Privacy policy.
This policy covers the exapta.ai website and the Exapta mobile app. Both are operated by 1 Source Medicine, LLC. The short version: we collect what the service needs to work, we use it for nothing else, and we never sell it.
Effective September 4, 2026.
What we collect
On the website: whatever you choose to send us through the contact form, the site chat, or a booking, such as your name, your email address, and your message. Our hosting provider also keeps standard server request logs.
In the app: your account email address, your display name, the messages you send, and the files and photos you attach to them.
The app asks for camera and photo library access only when you choose to attach a photo. Attachments you pick are uploaded to your workspace. Nothing is read from your library beyond what you pick.
When you choose to dictate, the app or website asks for microphone access. When you choose to transcribe, the recording is sent to OpenAI after you have agreed to share it. You can add the text to a draft, and the app also lets you choose to transcribe and send it. Exapta deletes its temporary recording afterward and does not keep it as an attachment.
When you choose to talk live, your voice is sent to OpenAI as you speak and Exapta keeps a text transcript of the conversation in your workspace. Exapta does not keep the audio.
What we use it for
To run the service: sign you in, deliver your messages, store your attachments, turn recordings you choose to dictate into text, and answer you when you write to us. That is the whole list.
We do not sell your data. The app shows no ads, contains no third-party analytics, and does not track you across other apps or websites.
Sign-in
You sign in with a code sent to your email address. We do not store passwords.
Who processes it
Eight providers process data on our behalf, each only to provide the service: Supabase for the database, authentication, and storage; Cloudflare R2 for file storage; Vercel for hosting; Anthropic for answering the messages you type into the site chat; Resend for the email we send you and the internal alert that tells our team you wrote; Google for sign-in with Google and the calendar invite when you book a call; Zoom for the meeting itself; OpenAI for transcribing recordings you choose to dictate and for live voice conversations you choose to start.
OpenAI processes dictated recordings and live voice conversations under its API data policies. Its handling and retention are separate from Exapta deleting its temporary recording. Read OpenAI's data controls for the provider's current terms.
How long we keep it
For as long as your account is active. To have your account and its data deleted, email joe@exapta.ai from the address on the account and we will delete it.
Children
Exapta is a tool for businesses. It is not directed to children.
Changes
If this policy changes, the new version is posted here with a new effective date.
Contact
Questions about this policy go to joe@exapta.ai. A person reads it.