Privacy Policy (Symbal)

Last Updated: January 2, 2026

Symbal, Inc. ("Symbal," "we," "us," or "our") created this Privacy Policy to explain how we collect, use, and share information when you use our website at https://symbal.co (the "Website"), our applications and software services (the "Platform"), and related services we provide (collectively, the "Services").

If you do not agree with this Privacy Policy, do not use the Services.

1. Who This Policy Applies To and Acceptance of Terms

This Privacy Policy applies to:

• Website Visitors: People who visit our Website and view publicly available content.
• Customers: Individuals or organizations that create an account or otherwise subscribe to access the Platform.
• Authorized Users: Employees, contractors, or other individuals authorized by a Customer to use the Platform.
• Other Interactions: People who communicate with us, request support, join a waitlist, attend demos, or otherwise interact with Symbal.

By accessing or using the Services, you agree to this Privacy Policy. Your use of the Platform may also be governed by separate terms, such as a Terms of Service, a subscription agreement, or a Business Associate Agreement (if applicable).

2. Information We Collect

We collect information in three ways: (a) information you provide, (b) information collected automatically, and (c) information from third parties.

2.1 Information You Provide

Contact and Inquiry Information

If you contact us, request a demo, join a waitlist, or otherwise communicate with Symbal, we may collect:

• Name, email address, phone number
• Company or practice name, role or title
• The content of your message and any attachments

Account Information

When you create or administer an account, we may collect:

• Email address, password (stored in hashed form)
• Account profile details (name, role)
• Organization or practice settings and administrators
• Authentication information (for example, single sign-on metadata if enabled)

Customer Content and Clinical Documentation

Depending on how the Platform is used, you or your organization may provide or generate content such as:

• Audio recordings (if you enable recording)
• Transcripts, summaries, and structured notes
• Templates, custom fields, and user inputs
• Messages or comments within the Platform
• Patient or client related details entered into the Platform by you (for example, appointment context)

This type of information is referred to in this Privacy Policy as "Customer Content." Customer Content may include sensitive information depending on your use case.

Payment Information

If you purchase a subscription, payment processing is typically handled by a third-party payment processor. Symbal generally does not store full payment card numbers. We may receive limited billing details such as billing contact information, subscription tier, payment status, and transaction identifiers.

2.2 Information Collected Automatically

When you access or use the Services, we may automatically collect:

• Device and Technical Data: device type, operating system, browser, app version, language settings, and IP address
• Usage Data: pages viewed, features used, time spent, clickstream events, and session activity
• Log and Diagnostic Data: crash logs, performance metrics, error reports, and security logs
• Approximate Location: inferred from IP address (generally city or region level)

We may use cookies and similar technologies for core functionality, security, analytics, and service improvement (see Section 4).

2.3 Information From Third Parties

We may receive information from:

• Your organization (for example, if your employer provisions your account)
• Identity providers if you use SSO
• Service providers (for example, analytics, hosting, or support tooling)
• Partners if we run co-marketing or event collaborations (where permitted)

3. How We Use Information

We use information for the following purposes:

3.1 Provide and Operate the Services

• Create and manage accounts
• Provide transcription, summarization, and documentation features
• Store and display Customer Content at your direction
• Provide customer support and respond to requests

3.2 Improve, Maintain, and Secure the Services

• Monitor performance, troubleshoot bugs, and improve reliability
• Detect fraud, abuse, and unauthorized access
• Enforce our terms and protect our rights and users
• Maintain audit logs and administrative controls

3.3 Communications

• Send service-related communications (for example, confirmations, security notices, and updates)
• Send marketing communications where permitted by law, with opt-out options

3.4 Research and Product Development

We may use aggregated and de-identified information to understand usage trends, improve features, and develop new capabilities.

Important note about AI and model training: By default, Symbal uses Customer Content to provide the Services to you (for example, to generate transcripts and notes). Whether Symbal uses Customer Content to improve our AI models depends on your product configuration and contractual terms. Where required, Symbal will provide controls or obtain appropriate permissions.

4. Cookies and Similar Technologies

We may use cookies, SDKs, pixels, local storage, and similar technologies to:

• Keep you logged in and maintain sessions
• Remember preferences
• Protect against abuse and improve security
• Understand how the Services are used
• Measure performance and fix issues

You can control cookies through your browser settings. If you disable cookies, some features may not function properly.

5. How We Share Information

We do not sell your personal information. We share information only as described below:

5.1 Service Providers

We share information with vendors that help us operate the Services, such as:

• Cloud hosting and infrastructure
• Analytics and monitoring
• Customer support tools
• Payment processors
• Security tooling

These vendors are required to protect information and use it only to provide services to Symbal.

5.2 At Your Direction

We may share information when you choose to:

• Invite others to your organization
• Export or share notes
• Integrate with third-party systems (for example, EHR, calendar, CRM, storage, or communication tools), if enabled

5.3 Legal, Safety, and Compliance

We may disclose information if we believe it is necessary to:

• Comply with applicable law, regulation, or legal process
• Respond to lawful requests by public authorities
• Protect the rights, safety, and security of Symbal, our users, or others
• Investigate and prevent fraud or abuse

5.4 Corporate Transactions

If Symbal is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to appropriate safeguards.

5.5 Aggregated or De-identified Information

We may share aggregated or de-identified information that cannot reasonably identify you for lawful business purposes (for example, reporting and benchmarking).

6. Data Security

We maintain administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, or alteration.

No security measure is perfect. You are responsible for maintaining the confidentiality of your credentials and restricting access to your devices.

7. Data Retention

We retain information for as long as necessary to:

• Provide the Services
• Comply with legal and contractual obligations
• Resolve disputes and enforce agreements
• Maintain security and audit requirements

Retention periods may vary based on your organization's settings and your subscription agreement. You may request deletion subject to applicable legal and regulatory obligations.

8. Your Choices and Rights

Depending on your location and applicable law, you may have rights to:

• Access and receive a copy of your information
• Correct inaccurate information
• Request deletion of information
• Object to or restrict certain processing

To exercise these rights, contact us using the details in Section 15. We may need to verify your identity and authority (especially for organization-managed accounts).

Marketing Opt-Out: You can opt out of marketing emails by using the unsubscribe link in those messages. You may still receive service-related communications.

9. External Links and Third-Party Services

The Services may include links to third-party websites or integrations. Symbal is not responsible for the privacy practices of third parties. Your use of third-party services is governed by their privacy policies.

10. Children's Privacy

The Services are not intended for children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided information to Symbal, contact us and we will take appropriate steps.

11. International Users

Symbal is operated from the United States. If you access the Services from outside the United States, you understand that information may be transferred to and processed in the United States and other jurisdictions where our service providers operate. These jurisdictions may have different data protection laws than your location.

12. Do Not Track

Some browsers offer "Do Not Track" signals. Because there is no uniform industry standard for interpreting these signals, Symbal does not currently respond to Do Not Track settings.

13. U.S. State Privacy Disclosures

Depending on your state of residence, you may have additional rights under laws such as the California Consumer Privacy Act (as amended by the CPRA) and similar state laws.

California (and other applicable states):

• You may have rights to know, access, delete, and correct certain personal information.
• You may have the right to opt out of "sale" or "sharing" of personal information as defined by applicable law. Symbal does not sell personal information in the conventional sense.
• You may have the right not to be discriminated against for exercising privacy rights.

To submit a request, contact us at the email below. We will verify requests consistent with applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last Updated" date. Your continued use of the Services after changes becomes effective indicates acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or want to submit a privacy request:

• Email: privacy@symbal.co
• Company: Symbal, Inc.
• Address: 2677 Centinela Ave UNIT 309, Santa Monica, CA 90405