Satori Insights Privacy Statement

Privacy & Control in Satori Insights

Satori Insights helps you capture key insights from your coaching sessions by recording and transcribing conversations, then generating structured insights to support your work.

This page outlines how privacy, consent, and data handling are approached within Satori Insights. For full technical and legal details about how Satori handles data, please refer to our main Privacy Policy.

Control

You have full control over how Insights is used in your sessions.

Insights is currently enabled on a per-session basis. When active, a notetaker joins the call and is visible to all participants, providing clear, upfront awareness that the session is being recorded.

As the coach, you decide how to introduce this to your clients. We recommend a simple, transparent explanation at the start of the session so they understand what’s being captured and why. For example:

“I use a tool that captures key insights from our session so I can stay fully present with you. It records and transcribes the conversation, and I’m in control of it—we can turn it off at any time if you’d prefer.”

You can disable the notetaker at any time during a session, and you remain in control of what gets recorded and retained—including deleting transcripts and insights whenever you choose.

Consent

You are responsible for how Insights is introduced and used with your clients, and we’ve made it simple to do this in a transparent and respectful way.

We recommend adding a note to your Session Instructions to let clients know their session may be recorded.

We’ll be introducing more explicit touchpoints for capturing client consent in future updates.

Data Ownership & Usage

You own your data. Satori does not claim ownership of your session content.

Transcripts are processed solely to generate session insights that support your coaching.

Your data is:

• Not used by Satori to train AI models
• Not shared with third parties, except trusted infrastructure providers required to deliver the service
• Not accessed by humans, unless explicitly required to provide customer support

HIPAA and Healthcare-Grade Privacy

HIPAA compliance is broader than technical security. It can involve legal status as a covered entity or business associate, Business Associate Agreements, risk analysis, policies, workforce training, access controls, breach procedures, retention practices, and ongoing documentation.

Satori Insights is not currently offered as a HIPAA-compliant product. We can, however, point to privacy and security protections in the infrastructure used to provide Insights, including vendors that publish healthcare, security, HIPAA-readiness, and HIPAA-limitation documentation. Where HIPAA-specific use is required, the relevant contractual commitments and product configurations must be reviewed separately.

• Recall.ai HIPAA compliance documentation
• OpenAI Business Associate Agreement information
• OpenAI API data controls
• Heroku compliance documentation
• AWS HIPAA compliance documentation
• Zoom HIPAA-ready documentation
• Google Workspace HIPAA guidance
• Postmark HIPAA limitation guidance
• HHS guidance on covered entities and business associates
• HHS guidance on HIPAA certifications

Data Retention

You control how long session data is retained.

You can delete transcripts and insights at any time. Deletion is permanent and cannot be undone.

If not manually deleted, session data is retained for the duration of your Satori account.

Data Security

We take reasonable measures to safeguard your session data.

Session data is encrypted in transit and at rest to help protect it during transmission and storage.

Access to this data is restricted to the account owner and authorized users within the account.