Is Read AI Safe? Privacy, AI Training, the Bot, Auto-Sharing and Uninvited Joins (2026)

Read AI is secure by the usual business measures and doesn't train on your meetings unless you opt in, but it is not the most private choice: its bot joins calls as a participant, it can join meetings you don't attend, by default it shares the report with everyone invited whether or not they came, and people who click that report get a Read account that can start joining their own meetings. If you want the notes with nothing in the call, Scribbl, which we make, takes them on Google Meet, Zoom and Microsoft Teams with nothing joining, recordings private by default, and your meetings never used to train AI for anyone other than you.

The rest of this page answers the question in full. Every Read AI fact comes from Read's own privacy policy, terms, security pages, trust center, help center and pricing page, checked on October 19, 2026, plus two university IT notices about Read showing up in meetings uninvited. We found no lawsuit against Read AI.

Is Read AI safe?

For keeping your data away from outsiders, yes. Read AI has what a security review usually asks for: a yearly SOC 2 Type II audit, encryption at rest and in transit, a published data processing agreement, a trust center with a penetration test report on request, a Business Associate Agreement for HIPAA on its top plan, and AI training that is off unless you turn it on. Its own staff, Read says, don't listen to customer calls.

What makes people ask whether Read AI is safe is what its bot does and where the reports go. By default the report from a meeting goes to everyone on the invite, attendees or not, and anyone without a Read account gets an invitation to sign up to read it. Read's own help center explains that people who do that end up with an account that may start joining their meetings and sending reports under their name. That loop is why the University of Washington required staff to deactivate Read in July 2026 and why Chapman University prohibited it in August 2025. Add Read's engagement and sentiment scoring of each participant's face and voice, and a privacy policy that says Read shares and sells account identifiers and inferences with advertising partners, and the question is less about hackers than about what Read does by design.

Read AI security at a glance

Does Read AI use your meetings to train AI?

Not unless you say so. Read's security overview (June 11, 2026) says "The default is to opt-out, but users have a choice to opt-in to contributing their data into our models," and its privacy page says "Contributing to model improvement is off by default."

• The opt-in. Read's Customer Experience Improvement Program lets meeting information and connected email and messages be used to improve its features. Read says "About 10 to 15 percent of users choose to join" (What does Read AI do with my data).
• The policy wording. Read's privacy policy (June 29, 2026) lists "using information to train and improve our models within our Services" among its purposes, "consistent with your account settings." Data from Google Workspace, such as calendar and Gmail, may be used to train personalized models for you, and Read says it doesn't let third-party AI tools train general models on it.
• Outside AI companies. Read says "about 10% of our processing tasks" go to "services like ChatGPT and Claude," under data processing agreements with OpenAI and Anthropic "that include zero re-use of data and zero retention." Workspace admins can turn that off (Ask Read with LLMs).
• Faces and voices. Read's Read Score "involves analyzing facial and verbal elements of all meeting attendees," and Read uses audio and visual information "to infer certain demographic characteristics about users." In the EU and UK, the score doesn't use video. All users can turn off sentiment, engagement and the Read Score in Account Settings (engagement and sentiment).

The Read AI bot, auto-join and consent

The bot. When it records a Zoom, Google Meet or Teams call, Read joins as a participant under a name you pick in workspace settings, from Read's options or your own (workspace settings). Read's desktop and phone apps can record your computer's audio without a bot, and in that mode "Read AI does not appear in the participant list" (consent modes). On Google Meet, a native integration records through Google after someone on the call confirms consent and clicks Start.

Auto-join. Read joins any meeting on your Calendar page with Add Read? turned on. During onboarding you choose whether Read "Joins every meeting on their calendar," "Joins only meetings they host," or "Joins only meetings they manually invite it to," and Read's own help page warns: "If you moved quickly through that step, the option that was selected may not be the one you would have picked on a careful read" (why did Read AI join my meeting). Read's pages don't say which option is preselected. Read "is able to join even if the person with the Read license doesn't attend the meeting" (help, October 14, 2026); it won't join a meeting you weren't invited to. Even with Read turned off, "other people in your meeting could still have it enabled from their account."

What other people see. When meeting chat is available, Read posts a notice that the meeting is being recorded, names the person who invited it, and explains the opt-out (in-meeting notice, June 12, 2026). Anyone can type Opt Out to make Read leave and delete what it measured, or Read Stop to end recording and keep what it has. Read says the notice may not appear when chat is disabled, when Read joins late, on Google Meet native recording, or when you record with the desktop or phone app (missing notice). On Teams, Read sends an opt-out link instead. On Zoom, the host's request to admit the bot is skipped if the host already installed Read's Zoom app.

Before the meeting. Read can email invitees from outside your workspace within an hour of being set to join, and again 24 hours before, with an opt-out that blocks the recording for everyone. Read says this "must be enabled by a workspace admin or owner" and is only available to workspaces (advance notice, October 7, 2026).

Whose job consent is. Read's terms (February 26, 2026) say "you are solely responsible for any User Content provided by you, including providing adequate notice and consent to individuals in the User Content." Its consent guide says "the user running Read AI is responsible for telling other participants and collecting consent." Some places require everyone's permission; see do you have to tell people you're recording and is it legal to record a meeting. Whichever tool you use, tell everyone you're recording.

Who can see your Read AI report?

Everyone on the invite, by default. Read's help center says "the default/recommended setting is to automatically share reports with everyone that was invited to the meeting," and that this applies "regardless of whether or not they attend" (report sharing, September 10, 2026; sharing settings, August 25, 2026).

• Other Read users on the call. Anyone else who invites Read to the meeting also gets the report, with editor access, and can share it on.
• People without an account. They "receive an invitation to sign up so they can view the summary." Read says this keeps the notes behind a login rather than emailing them openly. It's also how the uninvited-join loop starts.
• Making it private. Make report private is "the only guaranteed way to prevent others from getting access," it's available only to the meeting host, and Read says it isn't supported for Teams meetings.
• Readouts, Read's summaries of your email and chat, are private to your account by default.
• Company accounts. In a workspace, team report access defaults to Admin, and admins can lock join settings and set retention.

Why Read AI shows up in meetings uninvited

The most common complaint about Read AI isn't a breach; it's the bot appearing in a meeting nobody asked it to join. Read's own help page, "Why is Read AI in my meeting?" (help, June 1, 2026), says: "you most likely signed up to receive a meeting report from someone else who uses Read AI," that "The sign-up flow is short, and some people complete it without remembering they did," and that "Once your account exists, Read AI may auto-join your meetings and send reports under your name, depending on the settings you selected during onboarding." Read says it "does not create an account, join a meeting, send an email, or take any other action without permission from the account owner," and "In no instance does Read join random meetings."

Two universities decided the loop was a problem anyway:

• The University of Washington's IT department posted a required deactivation notice, last updated July 7, 2026, saying "the tool appeared in meetings to the surprise of meeting participants," that it "can join, transcribe, and summarize your online meetings even if you are not in attendance," and that blocking Read's Zoom and Teams integrations "is necessary to protect institutional data" (UW IT).
• Chapman University's information systems office told staff on August 13, 2025 that "the use of Read AI is prohibited," noting that some people had to delete their account completely to stop it joining (Chapman IS&T).

To stop it: delete the account you didn't mean to create (Account Settings; Read says reports you own go with it unless a workspace keeps them), check for a second account under another email, and if it still appears, Read says another invitee is using it (still joining after deletion). Read's Account & Privacy Center can look up accounts and send deletion requests, but Read says it can't delete accounts or reports at a third party's request.

Do it with Scribbl: nothing joins the call

If the bot, the auto-sharing and the uninvited joins are the parts of Read AI that worry you, this is where Scribbl is different. Scribbl takes the notes with nothing in the call, and nobody ends up with an account they didn't ask for:

1. Add Scribbl. For Google Meet, add the Chrome extension (AI note taker for Google Meet). For Zoom and Microsoft Teams, install Scribbl Desktop for Mac (Apple silicon) or Windows (Zoom, Teams).
2. Join the meeting as usual. Nothing joins the call, nothing appears in the participant list, and nothing turns up in meetings you didn't attend. You don't need to be the host. Tell everyone you're recording, the way you would in any meeting.
3. Open the notes when it ends. You get the video recording, a transcript with speaker names, AI notes and action items. Recordings are private by default: nobody sees a meeting unless you share it, and Scribbl doesn't use your meetings to train AI for anyone other than you.

The free plan includes Google Meet, Zoom and Microsoft Teams, with 10 meetings a month. Start free.

Does Read AI sell your data?

Read gives two answers on two of its own pages, about two kinds of data. Its privacy page says "Your meetings, transcripts, and personal information are never sold to advertisers or third parties." Its privacy policy (June 29, 2026) says "we share and sell the following categories of personal information to the following categories of third parties," then lists identifiers, commercial information, internet activity, employment information and inferences, each going to marketing and advertising partners, and adds that Read "may disclose your identifiers, such as your email address(es) and phone number(s), to some of our advertising partners." Data from Google Workspace APIs is excluded from that. If this matters to your company, ask Read in writing at privacy@read.ai.

How to delete your Read AI data

• One report. Deleting a report you own "will permanently remove the data from our servers" (delete a report). If you don't own it, you can only remove it from your view, or ask the owner through Read's Account & Privacy Center.
• Your account. Account Settings; Read says you lose access immediately and, unless you belong to a workspace, your reports are deleted immediately too. You can't delete an account that owns a workspace, and support can't do it for you (delete your account).
• Retention. Without a retention policy, reports are kept as long as the account is active. Read's privacy policy caps stored audio and video at 2 years. Automatic deletion after a set number of days is an Enterprise+ feature.
• Someone else's recording of you. Type Opt Out during the meeting and Read deletes what it measured. Afterwards, Read says it can't delete at a third party's request; ask the person who recorded.

Settings to check before your first Read AI call

1. Auto-join: in Calendar settings, choose only meetings you host or only meetings you invite Read to, and check what onboarding picked for you.
2. Report sharing: in Account Settings, Report Sharing, turn off automatic sharing with everyone invited, or make sensitive reports private as the host.
3. Scores: turn off sentiment, engagement and the Read Score in Account Settings if you don't want participants' faces and voices scored.
4. Advance notice: if you run a workspace, turn on the pre-meeting email to outside invitees.
5. Ask Read: admins can turn off the ChatGPT and Claude processing in Workspace Settings.
6. Consent: tell everyone you're recording, every time.

Scribbl vs Read AI: privacy side by side

What that means next to Read AI: Read's training default is the right one, and its security measures are solid. The privacy risk is in its defaults around people: a bot that joins without you, a report that goes to everyone invited, and a sign-up loop that turns your attendees into Read users whose meetings it then joins. With Scribbl, nothing joins the call, recordings are private by default, and your meetings don't train AI for anyone other than you.

Who should pick Scribbl: people whose meetings are on Google Meet, Zoom or Teams, who want the video of each meeting, and whose clients or company would rather not see a bot in the call. The free plan includes Google Meet, Zoom and Microsoft Teams, with 10 meetings a month. Pro is $13 per user per month billed annually, or $20 monthly (pricing). Start free.

For more on Read AI, see Read AI alternatives, Read AI vs Otter.ai and Read AI vs Fireflies. For the same check on other note takers, see is Otter AI safe, is Fireflies AI safe, is Granola AI safe, is tl;dv safe and is Fathom safe.

FAQ

Is Read AI safe?

By the usual business measures, yes. Read AI says it is audited against SOC 2 Type II every year, encrypts data with AES-256 at rest and TLS 1.2 in transit, stores it on Amazon Web Services in Northern Virginia, offers HIPAA with a Business Associate Agreement on Enterprise+, and doesn't train its models on your meetings unless you opt in. It is not the most private choice. Its bot joins calls as a participant, can join meetings you don't attend, and by default shares the meeting report with everyone invited, whether or not they came. People who click the invitation get a Read account that can then start joining their own meetings, which is why some universities have blocked it. Read's privacy policy also says it shares and sells identifiers and inferences with advertising partners.

Does Read AI use my meetings to train AI?

Not unless you opt in. Read's security overview, updated June 11, 2026, says the default is to opt out, and its privacy page says contributing to model improvement is off by default. The exception is its Customer Experience Improvement Program, which Read says about 10 to 15 percent of users join. Read says about 10 percent of its processing goes to services like ChatGPT and Claude under agreements with OpenAI and Anthropic that include zero re-use and zero retention of your data.

Why did Read AI join my meeting?

Read's help center says you most likely signed up to receive a meeting report from someone else who uses Read AI, that the sign-up flow is short and some people complete it without remembering, and that once your account exists Read may auto-join your meetings and send reports under your name, depending on what you picked during onboarding. If it keeps appearing after you delete your account, Read says another invitee is using it or you created a second account.

Can Read AI join a meeting without me?

Yes. Read's help center says Read is able to join even if the person with the Read license doesn't attend the meeting; they only need to be invited. It won't join a meeting you weren't invited to. During onboarding you choose whether Read joins every meeting on your calendar, only meetings you host, or only meetings you invite it to.

Can other people tell when Read AI is recording?

Usually. Read's bot appears in the participant list under a name set in your workspace settings, and when meeting chat is available it posts a notice that the meeting is being recorded, who invited it, and how to opt out by typing Opt Out. Read says the notice can be missing when chat is disabled, when it joins late, on Google Meet native recording, or when you record with its desktop or phone app, which puts nothing in the participant list. A pre-meeting email to outside invitees exists, but only workspace admins can turn it on. Read's terms make you responsible for notice and consent, so tell everyone you're recording.

Who can see my Read AI meeting report?

By default, everyone who was invited to the meeting. Read's help center says the default and recommended setting is to automatically share reports with everyone that was invited, regardless of whether they attend, and that anyone else who invited Read also gets access and can share it on. Invitees without an account get an invitation to sign up to view it. Only the meeting host can make a report private, and that option isn't supported for Teams meetings.

Does Read AI sell my data?

Read's privacy page says your meetings, transcripts and personal information are never sold to advertisers or third parties. Its privacy policy, updated June 29, 2026, says Read shares and sells identifiers, commercial information, internet activity, employment information and inferences with marketing and advertising partners, and may disclose your email address and phone number to some advertising partners. Both are Read's own pages; the meeting content is covered by the first, the account data by the second.

Is Read AI being sued?

We found no lawsuit, class action or regulatory action naming Read AI as a defendant as of October 19, 2026: a CourtListener search of federal dockets for Read AI as a party returned nothing. Otter, Fireflies and Granola face privacy class actions over their note takers; those are allegations, and none has been decided.

Is Read AI HIPAA compliant?

Read says it meets HIPAA's technical safeguard requirements and signs Business Associate Agreements, but only on an annual Enterprise+ plan with a five-license minimum, and the BAA requires setting up SAML sign-in and domain capture. HIPAA workspaces enforce host-only auto-join by default.

Will people see anything join the call if I use Scribbl?

No. Scribbl, which we make, takes notes in Google Meet, Zoom and Microsoft Teams with nothing joining the call, so no bot sits in the participant list and nothing turns up in meetings you didn't attend. You still get the video recording, a transcript with speaker names, AI notes and action items. Recordings are private by default, and Scribbl doesn't use your meetings to train AI for anyone other than you. The free plan includes Google Meet, Zoom and Microsoft Teams, with 10 meetings a month. Start free at extension.app.scribbl.co/signup.

Sources

Every fact above was checked on these pages on October 19, 2026.

• Read AI legal pages: privacy policy (June 29, 2026), privacy page, terms of service (February 26, 2026), pricing, Account & Privacy Center
• Read AI security pages: trust center, Security & Privacy Overview (June 11, 2026), What does Read AI do with my data (June 1, 2026), FAQ: Ask Read with LLMs (June 18, 2026), HIPAA workspaces (June 18, 2026)
• Read AI help center, the bot and consent: workspace settings (October 16, 2026), consent modes (June 1, 2026), calendar and auto-join settings (June 10, 2026), Why is Read AI in my meeting? (June 1, 2026), Can Read join without me? (October 14, 2026), in-meeting notice and opt-out (June 12, 2026), why the notice may be missing (April 29, 2026), Advance Notice and Opt-Out of Meeting Recording (October 7, 2026), engagement and sentiment (August 4, 2026)
• Read AI help center, sharing and deleting: report sharing (September 10, 2026), sharing settings (August 25, 2026), still joining after deletion (June 18, 2026), delete a report (June 16, 2026), delete your account (May 28, 2025)
• University notices: University of Washington IT, Required Deactivation of Read AI (July 7, 2026); Chapman University IS&T, Security Notice Regarding Read AI (August 13, 2025)
• Court records: CourtListener search of federal dockets for Read AI as a party (no results, October 19, 2026)
• Scribbl: pricing