Callbox
Legal

Privacy policy

Last updated: October 25, 2026

Callbox records the audio of the Google Meet calls you choose to record and saves it to your own Google Drive. This page says what Callbox stores, where, and how you delete it.

Where your recordings are

The audio of every recording is a file in the Callbox/ folder of your Google Drive. While a call is recorded, the Chrome extension keeps the audio on your computer until the Callbox server has received it. The server keeps the audio on its disk only until it is in your Drive. One exception: a recording the server finished without the extension (the extension stopped sending audio for two hours) keeps its audio on the server for up to 7 days after the upload, so the extension can still add the rest. If you transcribe a recording, its audio is sent to the speech-to-text service chosen in Settings (this Callbox site's, or your own), and the transcript is stored in Callbox and saved as a Google Doc next to the audio.

What Callbox stores

  • Your account: your email address and name, as Google gives them when you sign in.
  • Your Google connection: the Google account it belongs to, the permissions you granted, the IDs of the Callbox folders in your Drive, and a refresh token that lets Callbox write to your Drive. The token is encrypted.
  • Your projects and their rules (the email addresses and domains you add).
  • For each recording: the Meet code, the title, when it started and ended, its length, its status, the project, the ID of its Drive file, and the transcript if you made one. With automatic routing on, also the calendar event's ID and the email addresses of the other attendees.
  • Notes on your recordings (summaries, action items, notes), written by you or by the agents you connect.
  • Deleted recordings stay in the Callbox trash for 30 days, with their transcripts and notes, before Callbox deletes them for good. Meanwhile their Drive files are in your Drive trash.
  • Linked browsers: a label such as "Chrome on Linux" and when the extension was last used. The extension's token is stored only as a hash.
  • Connected agents: the agent's name, its client ID or URL, the permissions you granted, and when it was last used. Its access and refresh tokens are stored only as hashes.
  • API keys: the name you gave each key, its permissions and when it was last used. The key itself is stored only as a hash.
  • The activity log: what happened in your account and who did it (you, your extension, an agent or an API key), kept for 90 days.
  • Webhooks: the URL, the event types, and the Authorization value and signing secret, both encrypted.
  • Your sign-in sessions, and technical logs of requests (no tokens and no audio in them).

Agents you connect

An agent you connect, such as Grok Bot, can read your recordings and transcripts and do what the permissions you ticked allow. What an agent reads goes to that agent's provider, under the provider's own terms. You can disconnect an agent, or revoke an API key, at any time in Settings. Agents can never delete your account, change your Google connection or your speech-to-text service, or delete recordings for good.

What Callbox does with your Google account

  • Google Drive (drive.file): Callbox creates its folders, the recordings and the transcript Docs, and it can see only the files it created. It cannot read your other Drive files.
  • Google Calendar (calendar.events.readonly, only if you turn on automatic routing in Settings): when a recording starts, Callbox reads your events of the 12 hours before and after to find the one of that Meet call, and uses its title and attendee emails to pick the project.
  • Callbox uses this data only to provide these features to you. It does not sell it and does not use it for advertising. Callbox's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How to delete your data

  • A recording: delete it on its page. It goes to the Callbox trash, and its Drive file (and its transcript Doc) to your Drive trash; after 30 days Callbox deletes it for good. To delete it at once, use Delete forever in the Trash.
  • Your Google connection: Disconnect Google in Settings revokes Callbox's access at Google. You can also remove Callbox at myaccount.google.com/permissions.
  • A linked browser: unlink it in Settings. Its token stops working at once.
  • A connected agent, an API key or a webhook: disconnect, revoke or delete it in Settings. It stops working at once.
  • Everything: Delete account in Settings deletes your account and everything Callbox stores about you (projects, rules, recordings, transcripts, notes, the activity log, linked browsers, connected agents, API keys, webhooks, the Google connection, and audio still waiting on the server) and revokes Callbox's access to your Google account. The files in your Drive stay with you: delete them in Drive if you want them gone.

Recording other people

Callbox does not tell the other participants that a call is recorded. Getting their consent, as the law where you and they are requires, is your responsibility.