Privacy Policy

Last updated: June 2026

You can review and adjust your cookie preferences at any time.

1. Controller

Frank Liebe, FrankLiebe.IT, Email: frankliebe@gmx.com

2. Data We Process

We process the following categories of personal data: • Account data: Email, name, profile picture (optional), password (encrypted) • Meeting data: Chat messages, Q&A questions, poll responses, recordings (if enabled), transcripts (if enabled) • Technical data: IP address, browser type, access times, device information

3. Purpose of Processing

• Provision of the video conferencing service • Authentication and account management • Security and abuse prevention • Billing (for paid plans) • Customer support

4. Legal Bases (Art. 6 GDPR)

• Art. 6(1)(b) GDPR: Contract fulfillment - for providing our services • Art. 6(1)(f) GDPR: Legitimate interests - for security measures • Art. 6(1)(a) GDPR: Consent - for optional features like analytics • Art. 6(1)(c) GDPR: Legal obligation - for invoice retention

5. Service Providers

We use the following service providers: • Vercel Inc. (USA, DPF certified) - Hosting • Supabase Inc. (EU - Frankfurt) - Database • Daily.co (USA, DPF certified) - Video infrastructure • LiveKit Cloud (USA, DPF certified) - Video infrastructure (real-time audio/video) • PayPal (Luxembourg) - Payment processing • OpenAI (USA, DPF certified) - AI features (transcription, summaries) Note on LiveKit: LiveKit can also be operated self-hosted. Organizations that can provide the required connectivity, bandwidth and hosting expertise may run LiveKit on their own infrastructure and thereby choose and control the hosting location themselves (for example within the EU). In that case the video infrastructure is no longer processed via LiveKit Cloud (USA), but on the infrastructure selected by the respective organization.

6. International Transfers

For transfers to the USA, we rely on EU-US Data Privacy Framework (DPF) certification and Standard Contractual Clauses (SCCs) with additional technical measures (encryption).

7. Your Rights

You have the following rights under GDPR: • Right of access (Art. 15) - Request information about your stored data • Right to rectification (Art. 16) - Correct inaccurate data • Right to erasure (Art. 17) - Request deletion of your data • Right to restriction (Art. 18) - Restrict processing of your data • Right to data portability (Art. 20) - Export your data • Right to object (Art. 21) - Object to processing • Right to withdraw consent (Art. 7) - Withdraw previously given consent To exercise your rights, contact: frankliebe@gmx.com

8. Storage Duration

• Account data: Until account deletion + 30 days backup • Meeting data: 90 days after meeting end • Billing data: 10 years (legal requirement) • Security logs: 90 days

9. Cookies

We use technically necessary cookies for authentication. Optional cookies (analytics, marketing) are only set with your explicit consent. You can manage your preferences via our cookie banner.

10. Data Security

We implement appropriate security measures: • TLS 1.3 encryption for all connections • Password hashing with bcrypt • Row Level Security (RLS) in database • Input validation against XSS and SQL injection • Regular security audits

11. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority.

12. Contact

For privacy questions: frankliebe@gmx.com

You can review and adjust your cookie preferences at any time.