Legal

Privacy Policy

Effective date: July 24, 2026
Last updated: October 13, 2026

1. Introduction

Light Reach LLC (“Light Reach,” “we,” “us,” or “our”) operates Actionairy (the “Service”), available at actionairy.lightreach.io and related mobile applications. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use Actionairy.

By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

2. Information we collect

2.1 Account information

  • Name and email address
  • Password (stored as a cryptographic hash when you sign up with email)
  • Profile information from Google or Apple Sign-In when you choose those options
  • Company website, product focus, and onboarding preferences you provide

2.2 Google Calendar data

If you connect Google Calendar, we request read-only access (https://www.googleapis.com/auth/calendar.readonly). We use this access to:

  • List upcoming calendar events that may include video meeting links
  • Schedule meeting capture or assistant participation when you enable that feature
  • Display upcoming meetings inside the Service

We do not modify, create, or delete calendar events. We store OAuth tokens needed to maintain the connection and the calendar metadata required to provide the feature. You can disconnect Google Calendar at any time from account settings; disconnecting stops future calendar reads.

Google's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2.3 Conversations and meeting content

  • Audio recordings and transcripts from meetings or voice notes you intentionally capture
  • Meeting summaries, tasks, signals, and notes derived from those conversations
  • Metadata such as meeting title, time, participants when available, and capture mode

Optional saved voices and participant labels

Voice recognition is off by default. A workspace manager may enable it and save a voice after obtaining that speaker’s explicit written permission. Before comparing a recording, they must obtain permission from every speaker for voice recognition, in addition to recording permission. Permission must cover Light Reach’s processing for the workspace, the purpose, retention and withdrawal options described here. Speakers may decline and still use manual labels.

We create an encrypted numerical voice template to suggest who is speaking in recordings explicitly submitted for comparison within that workspace. Matching can be wrong and always needs human review. We do not use these templates for advertising, access control, voice cloning, model training, or recognition across workspaces, and do not sell or disclose them to third parties except when legally required.

Temporary audio is encrypted while queued and deleted when processing ends, on cancellation, or within one hour. Templates expire 180 days after the latest explicitly permitted sample. Remove a voice or disable recognition in Settings to end its use and delete it from active storage. We delete it sooner when its purpose ends or permission is withdrawn. Confirmed names and source transcripts have separate meeting and account deletion controls. Encrypted backups follow the backup retention schedule and are not used for recognition.

The workspace controls whose recordings are submitted and must provide notice and obtain valid permission. Light Reach remains responsible for safeguarding and processing the data as described here. Speakers can request access, correction, withdrawal or deletion from the workspace or by emailing ops@lightreach.io.

2.4 Company memory and integrations

  • Content you save to company memory, including manual notes and imported research
  • Source references, processing controls, retention settings, and change history attached to durable memory
  • Derived claim candidates and embeddings used to consolidate and retrieve authorized memory
  • LinkedIn network exports you choose to upload (connections, messages, invitations)
  • Product analytics or other integrations you explicitly connect
  • Sources you explicitly save and bounded topic terms used as private relevance feedback

Our semantic search index stores numerical embeddings and policy metadata. Source text remains in the governed memory store and is rechecked before it can be returned for use.

2.5 Support conversations

When you message the founder from Actionairy, we store your message and thread history with your account. We email that message to jon@lightreach.io through our email delivery provider so the founder can reply. The founder's email reply is then stored in the same private in-app thread.

2.6 Technical and signup context

  • IP address, browser or app type, and general location inferred from IP at signup
  • Device and session data needed to secure your account and operate the Service

Public discovery measurement

Public discovery measurement uses PostHog and optional Google Analytics for public page visits and approved actions. Google Analytics receives canonical public URLs and coarse referral sources. Google Analytics loads only after your explicit choice, with a one-day analytics cookie. Advertising signals and automatic interaction collection remain disabled. You can turn optional analytics off using the control at the bottom of public pages. Discovery events exclude private transcripts, product evidence, account identifiers and URL query data.

3. How we use information

  • Provide, maintain, and improve Actionairy
  • Transcribe conversations and generate summaries, signals, and recommended work
  • Connect calendar events to meeting capture when you opt in
  • Build and search company memory you authorize
  • Use sources you explicitly save as a limited preference signal for ranking similar research; a save does not validate a market claim or business outcome
  • Deliver and respond to support conversations you initiate
  • Consolidate exact or explicitly grouped claims while preserving source links and disputes
  • Send account, security, and product-related communications
  • Monitor reliability, prevent abuse, and comply with law

We use service providers (including cloud hosting, speech-to-text, embedding, and AI model providers) to process data only as needed to deliver the Service. Record-level processing controls may exclude content from external AI processing or require redaction before processing.

4. How we share information

We do not sell your personal information. We may share information:

  • With subprocessors that help us operate the Service under contractual confidentiality obligations
  • With our founder and email delivery provider when you initiate a founder-support conversation
  • When required by law or to protect rights, safety, and security
  • In connection with a merger, acquisition, or asset sale, with notice where required

5. Data retention

Durable memory uses the retention setting attached to each record. Temporary provider media and import files may use shorter operational retention. You may delete individual memory, delete a meeting and source-dependent memory, export memory, or delete your account from the Service.

Account deletion is processed through a durable retry queue so a temporary provider outage does not silently abandon the request. A content-minimized, capability-protected deletion receipt may be retained for up to 30 days after completion. Some records may be retained longer when required for legal, security, fraud-prevention, or backup purposes.

6. Security

We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit, access controls, and hashed credentials. No method of transmission or storage is completely secure.

7. Your choices

  • Access your account identity in the app
  • Disconnect Google Calendar or other integrations from settings
  • Decline optional permissions; some features may not work without them
  • Inspect, export, change retention, restrict external processing, or delete records in Memory
  • Remove saved sources and their preference metadata through Memory
  • Delete your account and follow the deletion receipt from settings, or use our public account-deletion instructions without signing in

8. International users

We may process information in the United States and other countries where we or our service providers operate. By using the Service, you consent to that processing.

9. Children

Actionairy is not directed to children under 16, and we do not knowingly collect personal information from children.

10. Changes

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date above.

11. Contact

Questions or requests about this Privacy Policy or your data:

Light Reach LLC
Email: ops@lightreach.io
Website: lightreach.io