Analysis 7 min read

The Hidden Cost of Free Notetakers

Fathom, Otter Free, and tl;dv Free cost nothing. But what do they do with your data? We read the privacy policies so you don't have to.

meetingstack research ยท 7 min read

The pitch is compelling: free, unlimited meeting recording with AI summaries.

Five AI meeting notetakers offer that deal right now. Fathom, Otter, tl;dv, Fireflies, and Granola all let you record, transcribe, and summarize meetings without paying a cent. But the product economics don't work unless you're the product, or the free tier is a funnel designed to push you toward paid. Both models carry real costs. We read every privacy policy, tested every export feature, and catalogued every locked gate so you can see exactly what "free" means for each tool. Here's what they don't want you to notice.

The business models behind free

These five tools monetize through three distinct models. The differences matter because each model creates a different kind of cost for the user.

Model 1: The freemium funnel. Fathom gives individual users unlimited recordings and transcripts forever. The product stays free. Revenue comes from teams: when a company wants shared meeting libraries, CRM integrations, and team analytics, Fathom charges per seat. The individual user is the foot in the door. Your data is the bait that pulls your company into a paid contract. Fathom is explicit about not training on user data, which makes the funnel model cleaner. You're a lead, not a data source.

Model 2: Data-subsidized. Otter's free tier grants broader data usage rights than its paid plans. Otter uses a proprietary de-identification method to train its speech models on user recordings. Paid enterprise customers can negotiate data usage restrictions. Free users cannot. A class-action lawsuit filed in August 2025 alleged Otter "deceptively and surreptitiously" records private conversations without proper consent. Whether that suit succeeds or not, it highlights the gap between Otter's marketing (simple meeting notes) and its data practices (model training on your audio). Granola follows a similar pattern: it uses de-identified meeting data to train internal AI models by default. Users can opt out in settings, but the default is opt-in.

Model 3: Feature-gated. tl;dv and Fireflies offer generous free recording but lock the features that make recordings useful behind paid walls. tl;dv gives you unlimited recordings and transcripts but caps AI meeting notes at 10 per month, limits clips to 4, and deletes recordings after 3 months. Fireflies gives you 800 minutes of storage total and only 20 AI credits per month. Both tools bet that once your archive grows, you'll pay to unlock it.

What the privacy policies say

We read the privacy policies of all five tools as of March 2026. We found something that surprised even us. Here is what each one actually says about data training, third-party sharing, retention, and deletion.

Policy area Fathom Otter tl;dv Fireflies Granola
Trains on your data? De-identified* Yes No No Opt-out
Third-party sharing? Minimal Yes Minimal Marketing Service only
Free tier retention Unlimited 25 recent 3 months 800 min 25 meetings
Full data deletion? Yes (30d) May retain Yes (GDPR) 45-90 days Yes
Data location US (SOC 2) US EU (SOC 2) US (SOC 2) US (SOC 2)
GDPR compliant? Yes Partial Yes Yes Yes
* Fathom uses de-identified data for internal model improvement; users can opt out. Third-party AI providers (OpenAI, Anthropic) are contractually barred from training. Policies reviewed March 2026.
Green = user-friendly. Red = concern. Amber = conditional.

Fathom has the strongest privacy stance of the group. Its policy (updated October 2025) states that third-party AI sub-processors (Anthropic, OpenAI, Google) are contractually prohibited from using Fathom user data for model training. Fathom does use de-identified data to improve its own proprietary models, but users can opt out entirely. Data deletion requests are honored within 30 days, with backups purged on the same timeline. SOC 2 Type II, HIPAA, and GDPR compliant.

Otter tells a different story. Its privacy policy grants Otter the right to use recordings and transcripts for model training through a "proprietary de-identification" method. The policy also allows Otter to retain data even after you delete it from your account, if Otter determines retention serves "legitimate business purposes." Otter shares data with data labeling service providers and AI backend providers. For free tier users, there's no way to negotiate stricter terms. Paid enterprise customers get more control; free users get the broadest data usage terms.

tl;dv takes a GDPR-first approach. Built in Europe, it stores all personal data in the European Economic Area by default. Its policy explicitly states that no customer data is used for AI training. When processing through Anthropic, tl;dv anonymizes metadata and chunks meetings into small, randomized sequences so the AI provider never sees a complete meeting. SOC 2 certified and GDPR compliant across all tiers, including free.

Fireflies updated its policy in March 2026 to state that meeting content is "never used to train any AI models" and enforces a zero data retention policy with third-party vendors. That said, the policy also notes that personal information "may be used for marketing purposes or shared with third parties for promotional materials." Deletion requests take 45 to 90 days to process.

Granola is the newest entrant, and it has already drawn scrutiny.

Here's the finding that should concern you. In early 2026, security researchers discovered that Granola generates public-facing links to meeting notes by default, set to "anyone with the link can view." The default sharing setting was open, not private. Granola acknowledged the issue after public disclosure, but changing the setting does not apply retroactively to notes already created. Every note generated before the user changed the setting remained publicly accessible via its original link. The scope of exposure is unclear since Granola has not disclosed how many notes were affected or how long the default persisted. For teams recording sensitive meetings (sales negotiations, HR discussions, strategy sessions), this is a serious gap.

Granola also trains its internal models on de-identified meeting data by default. Users can opt out in settings, but the default is opt-in, and the Enterprise plan ($35/user/month) is the only tier that guarantees a team-wide training opt-out. Granola does not store raw audio, which limits exposure, but the public-link default combined with model training puts it in a different risk category than competitors.

The feature gates that trap you

The privacy policy is only half the story. The other half is what each free tier withholds, because those gates create switching costs that lock you in over time. If you're evaluating these tools for a sales team, our breakdown of why mid-market teams are leaving Gong covers the paid alternatives.

Features locked behind paid plans
Green = included free. Red = paid only. Yellow = limited on free tier.
Fathom Otter tl;dv Fireflies Granola Unlimited recording Yes 300m 40/wk 800m 25 total AI summaries 5/mo 20/mo 10/mo 20/mo Yes CRM integration Paid Paid Paid Paid Paid Team sharing Paid Paid Yes Paid Yes Global search Yes Paid Paid Paid Yes Transcript export Copy TXT Paid Paid Yes Audio download Yes MP3 Yes Paid No audio

Every tool gates CRM integrations behind paid plans. That's the universal upsell. But the other gates vary. Fathom withholds team collaboration and AI summary volume. tl;dv withholds transcript export, global search, and long-term retention. Fireflies withholds downloads, integrations, and most AI features. Granola withholds integrations and long-term access to older meetings.

The trap works like this: you start recording meetings. After three months, you have an archive of 50 or 100 meetings. Your team starts relying on the searchable library. Then you hit a gate. You need CRM sync, or you need to search across all meetings, or the 3-month retention window approaches and your oldest recordings face deletion. At that point, switching to a competitor means losing your archive. The cost of staying (paying for the upgrade) is lower than the cost of leaving (rebuilding your meeting library from scratch). That's the business model.

The data you can't take with you

Export capability determines whether you actually own your meeting data or just rent access to it. Here's what each free tier lets you take with you if you decide to leave.

Fathom lets free users download audio recordings and copy transcripts from the UI. There's no bulk export button and no direct file download for transcripts (you copy text manually or use the API). For individual meetings, this works. For an archive of hundreds of meetings, it becomes tedious. The data exists; extracting it at scale takes effort.

Otter allows free users to export transcripts as plain text files and audio as MP3. But Otter only retains your 25 most recent conversations on the free tier. Older meetings are automatically removed. If you recorded 100 meetings over six months, 75 of those transcripts are already gone by the time you decide to leave. You can only export what still exists.

tl;dv provides audio and video downloads on the free tier, which is generous. But transcript export requires a paid plan. You can watch your recordings and manually transcribe them, but you cannot download transcript files. The 3-month retention window adds pressure: export your recordings before they disappear, or upgrade to keep them.

Fireflies locks both transcript downloads and audio downloads behind paid plans on the free tier. You can view transcripts and listen to recordings inside the app, but you cannot download any of it. Your data stays in Fireflies. If you leave, you leave empty-handed.

Granola is the friendliest for export on the free tier. You can copy or download your AI-generated notes (Granola does not record audio, so there's no audio to export). The catch: Granola's 25-meeting lifetime limit on the free plan means you won't build a large archive to export in the first place. It functions more as a trial than a permanent free tier.

Which free tier is actually free

After reviewing the policies, testing the feature gates, and cataloguing the export options, here's how these free tiers rank.

Best privacy: Fathom. De-identified internal model training with opt-out, no third-party data sharing for training, SOC 2 + HIPAA + GDPR. The free tier is genuinely unlimited for individual recording and transcription. The privacy policy is the cleanest of the five. If you only need personal meeting notes and don't need team features, Fathom's free tier is a real product, not a trap.

Best for EU compliance: tl;dv. EU data residency, GDPR compliant by design, no AI training on customer data. The free tier is generous for recording and transcription, though transcript export and long-term retention require payment. If GDPR compliance is non-negotiable and you're willing to pay for export, tl;dv is the strongest choice.

Use with caution: Fireflies. The no-training policy is good. The zero data retention with third-party vendors is good. But the free tier is so restricted (no downloads, no integrations, 800 minutes total) that it functions as a demo. The marketing data sharing clause in the privacy policy also warrants scrutiny.

Approach carefully: Granola. The 25-meeting lifetime cap, default-public note sharing, and default opt-in AI training create a combination of limitations that require active management. You need to change your sharing settings immediately upon signup and opt out of training in your account settings. It's a capable tool, but the defaults work against your privacy.

Most risk: Otter Free. Otter's free tier combines the broadest data usage rights, the most limited retention (25 conversations), and the least user control over data practices. The pending class-action lawsuit adds uncertainty. If you use Otter Free, assume your recordings will be used for model training and may be retained beyond your control. For sensitive meetings (sales calls, HR conversations, legal discussions), that's a deal-breaker.

The bottom line: "free" is never free. Every tool in this list extracts value from free users, whether through data access, feature gates, or upsell pressure. The question is which trade-off you can live with. For most individual users, Fathom offers the best balance of privacy and functionality. For teams in Europe, tl;dv's GDPR-first approach earns the recommendation. For everyone else, read the privacy policy before you click "join meeting."