Privacy Policy

Last updated: November 8, 2026

This policy explains what External Software LLC ("we", "us") collects when you use Recount, our store at externalsoftware.com/store and this website, why we collect it, who processes it for us, and the choices you have. External Software is a small software company in Greenville, South Carolina, United States.

The short version

  • We do not sell your personal information, and nothing from inside Recount is ever used for advertising: not your meetings, transcripts, notes or how you use the app.
  • This website and the store use advertising tools from Google and Meta to measure and improve our ads (see Advertising). Some US state laws call this "sharing" personal information. You can opt out on this page, and we honor Global Privacy Control (see Your privacy choices).
  • We do not use your data to train AI, and neither does the AI company that processes Recount's AI requests for us (see AI features).
  • Recount records, transcribes and stores your meetings on your computer. We never receive your recordings or any audio.
  • If you turn on sync, it is end-to-end encrypted: we store it but cannot read it.
  • When Recount runs into an error, it sends us a crash report that never includes your meetings, files or who you are. You can turn this off in Recount's Preferences.
  • We keep what we need to run your account and take payments, and we use Google Analytics and PostHog to understand visits to this website and the store.

Recount

What stays on your computer

Recount records, transcribes and tells the speakers apart on your computer. Recordings, transcripts, your notes, screenshots and your settings are stored on your computer. We never receive your recordings or any audio. To split a transcript into speakers, Recount analyzes the voices in each recording on your computer and discards that analysis once the meeting is processed. Recount does not save voiceprints of the people you record and does not recognize them in later meetings; you name the speakers yourself. Email you choose to download into Recount goes directly from your email provider to your computer and stays there; it never passes through us.

Recognize my voice (biometric information)

"Recognize my voice" is optional. If you agree to it, Recount makes a voiceprint of your own voice and uses it only to label you in the transcripts of meetings you record on that computer. The voiceprint is encrypted and kept only on that computer. It is never uploaded, never synced and never shared, so we never receive or possess it. Recount deletes it after 6 months, when you choose Delete my voice, or when a different account signs in on that computer. Our full biometric data policy, with the consent text, is the Recount voice data policy.

When you agree, or withdraw, we keep a consent record as proof: your account email, the name you type as your signature, the date and time, the full text of the consent, the text of the sentence you read aloud (the words, not the recording), the IP address you agreed from and the approximate location it indicates (country, region and city), the name of the computer, the Recount version and the technical details your computer sends with the request (its "user agent"). If you withdraw, we record when, and the IP address you withdrew from. The record contains no voice data. We keep it for 6 years after the consent ends (when you withdraw or it expires), then delete it. You can see your consent records on your account page. We do not sell, lease or trade consent records, and we disclose them only where the law requires it or to show that consent was given.

Crash reports

So we can fix problems, Recount sends a crash report when it crashes or runs into an error. Reports are on unless you turn off "Send crash reports to External Software" in Preferences. A report says what went wrong and where in Recount's code: the kind of error and Recount's own message about it, the list of Recount functions that were running, the Recount and Java versions, and which operating system you use. Before a report leaves your computer, Recount removes file and folder names, email addresses and anything Recount was working on (such as meeting titles or names), and leaves out your account, your computer's name and your IP address. Reports never include recordings, transcripts, notes, screenshots or email. If Java itself crashed, Recount sends the next time it starts the part of Java's crash log that shows where the crash happened, then deletes that log. The Windows installer sends a short report too if installing or updating Recount fails: which step failed, the Recount and Windows versions, and whether you chose Express or Advanced, nothing else. Its Advanced setup lets you turn crash reports off, and updates follow your choice in Recount's Preferences. Reports go to Sentry, a service that collects error reports. Like any web service, Sentry sees the internet address a report comes from. Sentry deletes reports after at most 90 days.

Sync across my computers

Sync is optional and part of the subscription. It is end-to-end encrypted: Recount encrypts everything on your computer with a key that only your own computers have. When you turn sync on, Recount shows you a recovery key; a new computer joins either by being approved from one that already syncs or with the recovery key. We store the encrypted data and a copy of the key that only your recovery key can unlock, so we cannot read what you sync, and neither can anyone who got hold of our servers. Sync carries meeting transcripts (who said what and when), your notes, screenshots, final AI meeting notes and settings (preferences, note styles, themes and Names & terms) and your task board (tasks, projects and columns). It never carries recordings or other audio, voice data or email. What we can see is how much you store and when your computers sync. Because we cannot decrypt it, if you lose every computer and the recovery key, the synced copy cannot be recovered.

AI features

Recount's AI features (live notes, meeting titles, proofreading, screenshot descriptions and final meeting notes) are part of the subscription. When you use them, Recount sends the text the feature needs (transcript text, never audio, and for some features your notes or screenshots) through our AI relay to Anthropic, whose Claude models write the results. The relay checks that your account has access, passes the request on and records only usage per account per month: the number of requests, token counts and cost. It does not store what you sent or what came back.

Anthropic processes these requests as our service provider under its commercial terms, which do not allow it to train its models on them. Anthropic keeps requests for a short time to detect misuse and then deletes them, as described in its privacy center. We never use your meetings to train AI, and we do not let anyone else do so.

Connecting your own Claude app

You can connect Claude Desktop or Claude Code to Recount so Claude can read your meetings and email on your computer. That connection runs on your computer and uses your own Claude account, not ours. What Claude reads that way is covered by your own agreement with Anthropic and your Claude privacy settings, including whether your chats may be used to improve Claude's models. Check those settings if that matters to you.

Health information and other regulated data

We do not sign Business Associate Agreements, so do not use sync or AI features for health information protected by HIPAA, or for other data you are legally barred from sharing with a service provider. Recording and transcribing on your computer sends nothing to us.

Recording other people

You decide whom you record. Many places require everyone's consent before a conversation is recorded; see recording consent laws by state. Telling the people you record, and getting their consent where the law requires it, is your responsibility.

Your account and payments

To run your External Software account, we keep:

  • Your email address, and when you created the account.
  • Sign-in codes we email you (stored only in scrambled form and valid for a short time) and a sign-in cookie for the store pages.
  • The computers you sign in on: the computer's name, an identifier Recount makes for it, when it was last seen, and when it was used: which days (kept 13 months) and, to the nearest 5 minutes, when it contacted us (kept 90 days). Recount contacts us when it starts, every few minutes while it is open (every few hours if you turn off "Send usage counts" in Recount's Preferences), and when it uses AI, syncs or starts a Pro meeting. We also note which computer started a free preview (accounts from before Recount 1.2.0), and which of your meetings used your free Pro meetings (a random code for each meeting, nothing about what's in it), so each person gets them once. We count how many people use Recount from these records.
  • How much each signed-in computer uses Recount: for each day, how many meetings it recorded and imported and how long they were in total. Recount sends these counts when it checks in. They never include what was said, meeting titles, names, file names or anything else about a meeting. You can turn this off with "Send usage counts to External Software" in Recount's Preferences.
  • Your subscription: plan, status and renewal dates.
  • AI usage counts per month (requests, token counts and cost), as described above.

We also count how many times each installer is downloaded (which version, for which operating system, and when). When you download an installer from this website, we also keep, for 30 days, the internet (IP) address it was downloaded from and the identifiers our statistics and advertising tools (PostHog, Google Analytics and Meta) gave your browser. If Recount then signs in for the first time from the same address within two weeks, we tell those tools that the visit led to a new Recount user, so we can see which pages and ads bring people who actually use Recount. That message includes your account number, and for PostHog and Meta your email address (hashed for Meta).

To see which ways of finding Recount lead to people who keep using it, we also tell PostHog, our statistics service, about your account (by account number and email address): when your subscription starts, renews, is set to cancel or ends; each day you use Recount; and when you record or import your first meeting (just the count, nothing about the meeting). When you pay, we also tell Google Analytics the amount, by your account number, if your browser has used this website with Google Analytics on.

Payments are handled by Stripe. Your card details go straight to Stripe and never reach us; we keep only the Stripe customer and subscription references needed to match payments to your account. Stripe's use of your information is covered by the Stripe privacy policy.

We use this information to provide Recount and your subscription, send you sign-in codes and receipts, answer your questions, prevent fraud and abuse, and meet our legal and tax obligations. We email you about your account; we do not send you marketing email unless you ask for it.

This website

Like most websites, ours receives the technical details your browser sends (IP address, browser type and the page you asked for). Cloudflare, which hosts the site, uses these to deliver pages and block attacks.

To understand how people find and use the site, we use:

  • Google Analytics, which uses cookies to count visits and show which pages are read, where visitors come from and roughly where they are. We also use it to measure our Google ads, and we have turned on Google signals, which lets Google connect visits to the Google accounts of people who allow ad personalization, for reports on demographics and visits across devices. If you are signed in to the store, we give Google Analytics your account number (never your email address) so your visits on different devices count as one person, and we give Google your email address in scrambled (hashed) form so it can match purchases to the Google ads that led to them. You can block Google Analytics with the Google Analytics opt-out add-on or your browser's cookie settings, and control ad personalization in your Google account. See how Google uses information from sites that use its services.
  • PostHog, which uses a cookie to see which pages are visited, where visitors come from and what they click on our pages (such as a download link or the buy button). It also records some visits as session replays (how the page was scrolled, clicked and moved through) so we can see where pages are confusing; what you type into forms is hidden from the recordings. If you are signed in to the store, PostHog also records your email address and account number with your visits, so we can see how customers found us. We use it only for statistics and to improve the site.
  • Our contact form. What you send (your name, email address, topic and message) is stored by our store on Cloudflare and emailed to our support team so we can reply. We also note your internet (IP) address with it, only to stop one address sending too many messages.

The store pages use the same tools as the rest of the site. The Recount app uses none of them. The cookies policy lists the cookies the site uses. The site does not respond to browsers' "Do Not Track" signals, but it does honor Global Privacy Control (see Your privacy choices).

Advertising

We advertise Recount on Google and on Meta (Facebook and Instagram). To learn which ads bring people who go on to use Recount, and so those companies can show our ads to people likely to find Recount useful, this website and the store use the Meta Pixel and Google's advertising features. They tell Meta and Google:

  • the pages you visit here and what you do on them: clicking through to the store, downloading an installer, starting checkout, completing a purchase (with the price) and sending the contact form;
  • the technical details your browser sends (IP address, browser type) and identifiers from their own cookies;
  • if you are signed in to the store, your email address and account number in scrambled (SHA-256 hashed) form, so they can match your visit to an account you have with them. Both hash them in your browser before sending.

Our store also tells Meta directly about two things a browser may not report: when you buy a subscription (the product and price) and when you first sign in to Recount on a computer (which product, and the IP address and app version your computer sent). Both include your email address and account number, hashed as above. We never send Meta or Google anything from inside Recount: no meetings, transcripts, notes, recordings or app usage.

Meta and Google use this information under their own privacy policies (Meta, Google), including to measure ads and choose which ads to show you on their services. You can change your ad settings in your Meta account and your Google account, or opt out here.

Your privacy choices

We do not sell personal information. The advertising tools described above count as "sharing" personal information for targeted ("cross-context behavioral") advertising under the California Consumer Privacy Act and similar state laws. You can opt out of that sharing:

  • In this browser: use the button below. The Meta Pixel stops loading, and Google Analytics stops sending information for ad personalization and stops receiving your hashed email. Statistics keep working.

    You are not opted out in this browser.

  • Automatically: if your browser or an extension sends a Global Privacy Control signal, we treat it as an opt-out, with no need to press the button.
  • For your account (what our store sends Meta when you buy or sign in to Recount): email privacy@externalsoftware.com from your account's email address.

Opting out in the browser lasts until you clear this site's data. We do not knowingly sell or share the personal information of anyone under 16.

Companies that process data for us

We use these companies to run our services. Each may use your information only to provide its service to us.

  • Cloudflare: hosts this website and the store, stores account data, encrypted sync data, consent records and contact form messages, and sends our emails.
  • Stripe: takes payments and manages subscriptions.
  • Anthropic: runs the AI behind Recount's AI features.
  • Sentry: collects crash reports from Recount and error reports from the store.
  • Google: website statistics and ad measurement (Google Analytics) and the store's fonts (Google Fonts).
  • PostHog: website statistics.
  • Gravatar (Automattic): the profile picture shown in the store and in Recount while you're signed in. Your browser (or Recount) asks Gravatar for the picture using a scrambled (SHA-256 hashed) form of your email, never the email itself; Recount keeps a copy on your computer and checks for a new one about once a day. If you have no Gravatar, you see your first letter instead.

Meta and Google also receive the advertising information described in Advertising and use it for their own purposes as well, under their own privacy policies.

We may also disclose information when the law requires it (for example, a valid court order), to protect the rights and safety of our users or others, or to a buyer if External Software is sold or merged, in which case this policy keeps applying to the information you gave us.

How long we keep it

  • Account information: while you have an account, then deleted when you ask us to close it.
  • Sign-in codes: until they expire or are used.
  • Synced data: until you delete it in Recount (a meeting you delete is deleted from the synced copy too), start sync over, or close your account. We may also delete it 90 days after your subscription ends.
  • Voice consent records: 6 years after the consent ends.
  • Records of your acceptance of our Terms of Service (the text, the name you signed with, when, and the IP address and approximate location it came from): while you have an account and for 6 years after.
  • Payment and subscription records: as long as tax and accounting laws require (usually 7 years).
  • Which days each signed-in computer was used: 13 months. When it contacted us (to the nearest 5 minutes): 90 days.
  • Daily counts of meetings recorded and imported: while you have an account.
  • Crash reports: no more than 90 days.
  • Website statistics: 14 months in Google Analytics, 1 year in PostHog.
  • Messages you send us: as long as needed to help you, then deleted.

Security

Recount encrypts passwords and keys on your computer using your computer's own protected storage (Windows data protection, the macOS Keychain or the Linux keyring), and the voiceprint is only ever kept that way. Sync is end-to-end encrypted. Connections to us are encrypted, and we store sign-in codes and device tokens only in scrambled (hashed) form. No method is perfect, but we collect as little as we can so there is less to protect.

Your choices and rights

Wherever you live, you can ask us to:

  • tell you what personal information we have about you and give you a copy;
  • correct it;
  • delete it, including closing your account;
  • stop sending you non-essential email.

Email privacy@externalsoftware.com from the email address on your account, so we can confirm the request is yours. Someone you authorize can also ask for you. We answer within 45 days, free of charge, and we will never treat you differently for using these rights. Some things you can do yourself at any time: delete your voice in Recount, start sync over, and see your consent records on your account page. Everything on your computer is yours to delete.

California residents: in the past 12 months we collected identifiers (such as your email address, IP address and computer identifiers), commercial information (your subscription and purchases) and internet activity (how you use this website), from you and your devices, for the purposes described in this policy. We disclosed them to the companies listed above, and shared identifiers, commercial information and internet activity with Meta and Google for advertising, which you can opt out of (see Your privacy choices). We did not sell any of it. We do not collect or use sensitive personal information to infer things about you. Recount's voiceprint stays on your computer and is never collected by us.

Visitors from the European Economic Area and the United Kingdom: we process your information to provide the services you ask for (contract), with your consent (Recognize my voice and, where the law requires it, website statistics and advertising cookies), and for our legitimate interests in understanding and securing our website. Our services run in the United States. You may also complain to your local data protection authority.

Children

Our services are for adults; our terms require you to be 18 or older. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top. For important changes, we will tell account holders by email or in Recount before they take effect.

Contact us