Google/Outlook calendar access required for service (read-only but mandatory); Fathom bot joins all scheduled meetings automatically; mandatory arbitration with $100 minimum liability cap for free users; meeting content shared with CRM integrations at user direction; non-consenting meeting participants recorded; de-identified data used for in-house AI training by default (opt-out available).

SOC 2 Type II + HIPAA certified; third-party AI providers prohibited from training on user data; no selling of meeting content; opt-out from in-house training available in settings; EU-US DPF compliant; BAA available; 30-day account deletion commitment; 30-day arbitration opt-out window.