Krisp

Krisp Privacy Policy: User-Focused Overview

*Policy last updated March 4, 2026. This summary is informational and not legal advice.*

1. Data Collection & Use

Krisp may collect:

• Account and contact data: name, email, company, job title, team-member details, and correspondence with support or sales.
• User-provided content: information in prompts, inputs, surveys, research participation, support recordings, and content generated by Krisp.
• Meeting content: if you use recording, transcription, or meeting-notes features, Krisp may store audio, video, screen recordings, transcripts, summaries, and notes.
• Device and usage data: IP address or device identifiers, browser, operating system, screen size, access times, log/crash data, cookies, searches, and interactions with the Site or service. Krisp says it can infer general location but does not store IP addresses.
• Third-party data: payment/fraud-prevention information, professional information obtained for marketing, and information from integrated services such as calendars, address books, authentication providers, or Google Workspace APIs.

Important audio distinctions

• Noise cancellation only: Krisp states that audiovisual data remains on the user’s device and is not accessible to or stored by Krisp.
• Transcription, recording, or summaries: meeting content may be uploaded to and stored on Krisp’s servers.
• Non-English speech: in “transcribe only” mode, Krisp may automatically record relevant audio to provide multilingual transcription. It says the audio is encrypted and deleted after the transcript is generated.
• Recorded meetings and notes: Krisp says it stores this content to provide services, does not monitor or sell it, and does not control how a business customer processes it. The customer—not necessarily Krisp—controls the processing purposes.

Uses include providing and administering the service, billing, support, analytics, security and fraud prevention, marketing, personalization, research, service improvement, legal compliance, and—subject to consent—improving proprietary AI models.

2. User Rights

EEA and U.K. users

Subject to legal exceptions, users may request:

• Access and a copy of their data
• Correction
• Deletion
• Restriction of processing
• Data portability
• Objection, including to direct marketing
• Information about profiling and automated decision-making

Requests should be sent to security@krisp.ai with “DSR” in the subject line. Krisp generally responds within one month, may verify identity, and may refuse excessive or legally restricted requests.

Authorized Users whose data is processed for an employer or other customer generally must direct requests to that customer. This may make deletion or access dependent on the employer’s policies.

Users may unsubscribe from marketing through email links or by contacting Krisp. Nevada residents are told that Krisp does not “sell” personal information as defined by Nevada law.

3. Third-Party Sharing

Krisp may disclose information to:

• Hosting, content-delivery, analytics, debugging, support, communications, and summarization providers
• Payment processors, which handle card details; Krisp says it does not store full payment credentials
• Marketing and social-media partners, including Google, Facebook, LinkedIn, and X
• Professional advisers such as lawyers, auditors, insurers, and consultants
• Integrated third-party services, according to their settings and privacy policies
• Employers or corporate customers, including potentially adding a business-email account to a company workspace
• A buyer, successor, investor, or acquiring entity in a merger, sale, financing, or bankruptcy
• Authorities where legally required or to protect safety, security, rights, or property

Data is primarily processed in the United States and may be transferred internationally. For qualifying European transfers, Krisp relies on Standard Contractual Clauses and the U.K. Addendum.

4. AI/ML Training

The policy is not a blanket “no training” promise:

• Krisp may improve its proprietary AI models and service accuracy with consent.
• It expressly says information obtained through third-party apps, including Google APIs, is not used to develop, improve, or train generalized AI/ML models.
• For meeting recordings and notes, it says the content is not monitored, sold, or used for any purpose beyond providing services to the customer.
• The policy does not clearly explain how consent is collected, withdrawn, or whether all user inputs—not just meeting content—may be used for model improvement. Users should review the Terms of Use and account settings.

5. Key User Obligations and Risks

• Obtain appropriate consent before recording or transcribing other people, especially where local recording laws require all-party consent.
• Do not submit information you lack authority to disclose, including confidential, sensitive, or health information.
• Corporate customers are responsible for notifying and obtaining necessary permissions from Authorized Users.
• Users under 16 should not use the service or submit personal data.
• Third-party integrations and remarketing services have separate terms and privacy policies.
• Recordings and notes may be retained until the user or customer requests deletion; legal holds, backups, and legitimate business needs may delay deletion.

6. Liability & Disputes

This document is a privacy policy, not a liability or dispute-resolution agreement. It contains no clear governing-law clause, arbitration requirement, forum-selection clause, damages cap, warranty disclaimer, or detailed breach-remedy process. Those provisions likely appear in Krisp’s separate Terms of Use or customer agreement. Security measures are described only generally as “reasonable,” despite encryption and access-control statements.

7. Changes

Krisp may change the policy at any time, generally without prior notice. If a change materially affects rights or data use, it says it will provide email or other direct notice before the change takes effect. Continued use after changes constitutes acceptance.

Krisp Terms of Use: Key User Implications

*This summary is based only on the Terms provided. The Terms incorporate a separate Privacy Policy, which may contain important additional details—especially about retention, legal bases, international transfers, cookies, and data-subject rights.*

1. Data Collection and Use

Krisp may collect:

• Account and registration information, such as information required to create or maintain an account.
• Device and usage information, collected automatically through cookies, web beacons, and similar technologies.
• Your Input, including information, audio, recordings, meeting content, and other materials you upload, transmit, or provide.
• AI-generated outputs, including transcripts, summaries, meeting recaps, and other derivatives of your input.
• Information processed by AI, machine-learning, and digital-signal-processing systems, including information about your use of the service.

Krisp may access, store, transmit, preserve, extract, modify, reproduce, share, display, copy, transcribe, create derivative works from, and otherwise process Your Content when necessary to provide the service, as instructed by you, under the Privacy Policy, or as required by law.

Krisp says it does not monitor or sell Your Content for any purpose, but this does not prevent broad processing needed to operate the service or disclosures required by law. It also disclaims responsibility for unauthorized access unless caused by its gross negligence or willful misconduct.

2. User Rights

The Terms state that, as between you and Krisp, you retain ownership of Your Content, including your input and resulting AI outputs. However, Krisp retains ownership of its software, models, technology, and other proprietary rights used to generate those outputs.

The Terms do not provide a detailed list of privacy rights, such as access, correction, deletion, portability, objection, or withdrawal of consent. Those rights—and how to exercise them—are delegated to the separate Privacy Policy.

You may:

• Disable meeting recap emails through account settings.
• Export content during the 90-day post-trial access period.
• Opt out of Krisp’s use of your company name and logo for marketing by emailing support.
• Opt out of arbitration and the class-action waiver within 30 days of first use by emailing legal@krisp.ai.

3. Third-Party Sharing

Krisp may share or transfer information with:

• Employees, affiliates, agents, contractors, and service providers who need it to perform obligations and are subject to confidentiality duties.
• Third-party platforms and integrations that you connect or authorize.
• Government authorities or others where legally required.
• An authorized third-party provider if you opt to receive AI-generated meeting summaries; Krisp may send that provider your meeting transcripts.

Third-party integrations and models have their own terms and privacy policies. Krisp disclaims responsibility for their security, privacy practices, accuracy, availability, and legal compliance. You are responsible for obtaining all permissions needed to connect them and may have to indemnify Krisp for resulting claims.

4. AI/ML Training

The Terms do not clearly say that Your Content is used to train Krisp’s AI models, nor do they expressly promise that it will never be used for training.

Krisp says it does not sell Your Content and may process it to provide the service. It also uses third-party models but says it does not control or influence how those models are trained. Users should review the Privacy Policy and any third-party terms for a definitive answer, particularly before submitting confidential or regulated information.

5. Key User Obligations

You are responsible for:

• Ensuring all input and content is accurate, lawful, and does not infringe privacy, intellectual-property, or other rights.
• Obtaining all required notices and consents before recording or transcribing meetings, including compliance with applicable recording laws.
• Ensuring Authorized Users comply; the customer is responsible for their conduct.
• Protecting account credentials and promptly reporting unauthorized access.
• Installing updates and maintaining backups outside Krisp.
• Not reverse-engineering, copying, circumventing security, scraping, distributing, or disrupting the service.
• Not using Krisp for safety-critical, medical, transportation, military, weapons, or other hazardous systems.
• Independently checking AI outputs; you assume responsibility for relying on them and must not treat them as authoritative.

Krisp may delete content that allegedly violates the Terms or law.

6. Liability and Disputes

The service is generally provided “as is” and “as available.” Krisp disclaims warranties concerning accuracy, security, uninterrupted operation, availability, compatibility, and error-free performance.

Except for indemnification obligations, each party’s liability for direct damages is generally capped at fees paid or payable in the preceding 12 months. Indirect, consequential, punitive, lost-profit, business-interruption, and data-loss damages are broadly excluded. Trial and beta-service liability may be limited to $50.

Disputes require a 60-day informal resolution process, followed generally by individual JAMS arbitration, with no judge or jury and no class actions. California law applies. Claims generally must begin within one year. Small-claims and certain intellectual-property matters may proceed in court. If arbitration does not apply, venue is generally Santa Clara County, California.

7. Changes and Commercial Terms

Krisp may change the Terms by posting revised terms online; changes are effective immediately. Continued use means acceptance. Krisp says it will make commercially reasonable efforts to email customers about material changes, but users are expected to check the Terms themselves.

Subscriptions automatically renew unless canceled in advance. Fees are generally nonrefundable, and Krisp may change pricing for the next subscription term with notice. After a trial, content is available for export for 90 days, after which it may be deleted.

Main practical risks: recording-consent obligations fall primarily on the user; AI outputs may be inaccurate; content may be processed through third parties; retention and data rights depend heavily on the missing Privacy Policy; and legal remedies are significantly limited by arbitration, the class-action waiver, short claim deadline, and liability cap.