Data Report Card · Granola
Granola Data Report Card
AI meeting notes
Data
Practices
Practices
1Access2Portability1Friction1Deletion2Sells1Trains AI
=
C
8/12
Agent
Readiness
Readiness
1Access
2Portability
0API access
=
C
3/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from Granola's published policy; none has been tested (run by us) yet.
1Accessstated
You can view your notes in-app and self-serve a CSV of historical notes, but a copy of all your personal data is request-only by email ("email us at privacy@granola.so with the subject line: 'GDPR Request'") — no self-serve rights portal.
Granola — Privacy Policy · accessed Jun 2026 ↗2Portabilitystated
Granola provides a self-serve in-app CSV export of your historical notes (structured, machine-readable); a full structured copy of your personal data is also available on email request.
Granola — Security & Privacy FAQs · accessed Jun 2026 ↗1Frictionstated
Account deletion and notes export are self-serve in-app, but full access/deletion rights run through email with no self-serve rights portal and no stated response timeline.
Granola — Privacy Policy · accessed Jun 2026 ↗1Deletionstated
Self-serve account deletion in-app (Settings → Profile → Delete Account) and audio is not retained after transcription, but notes and transcripts are "retained indefinitely unless you or your admin configures a retention policy" and no post-deletion purge timeline is stated.
Granola — Security & Privacy FAQs · accessed Jun 2026 ↗2Sells / sharesstated
"we do not currently sell your Personal Data"; data is shared only with service providers that help provide the Services.
Granola — Privacy Policy · accessed Jun 2026 ↗1Trains AIstated
Granola trains its own models on de-identified data by default with an opt-out (Settings → Preferences → Data & sharing); "we do not allow third parties such as OpenAI or Anthropic to use your Personal Data to train AI models."
Granola — Privacy Policy · accessed Jun 2026 ↗0API access — feeds Agent Readiness, not the /12stated
Granola offers no public API for a third-party agent to connect to your account data; access is through the desktop app plus an email data request, so an autonomous or remote agent has no sanctioned programmatic path.
Granola — no public consumer API · accessed Jul 2026 ↗Source-verified Jul 2026 from Granola’s own privacy policy and help center. All cells are "stated" (read from published policy/docs); no live export or deletion has been run to mark any cell "tested."
Events
Breaches, policy changes, and export-format changes we’ve recorded at Granola — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →
8 Sep 2026Granola published a new privacy policy, effective 8 September 2026. It adds a HIPAA program for enterprise accounts: those customers can sign a business associate agreement, and under it Granola will not use protected health information to train AI models without express consent. Enterprise training stays off by default, but enterprise users can now opt in.policy change
On the events page →
Grade history
Every change to this company’s grade since it was first published, and why. All grade changes →
No changes since this grade was first published in Jun 2026.
How to request your data from Granola
- Go to https://docs.granola.ai/help-center/policies/privacy-policy — Granola's data-request entry point.
- In-app: export notes as CSV · Settings → Profile → Delete Account; full DSAR via hey@granola.so.
- Expected wait: no firm published response window — Granola's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact Granola — privacy@granola.so: privacy@granola.so.
These steps reflect Granola's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.