How Tainure handles your notes
Tainure is a private notebook about the people you work with. This privacy policy explains what we keep, how we use it, who can access it, and how you can download or delete it.
Last updated 3 November 2026.
What we collect
When you request a beta invite, we keep your first name, email, company, role, team size and the priorities you rank on the form. We use this information to choose beta participants and decide what to build.
In your workspace, we keep the people you add, your notes, pasted text awaiting review, saved notes and their source passages, agenda items, checklists, and your conversations with the assistant.
Tainure removes medical details before saving, and keeps only what the work needs, such as an absence.
If you connect a calendar, we keep your calendar link or connection tokens, and any meeting titles or attendee addresses you choose to link to a person.
Why we may use your data
The GDPR asks us to name the legal basis for each use of your data. There are three.
To provide the service, we use your workspace content, your sign-in details and your calendar connection. This includes the AI processing of your notes. The legal basis is our contract with you.
To run the beta and improve Tainure, we use beta invite requests, usage analytics and error reports. The legal basis is our legitimate interest in choosing participants, improving the product and fixing problems. You can object to this use by writing to beta@tainure.com.
To comply with the law, we may use your data to answer a court or a public authority. The legal basis is our legal obligation.
Who can access your workspace
You access your workspace with your email and password. Each workspace has its own database.
Tainure's operator has technical access to the infrastructure, but would only access your workspace content if you request help with a problem and investigating it requires that access. You would be informed whenever this happens.
Your notes are shared only with the providers identified below, unless disclosure is legally required.
Password reset links go to your registered email address. Anyone who can access that mailbox can reset your password, so use an address only you can access.
If your employer, someone in your notes or anyone else asks Tainure about you, they do not learn from Tainure whether you use it. None of them receives your notes unless the law requires it, and you are told about every request, unless the law forbids it.
Artificial intelligence
How we use AI
Tainure sends relevant content to Google Cloud, which runs the AI models on Vertex AI, when it prepares a briefing, extracts notes from text you provide, checks whether a saved note covers an agenda item, answers a chat message, or removes medical details from text before saving it.
Google Cloud processes these requests in the European Union only. No content is sent to AI while you are not using the product.
AI-generated content
AI-generated notes, summaries and replies can contain mistakes or omit important context. Check them against the original notes and your own knowledge before relying on them.
Tainure helps you find and summarise what your notes record, with references to the original notes.
It does not guess anyone's mood, engagement or plans, or predict whether they will leave, even when you ask. Coaching looks only at what you do, such as your meetings and the words you used.
AI model training
Tainure does not use your notes or conversations to train AI models. Google does not use them to train its models either.
Your notes are used only to provide your workspace.
AI processing and retention
Google Cloud holds a request in memory for at most 24 hours to answer faster, and never stores it on disk. An automated check screens each message for abuse. If a message is flagged, the provider may keep it for up to 90 days and a member of its staff may review it.
Service providers and hosting
Tainure uses the providers below to run the service. Only Vercel, Turso and Google Cloud receive your notes, which they process on Tainure's instructions.
| Provider | What it handles |
|---|---|
| Turso | Databases, hosted in Ireland. |
| Vercel | Application hosting, with server functions in Frankfurt. |
| Google Cloud | AI processing through Vertex AI in the European Union, as described in the AI section. |
| PostHog | Usage analytics and error reports, stored on its European cloud. |
| Resend | Service emails, including welcome and password reset links. |
| The mailbox that receives beta invite notifications, and read-only Google Calendar access if you connect it. | |
| Porkbun | Domain services and forwarding of messages sent to beta@tainure.com. |
Before another provider receives your notes, we update this list and ask you to accept the change, as explained under Changes to this privacy policy.
Analytics, cookies and error reports
We measure how the product is used, including which screens are opened and which buttons are pressed. These analytics exclude note content and team members' names.
PostHog stores nothing in your browser. It sets no cookie and uses no local storage, on the public website or in your workspace. Inside your workspace, analytics are linked to your workspace address, so we can see repeat visits.
The only cookie Tainure sets is a signed session cookie, valid for thirty days, that keeps you signed in. It is strictly necessary, so it needs no consent.
When an error occurs, we report its type, its location in the code and a reference number.
Files and calendars
Attached files are processed in memory to extract their text, then discarded.
If you connect a calendar through a link or Google Calendar, Tainure reads the day's events without saving those events to your workspace. Your calendar link or connection tokens stay in your workspace database until you disconnect.
Meeting titles and attendee addresses you explicitly link to a person remain with that person after disconnection.
How long we keep your data
We keep your workspace for as long as you take part in the beta. When you leave or ask us to delete it, we delete its database and remove your posts from the ideas board. Copies may remain in backups for a limited period before they expire.
Some information has a separate retention period.
| Information | How long it is kept |
|---|---|
| Pasted text awaiting review | Kept until you save the extracted notes, or for thirty days if you never review it. Saved notes retain their source passages. |
| Text pasted into chat | Remains in the conversation. The retained conversation is deleted with your workspace. |
| Welcome and password reset emails | Deleted no later than thirty days after sending. |
| Beta invite requests | Kept for the duration of the beta to record who requested access. |
Your rights and data requests
Under the General Data Protection Regulation (GDPR), you have rights over your personal data. Depending on the processing and the conditions that apply, these include the following rights.
- Accessing your personal data and receiving a copy.
- Correcting inaccurate or incomplete information.
- Requesting deletion or restriction of processing.
- Objecting to certain uses of your data.
- Receiving eligible data in a portable format.
- Withdrawing consent where processing relies on it, without affecting the lawfulness of earlier processing.
- Making a complaint to your national data protection authority.
Downloading your workspace
You can download your workspace at any time using Download my data in the account menu.
The export is one readable file containing your people, notes, extractions and retained source passages, agenda items, checklists and conversations.
Making a request
To exercise your rights, correct information we hold about you outside your workspace, or request deletion, email beta@tainure.com.
We may ask for information needed to verify your identity and understand your request. We respond without undue delay and normally within one month. If a legally permitted extension is needed because of the complexity or number of requests, we explain the reason within that first month.
Deleting your workspace ends your access to it.
If someone has written about you
Your rights can apply to personal data about you in someone else's workspace, even if you do not have a Tainure account.
For workspace content, Tainure acts as a processor. The person or organisation responsible for that content handles the request, with our assistance. You can contact beta@tainure.com so we can help route it appropriately.
Exercising your rights does not give you access to another person's workspace. Responses must also protect the rights and freedoms of other people.
Responsibility and contact
You decide what goes into your workspace and why. You, or your employer if you use Tainure on its behalf, are the data controller for that content. Tainure processes it to provide the service, under the data processing annex to the beta terms.
For account information, beta invite requests and usage analytics, Tainure acts as the data controller.
For questions about your data, email beta@tainure.com.
Tainure is operated by Mathias Wendlinger, acting in his own name and based in the European Union.
Changes to this privacy policy
When we update this policy or the beta terms, we ask you to review and accept the new version the next time you open your workspace, before you can add another note.
Each version is dated, and we record which version you accept. The beta terms set out the other conditions for using Tainure.