Data export, retention, and GDPR compliance for Granola.
Use when managing data exports, configuring retention policies,
or ensuring regulatory compliance.
Trigger with phrases like "granola export", "granola data",
"granola GDPR", "granola retention", "granola compliance".
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
Data export, retention, and GDPR compliance for Granola.
Use when managing data exports, configuring retention policies,
or ensuring regulatory compliance.
Trigger with phrases like "granola export", "granola data",
"granola GDPR", "granola retention", "granola compliance".
allowed-tools
Read, Write, Edit
version
1.0.0
license
MIT
author
Jeremy Longshore <jeremy@intentsolutions.io>
Granola Data Handling
Overview
Manage data export, retention policies, and regulatory compliance for Granola meeting data.
## Export Single Meeting1. Open meeting in Granola
2. Click ... menu
3. Select "Export"
4. Choose format:
- Markdown (.md)
- PDF (.pdf)
- Word (.docx)
- JSON (full data)
5. Download file
Bulk Export
## Export All Data1. Settings > Data > Export
2. Select "All Data"
3. Choose date range (optional)
4. Select format: JSON (recommended)
5. Confirm export request
6. Wait for email with download link
7. Download within 24 hours
Export Formats
Markdown Export
# Meeting Title**Date:** January 6, 2025
**Duration:** 45 minutes
**Attendees:** Sarah Chen, Mike Johnson
## Summary
[AI-generated summary]
## Key Points- [Point 1]
- [Point 2]
## Action Items- [ ] Task 1 (@assignee, due: date)
## Transcript
[Full transcript if included]
## Retention Settings
Location: Settings > Privacy > Data Retention
Options:
1. Keep Forever (default)
- All data retained indefinitely
- User must manually delete
2. Time-Based Deletion
- Notes: 30/60/90/365 days
- Transcripts: 7/30/90 days
- Audio: Immediately/7/30 days
3. Storage-Based
- Delete oldest when quota reached
- Archive to external before delete
Recommended Retention by Type
Data Type
Recommendation
Reason
Notes
1-2 years
Reference value
Transcripts
90 days
Storage efficiency
Audio
Delete after processing
Privacy, storage
Metadata
2 years
Analytics value
Retention Policy Template
# Company Retention PolicyDefault:notes:365daystranscripts:90daysaudio:delete_after_processingBy Workspace:HR:notes:730days# 2 years (legal)transcripts:30daysaudio:delete_immediatelySales:notes:365daystranscripts:90days# CRM referenceaudio:30daysEngineering:notes:180daystranscripts:7daysaudio:delete_after_processing
GDPR Compliance
Rights Implementation
Right
Implementation
Process
Access
Data export
Self-service export
Rectification
Edit notes
User can edit
Erasure
Delete account
Settings > Delete
Portability
JSON export
Full data download
Objection
Opt-out
Don't record specific meetings
Subject Access Request (SAR)
## Handling SAR1. Receive Request
- Verify identity
- Log request with timestamp
2. Locate Data
- Search by email address
- Include all workspaces
- Check shared notes
3. Compile Response
- Export user's data (JSON)
- Include metadata
- Document third-party sharing
4. Deliver Within 30 Days
- Secure delivery method
- Provide in readable format
- Explain data categories
5. Document Completion
- Log response date
- Store proof of delivery
Data Deletion Request
## Right to Be Forgotten1. Verify Identity
- Email confirmation
- Additional verification for sensitive data
2. Scope Deletion
- All personal data
- Shared notes (mark as deleted, retain structure)
- Integration data (notify third parties)
3. Execute Deletion
- Delete from primary storage
- Delete from backups (within 30 days)
- Revoke integrations
4. Confirm Completion
- Notify requestor
- Provide confirmation ID
- Document process
DPA (Data Processing Agreement)
## DPA Checklist
Granola provides:
- [ ] Standard DPA template
- [ ] SCCs for international transfer
- [ ] Sub-processor list
- [ ] Security measures documentation
- [ ] Breach notification procedures
Company must:
- [ ] Sign DPA with Granola
- [ ] Update privacy policy
- [ ] Obtain consent for recording
- [ ] Train staff on procedures
CCPA Compliance
California Consumer Rights
Right
Implementation
Know
Disclosure of data collected
Delete
Account deletion
Opt-out
No sale (Granola doesn't sell data)
Non-discrimination
Equal service
Privacy Notice Requirements
## Meeting Recording Notice
Include in meeting invites:
"This meeting may be recorded using Granola AI
for note-taking purposes. By attending, you consent
to recording. Contact [email] with questions or
to request data access/deletion."
Data Security
Encryption Standards
State
Method
Standard
At Rest
AES-256
Industry standard
In Transit
TLS 1.3
Latest protocol
Backup
AES-256
Same as primary
Access Controls
## Data Access Matrix
| Role | Notes | Transcripts | Audio | Admin |
|------|-------|-------------|-------|-------|
| Owner | RWD | RWD | RD | Full |
| Admin | RW | RW | R | Limited |
| Member | RW | R | - | None |
| Viewer | R | - | - | None |
R = Read, W = Write, D = Delete
Archival Strategy
Long-Term Archive
## Archive Workflow
Monthly:
1. Export notes > 6 months old
2. Format: JSON (complete)
3. Store in company archive
4. Verify export integrity
5. Delete from Granola
6. Update archive index
Archive Storage:
- Primary: Google Cloud Storage
- Backup: AWS S3 Glacier
- Retention: 7 years
Archive Access
## Retrieving Archived Data1. Search archive index
2. Locate in storage bucket
3. Download JSON file
4. Parse for required data
5. Re-import to Granola if needed
