Last updated: September 30, 2026
Effective: September 30, 2026
SD Consulting LLC, operating as Asqend (“Asqend,” “we”), handles information through asqend.com, app.asqend.com, and agreed services, including look-back analyses, ongoing services and implementation. This policy explains those practices. Visiting the website does not authorize access to business data.
We manage contact, account, billing and website information for our own business purposes. We process customer-provided business information on the customer's instructions to deliver and support its service. The customer must have authority to provide that information, including necessary notices, recording permissions and authority to connect the selected sources. It may include information about people who do not have an Asqend account.
The Service Terms accepted during onboarding cover app use and the look-back. A separate agreement may add engagement-specific scope, commercial terms and data-processing instructions. Applicable data-processing agreements and earlier commitments continue to apply.
We also use information for billing, legal obligations and resolving disputes. Marketing communications require your consent; email us to opt out. We do not use customer content for unrelated purposes.
Workspace visibility. Your organization's administrators manage membership and sign-in access. Transcripts are restricted to authorized internal attendees and workspace administrators. Summaries and derived records follow their own workspace permissions and may be visible more broadly than the source transcript; transcript restrictions do not make every derived finding private to attendees. Organization-wide Fires are available to administrators. People identified in meetings may appear as contacts or non-signing-in workspace members; an administrator must enable a member's sign-in access. Connected external tools can access only the interfaces and permissions made available to them.
Look-back and service delivery. When an authorized customer representative has accepted the Service Terms and the relevant sources have been authorized through the grant shown before each import, Asqend may review the relevant source material and findings to deliver that customer's look-back and agreed service. This review may be performed by Spencer Dusebout and other authorized personnel subject to written confidentiality obligations. We limit access to the task and obtain any additional permission required for the source or information concerned.
Support access (“Act as”). Asqend support may enter a customer's workspace as a member to help with setup, troubleshoot or support the service. Support has that member's permissions, which may include access to transcripts and the ability to make changes. Sessions for those purposes do not need a separate request each time, except where additional consent is required.
Support sessions require a reason and a fresh sign-in check, expire within 60 minutes, and are recorded for administrators in Settings → Activity. Changes and Ask questions made during a session are attributed to Asqend support. Page views and individual items read are not itemized in the activity record. Support cannot use an acting session to connect or disconnect sources, create API keys, or submit feedback as the customer. We may also access information as necessary to meet legal obligations or address a security incident, subject to applicable restrictions.
AI processing. We use third-party AI services and AI-assisted workflows to analyze authorized information, answer questions, prepare findings and provide support. AI providers are identified in this policy or engagement-specific documentation before processing, as part of the customer's written or electronically accepted service arrangements. Additional AI tools or separate processing workflows outside what the customer authorized require further written authorization, which may be recorded electronically. We require appropriate provider terms and settings prohibiting model training on customer content. Provider retention is separate from model training and is addressed through the applicable arrangements.
Purpose limits. We use customer content only to deliver, maintain, secure and support that customer's service, including customer-specific diagnosis and correction. We do not use it for model training, general product development, cross-customer prompt tuning or shared evaluation datasets, or create anonymized customer-content datasets for those purposes. General development uses synthetic data, data we independently have the right to use, and technical usage information that does not contain or reveal customer content. Information needed for legal, billing and dispute obligations is handled as described in this policy.
We share information with customer-authorized recipients and providers supporting hosting, storage, authentication, AI processing, security, communications, scheduling, billing and agreed implementation. Appropriate written arrangements are required before a provider receives customer content. Personnel accessing that content must be subject to written confidentiality obligations and use it only for their authorized task.
| Provider | Service supported |
|---|---|
| Vercel | Website and application hosting |
| Render | Background processing and application services |
| Supabase | Database hosting |
| Hetzner | Hosting for AI processing infrastructure |
| OpenAI | AI analysis and, where enabled, transcription |
| Anthropic | AI-assisted service delivery or support, where used for the authorized engagement |
| Sign-in, optional Calendar connection, scheduling and website resources | |
| Resend | Service email delivery, where enabled |
| Cloudflare | Domain and network services |
We identify any additional provider receiving customer content before using it and follow applicable notice, consent and contractual requirements. Services customers connect, such as Zoom, Grain and Granola, also have their own terms for information held in those services. An external AI tool connected by the customer may receive information within its granted permissions; that tool's handling is also subject to its own terms.
We may disclose information where required by law or necessary for safety, or as part of a business transfer subject to applicable protections and consent requirements. We notify you of a business transfer and resulting policy changes, and obtain prior consent where required. We do not sell personal information, provide it to data brokers, or share customer content for another party's marketing.
We use safeguards appropriate to the information and service. No system is completely secure. We investigate incidents and provide required notifications without unreasonable delay and within applicable legal and contractual deadlines. Report concerns to spencer@asqend.com.
We retain useful workspace history while the workspace is active to deliver and support the customer's service. We retain other information only as needed for the relevant service, administration, security or legitimate legal, billing and dispute purposes. We do not retain customer content for general product development. A separate agreement may specify a shorter period or additional engagement-specific instructions.
Inactive workspaces. A workspace becomes inactive when the customer closes it or ends the engagement, or when no one has signed in and no connected source has imported anything for 90 days. We keep an inactive workspace's content for up to 90 days so it can be reopened or exported, and then delete it. You can ask us to delete it sooner.
Email spencer@asqend.com to request deletion of an account, workspace or particular information, or to arrange offboarding. We may verify identity and authority, especially for shared organization records, and handle requests within applicable legal and contractual deadlines. After account or workspace deletion, personal identifying information is deleted within 30 days unless a longer period is required by law, security, billing or contractual obligations. A shorter agreed or legally required period takes priority.
Deletion must cover relevant working copies and derived content as well as primary records. Provider caches and backups follow their applicable retention arrangements; retained copies remain protected and are not used for ordinary processing. Required audit or legal records may be retained with unnecessary content removed. Requests about information controlled by a customer may be routed to that customer.
Disconnecting a source stops future imports from that connection but does not itself delete information already imported. Request deletion separately if needed. We provide customer-controlled data exports on reasonable request, subject to technical limitations, security, law and contractual terms. These commitments apply to app users and look-back customers, including when no separate commercial agreement has been signed.
The app uses cookies or browser storage for authentication, security and preferences. It does not use analytics or advertising cookies. External website resources and booking services have their own privacy notices; we obtain consent for optional tracking where required.
Google sign-in identifies your account. If you connect Google Calendar, we use its information for the disclosed meeting and calendar features. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Where those requirements call for specific affirmative permission before a person reads covered information, general agreement to these Terms does not replace that permission.
We operate from the United States and initially offer the service to US business customers. Authorized providers may process information in other countries; US customer eligibility does not mean all processing occurs in the US. We agree relevant locations and required transfer arrangements before cross-border engagements. Tell us before supplying sensitive or regulated information or substantial information about people outside the US so that we can assess the required arrangements. Our business services are for adults; we do not knowingly collect information from children under 18 and take appropriate deletion steps if notified.
Depending on applicable law and our role, you may request access, correction, deletion, portability, restriction or objection; withdraw consent; or opt out of sale, advertising-related sharing, targeted advertising or certain profiling. We do not discriminate for exercising applicable rights.
Email spencer@asqend.com with enough information to identify your request. We may verify identity or representative authority and respond within 30 days, or sooner where required. You may appeal a denial by replying or emailing us; regulator and complaint rights remain available.
SD Consulting LLC / Asqend
Longmont, Colorado 80504
spencer@asqend.com
For material changes, we post the revised policy and provide at least 30 days' advance notice by email to registered users and active customers, and in the app for its users. We obtain additional consent where required before the changed use begins. Information already collected remains subject to applicable earlier commitments until their notice and consent requirements are satisfied. A new policy or new acceptance does not retroactively authorize processing that was not permitted when it occurred.
Earlier versions remain available in the policy history. Service and data-processing agreements continue to apply; a commercial pricing document does not by itself expand permitted data uses.