Last updated: April 17, 2026
This Privacy Policy explains how Sapeum, Inc. ("Sapeum," "we," "us") collects, uses, shares, and protects information in connection with our websites (including sapeum.com), our software-as-a-service product, and related services (collectively, the "Services"). It applies to visitors of our marketing websites, users of our product, and individuals whose personal information our customers submit to the Services.
We do not sell personal information. We do not show third-party advertising on our Services. We do not use customer content to train foundation AI models, and our AI providers are contractually prohibited from doing so using data sent through our API requests.
Sapeum plays two distinct roles depending on the context:
With your authorization, you may connect third-party accounts to the Services (for example, Google Workspace for Gmail, Calendar, or Drive; or Slack). When you do, we receive information from those services as permitted by the scopes you grant, which may include your profile information, message metadata and content, calendar events and attendees, files, and channel activity. You can revoke these authorizations at any time in the connected account's settings or within the Services.
We may receive information about you from business partners, resellers, event sponsors, and publicly available sources in connection with sales, marketing, and security activities (for example, confirming a company domain or detecting fraud).
We use information to:
For individuals in the European Economic Area and Switzerland, we rely on the following legal bases: performance of a contract (to provide the Services you or your organization requested); our legitimate interests (to secure, improve, and market the Services in ways that do not override your rights); your consent (where required, for example for certain cookies or marketing communications); and compliance with legal obligations.
The Services use large language models and other machine learning systems to analyze, summarize, and transform content you or your organization submit. We want to be clear about how this works:
We share information with vendors who process it on our behalf to deliver the Services, including cloud hosting, networking, authentication, AI inference, speech-to-text, analytics, and customer support. These vendors are contractually required to protect the information and use it only to provide services to us. Customers may request our current subprocessor list by contacting [email protected], and we will provide advance notice of material subprocessor changes by email to account administrators.
Content you submit to the Services may be visible to other users within your organization's account based on the permissions set by your administrators.
We may disclose information if we believe in good faith that disclosure is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our agreements or policies; or to protect the rights, property, or safety of Sapeum, our customers, or others.
If Sapeum is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections. Any acquirer will be bound by the commitments in this Privacy Policy or will provide notice before making material changes.
We share information in any other way you direct or to which you consent.
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.
We use cookies and similar technologies (pixels, local storage, SDKs) to keep you signed in, remember your preferences, secure the Services, and understand how our websites and product are used. We use product analytics on our marketing websites (including PostHog) to measure engagement and improve content. We do not use cookies or similar technologies for third-party advertising.
You can control cookies through your browser settings. In jurisdictions that require consent for non-essential cookies, we request your consent before setting them. Because we do not use advertising cookies, we do not respond differently to browser "Do Not Track" signals. To the extent Global Privacy Control ("GPC") signals apply to our processing, we treat them as a valid opt-out request under U.S. state privacy laws that recognize them.
We host the Services on infrastructure located in the United States. If you access the Services from outside the United States, information about you will be transferred to, stored in, and processed in the United States and other countries where we or our subprocessors operate. Where required, we rely on the European Commission's Standard Contractual Clauses and equivalent mechanisms to safeguard transfers out of the European Economic Area and Switzerland, and we will make the applicable transfer mechanism available to customers who require one.
We retain personal information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. In practice:
We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit and at rest, least-privilege access controls, multi-factor authentication, monitoring, and regular backups. More detail is available in our Trust Center, which publishes our security program, policies, and audit status. No system is completely secure; if we become aware of a security incident affecting your information, we will notify affected parties as required by law and our customer agreements.
Depending on where you live, you may have the right to:
To exercise these rights, contact us at [email protected]. We will verify your request in a manner proportionate to its sensitivity and respond within the period required by applicable law. We do not discriminate against individuals who exercise their privacy rights. If our customer submitted the personal information to the Services, we will refer your request to that customer.
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other U.S. states with comprehensive privacy laws have the rights described in Section 10 above, as applicable under their state law. You may designate an authorized agent to submit a request on your behalf.
For California residents: in the preceding twelve months, we have collected the categories of personal information described in Section 2 (identifiers; commercial information; internet or other electronic network activity; geolocation inferred from IP; professional or employment-related information; and inferences drawn from the above). We collect, use, and disclose these categories for the purposes described in Section 3. We do not "sell" personal information and we do not "share" personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act.
The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date, and, where appropriate, by email or in-product notice. Your continued use of the Services after the update takes effect constitutes acceptance of the revised policy.
For privacy questions or to exercise your rights, contact us at [email protected]. For security questions, contact [email protected]. Our postal address is Sapeum, Inc., c/o Gaussian Holdings, LLC, 54 State Street, Suite 804, Albany, NY 12207.