personal data such as government identifiers, health data, biometric data, children's data, or financial account credentials. However, because users may record business meetings, meeting content may sometimes include confidential, personal, privileged, employment-related, financial, or otherwise sensitive information. Users are responsible for deciding whether a meeting is appropriate to record and process through the Service.
Sources of Data: In summary, the personal data we process may come directly from you, from your use of the Service, from meetings you choose to capture, from your organisation or workspace administrator, from connected third-party integrations, or from technical systems that automatically generate logs and analytics data.
We collect personal data in several ways.
Some data is provided directly by users, such as when they create an account, update their profile, connect integrations, configure a workspace, contact support, subscribe to a plan, or upload information into the Services.
Some data is collected through the product's meeting capture features. A user may choose to capture a meeting through a server-side meeting bot that joins the meeting as a visible participant, or through a browser extension that records from the user's browser session after the user initiates recording. The selected capture method determines how meeting media is collected and processed.
Some data is received from third-party services integrated with Milago AI, including calendar services, OAuth identity providers, meeting platforms, payment gateways, email providers, transcription providers, AI model providers, and infrastructure providers.
We also collect certain technical, analytics, and security data automatically when users access or interact with our website, application, extension, or backend services.
We use personal data only for legitimate, necessary, and product-related purposes. These purposes include operating the Service, enabling meeting intelligence features, supporting customers, maintaining security, and complying with applicable obligations.
No Advertising Sale: We do not sell your personal data. We do not use meeting recordings, transcripts, or Customer Content for third-party advertising, behavioural advertising, or unrelated marketing by third parties.
Legal Grounds: Where applicable law requires a legal basis, we may process personal data on grounds such as performance of a contract, consent, legitimate interests, compliance with legal obligations, or other recognised grounds under applicable privacy laws. For meeting recordings and similar activities where consent or notice is required, the user or customer initiating the recording is responsible for obtaining the required participant permissions.
Milago AI allows users to record, transcribe, and analyse meetings. This is a powerful feature, but it also requires care. Recording a meeting may trigger privacy, confidentiality, employment, communications, sector-specific, platform-specific, or consent-related obligations depending on where participants are located and what is discussed.
Milago AI supports meeting capture in two main ways. First, a server-side meeting bot may join a supported meeting as a visible participant. The default bot name may appear as "Milago Notetaker" or a similar configured name. Second, a user may use the browser extension to record a meeting from the user's browser session after initiating the recording.
The meeting bot is designed to be visible in the meeting participant list. It is not intended to operate as a hidden or covert recording tool. However, the mere presence of a bot in a participant list may not be sufficient in every situation or jurisdiction. Users should clearly inform meeting participants before or at the start of a meeting that the meeting may be recorded, transcribed, and analysed using Milago AI.
By using Milago AI to record, transcribe, or analyse a meeting, you confirm that you have the authority to do so and that you have provided all required notices and obtained all legally required consents, permissions, or approvals from meeting participants. This includes compliance with applicable laws, workplace policies, confidentiality obligations, customer requirements, and rules of the relevant meeting platform.
Milago does not independently verify whether every meeting participant has been informed or has consented to recording. You should not use the Service to record meetings secretly, unlawfully, or in a manner that violates a participant's reasonable expectation of privacy.
If you are an organisation using Milago AI for your team, you should adopt internal policies and participant notice practices that explain when and how meetings may be recorded, who can access the recordings and transcripts, how long they may be retained, and how participants can raise concerns.
We use cookies and similar technologies to operate, secure, and improve the Service.
At a minimum, the Service may use essential cookies or similar technologies to maintain login sessions, authenticate users, secure accounts, remember basic settings, and support core application functionality. These cookies are necessary for the Service to work properly.
Where analytics is enabled, we may use analytics cookies, session storage, or similar technologies to collect standard usage information such as page views, sessions, device information, browser information, referrers, URLs, and in-app events. We use this information to understand product usage, troubleshoot issues, and improve performance.
We do not currently use marketing cookies, third-party advertising cookies, social media pixels, or session-replay tools in the web application. If this changes in the future, we will update this Privacy Policy and, where required by law, provide an appropriate consent or preference mechanism.
You may control cookies through your browser settings. However, disabling essential cookies may affect important functionality, including login, session continuity, and account security.
Additional cookie information may be made available on request or through future product updates.
We share personal data only where necessary to provide the Service, operate our business, comply with legal obligations, or protect legitimate interests. We do not share meeting content with advertisers or unrelated third parties.
A list of key third-party service providers used for hosting, transcription, AI processing, payments, communications, analytics, and related services is available to enterprise customers on request.
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.
Where we no longer have a legitimate need to retain personal data, we will delete, anonymise, or restrict it in accordance with applicable law and our internal practices.
Depending on where you are located and how your personal data is processed, you may have certain rights under applicable privacy laws. For users in India, these rights are framed with reference to India's Digital Personal Data Protection Act, 2023 and applicable rules. We also aim to follow broadly recognised global privacy norms for access, correction, deletion, transparency, and grievance handling.
If Milago processes Customer Content on behalf of an organisation, workspace, or customer, we may refer certain requests to the relevant organisation or workspace owner. For example, if you were a participant in a meeting recorded by a Milago customer, the customer may be the appropriate party to decide whether a recording or transcript should be accessed, corrected, shared, or deleted.
To exercise your rights, contact us using the details provided below. We may need to verify your identity and authority before responding. We will not discriminate against you for exercising your privacy rights, although some requests may limit your ability to use features that depend on the data requested to be deleted or restricted.
The Service is intended for business and professional users and is not directed to children or minors. We do not knowingly invite children to create accounts or use the Service.
Users should not use Milago AI to knowingly collect or process personal data of children unless they have all legal authority, notices, consents, and safeguards required under applicable law. If we become aware that a child has created an account or that children's personal data has been processed in a way that is not permitted, we may take steps to delete the relevant information, restrict processing, or contact the responsible customer or user.
If you believe that personal data of a child has been provided to Milago AI improperly, please contact us immediately.
We take the security of personal data seriously and use technical and organisational measures designed to protect information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
No system is completely secure. Milago does not currently provide end-to-end encryption for meeting content, and application-layer field-level encryption may not apply to all stored data. Formal certifications such as SOC 2 Type II or ISO 27001 should not be assumed unless expressly confirmed by Milago in writing.
You also play an important role in protecting your data. You should use strong credentials, protect your account, manage workspace permissions carefully, limit shared links to authorised recipients, and promptly notify us if you suspect unauthorised access or misuse.
Milago is based in India and initially focuses on users and customers in India, while also supporting business use across other jurisdictions. Because the Service relies on global cloud infrastructure and specialised third-party providers, personal data may be stored, accessed, transferred, or processed in India, the United States, or other countries where Milago or its service providers operate.
International transfers may occur when we use cloud hosting, object storage, databases, transcription services, AI model providers, email services, analytics tools, payment gateways, support tools, or other service providers located outside India. Transfers may also occur when users, workspace members, meeting participants, or administrators access the Service from different countries.
At present, Milago does not make a general commitment that all personal data will remain within a specific country or region. Where required by applicable law, we take steps intended to protect transferred data through contractual, technical, organisational, or legal safeguards appropriate to the nature of the transfer.
Customers with strict data residency, localisation, regulated-sector, or cross-border transfer requirements should contact Milago before using the Service for highly sensitive or regulated workloads.
Artificial intelligence is a core part of Milago AI. We use AI technologies to help users understand and organise meeting content more efficiently. This includes generating summaries, action items, decisions, insights, classifications, knowledge items, and responses to user questions about a transcript.
In short, Milago AI is intended to make meeting follow-up faster and more structured, but it should be used with professional judgment. The output should be treated as an assistive layer, not as a final authority.
Meetings can contain sensitive business discussions, trade secrets, personal data, employment matters, client information, legal discussions, financial information, or other confidential content. Milago does not decide what should or should not be recorded. That responsibility sits with the user or organisation initiating the recording.
Before using Milago AI for a meeting, users should consider whether the meeting is appropriate for recording, transcription, AI analysis, and workspace sharing. Users should also consider whether they need additional approvals, confidentiality notices, internal policies, client consent, or contractual permissions before capturing the meeting.
Milago does not review meeting content for legal compliance before processing it. If you upload, record, process, share, or analyse meeting content through the Service, you are responsible for ensuring that your use of the Service is lawful and appropriate for the context.
We may update this Privacy Policy from time to time to reflect changes in our Service, technology, data practices, legal requirements, or business operations. When we update the Policy, we will revise the "Last Updated" date at the top of this document.
If we make material changes that significantly affect your rights or how we process personal data, we may provide additional notice through the Service, website, email, or another appropriate channel.
We encourage you to review this Privacy Policy periodically. Your continued use of the Service after an updated Policy becomes effective means that the updated Policy applies to your use of the Service from that point forward.
If you have questions, concerns, requests, or complaints about this Privacy Policy or our data practices, you may contact us at:
Milago Technologies Private Limited
9th Floor, Brigade IRV, Nallurhalli Road, Whitefield, Bangalore 560066, Karnataka, India
General Privacy & Support Contact: support@milago.ai
Grievance Officer (India):
Name: Pradyumna Acharya
Email: pradyumna@milago.ai
Address: 9th Floor, Brigade IRV, Nallurhalli Road, Whitefield, Bangalore 560066, Karnataka, India
Please include sufficient information for us to understand and respond to your request. If you are contacting us on behalf of an organisation, please include the organisation name, your role, and your authority to make the request.