Granola — privacy & data policy

Provider: Granola. PromptPrivacy score: 80/100. Last verified October 18, 2026.

What happens to your data?

Granola processes meeting audio, calendar details, and notes to generate transcripts, summaries, and action items. Audio recordings are deleted as soon as transcription is complete, and stored data is encrypted on AWS servers in the United States. Granola does not sell your information and prohibits third-party AI providers from training models on your personal data.

Does it train on your data?

Granola explicitly prohibits third-party AI model providers (such as OpenAI or Anthropic) from using customer personal data to train their models. Granola only uses de-identified and aggregated data (such as user inputs, outputs, and explicit feedback) for its own AI model training if the user has opted in. Enterprise accounts have AI model training disabled by default.

Can you opt out?

Yes. Individual users can opt out of AI model training directly in their Granola account settings, and Enterprise accounts have model training turned off by default. Users can also opt out of marketing communications and request complete data deletion.

Data retention

Personal data and meeting summaries are retained for as long as an account is active or needed to deliver services and meet legal obligations. Raw audio recordings of communications are retained only long enough to generate the initial transcript and are deleted immediately afterward. Access tokens for third-party integrations are removed upon disconnection. De-identified and aggregated data that has been incorporated into trained AI models or datasets may be retained indefinitely.

Encryption & security

Granola encrypts all personal data both at rest and in transit using Amazon Web Services (AWS) database encryption systems. The platform also employs virtual private cloud (VPC) configurations, firewalls, and anti-virus/malware controls to safeguard user information.

Is it safe for work?

Yes. Granola is well-suited for business use because it prohibits third-party AI model training, deletes raw audio immediately after transcription, encrypts data at rest and in transit, and offers Enterprise workspace controls, Data Protection Agreements (DPAs), and HIPAA Business Associate Agreements (BAAs).

Source policy: https://www.granola.ai/privacy