Privacy Policy

1. Who we are

meetall is a video calling service. Questions about your data, requests to get a copy of it, correct it or delete it: [email protected].

2. What we never get

• Video and sound of calls. They go through our media server: it receives each participant’s video and sound and forwards them to the others, for which it decrypts them, but it does not record or keep them. On the way they are encrypted by WebRTC (DTLS-SRTP). When a network blocks the way to the media server, they pass through our relay (TURN) still encrypted: it does not decrypt or keep them.
• Recordings and screenshots of calls. They are made in your browser and saved on your device.
• The sound of your voice for captions. Speech is recognised by your browser itself; only the recognised text reaches our server (see section 6).
• Background blur and noise suppression work in your browser; your camera image and sound are not sent anywhere for this.

3. What we store

• Account: username, password (only as a hash, we cannot read it), email if you gave one (for sign-up codes and password recovery), profile photo, the date of sign-up.
• Guests: the name typed for the call.
• Rooms and meetings: names, settings, the organiser, moderators and removed participants, scheduled meetings and who is invited to them.
• Room chat: messages, files, stickers, reactions; transcripts and AI summaries that participants posted to the chat.
• Direct messages: messages, voice messages and video notes, read marks, chat requests, blocks and complaints, call cards.
• Your stickers and sticker packs.
• Telegram: if you connect reminders, the ID of your chat with our bot.
• Call statistics: when you joined and left a call, reconnects, the name of your operating system and browser, connection quality (how long it took to connect, whether it went through the relay), the call rating and comment if you left them.
• Error reports: errors in the page, camera or microphone failures, connection problems, with the operating system and browser, linked to the account and room.

Our servers also see your IP address. We use it to limit attempts to guess passwords and other abuse; these counters are kept in memory and are not saved to the database. Web server logs with IP addresses are kept for a short time to fix problems and protect the service.

4. In your browser

meetall saves the sign-in token and settings in the browser’s storage (localStorage): language, theme, chosen camera and microphone, layout, sounds and similar. They stay on your device, and you can clear them in the browser settings. We do not use cookies for tracking or advertising.

5. Site statistics

We count visits with Umami, which runs on our own server. It sets no cookies, does not record address parameters (so invite links stay private), and counts pages, where visitors came from, country and device type. These statistics are not shared with anyone.

6. Transcripts and AI summaries

• Captions: your browser recognises your speech. Chrome and Edge send the sound to Google and Microsoft for this, Safari to Apple, under their own policies. Our server passes the text to the other participants and does not keep it.
• Transcript: it starts only if everyone in the call agrees. The finished text, with who said what and when, is posted as a file to the room’s chat and is kept there like other messages.
• AI summary: only when a participant asks for it and confirms sending the text, the transcript is sent to Google Gemini, which writes a summary, decisions and tasks. We use the paid Gemini API, under which Google does not use this text to improve its models. The summary is posted to the room’s chat and sent to the accounts of the people in the transcript: to Telegram if they connected it and to their email if they gave one. This can be turned off in the profile menu.
• “What did I miss”: a participant who agreed to the transcript and confirms sending the text can get a short account of what has been written down so far from Google Gemini. Only they see the answer, and it is not stored.
• Translated captions: when a participant turns translation on and confirms, the others’ finished phrases are sent to Google Gemini and come back to them in the language they chose. The others see that they read a translation. We store neither the phrases nor the translations.
• Speech recognised on the server: in browsers that cannot recognise speech themselves (Firefox, phones), a participant can let our server do it. Then, while captions are wanted in the call and their microphone is on, its sound goes to our speech recognition server (Whisper). The sound is not stored; the text goes into the captions as usual.

7. Why we use the data

• To run the service: accounts, calls, chats, files, reminders (this is needed to provide meetall to you).
• To keep the service safe: limits on attempts, protection against spam and abuse (our legitimate interest).
• To find and fix errors and improve connection quality (our legitimate interest).
• Transcripts: only with the consent of each participant, which can be withdrawn by turning the transcript off. AI summaries of a transcript: at the request of a participant, who confirms sending its text.
• Emails: codes for sign-up, password recovery and email changes, AI summaries of calls you were in the transcript of, and invitations to meetings someone invited you to. No advertising mailings.

We do not sell data, do not show ads and do not build advertising profiles.

8. Who else gets data

• Other participants: people in the same call or room see your name, photo, video, hear your voice and see your messages and files. In a direct connection, like any WebRTC call, their browsers also learn your IP address.
• Hosting providers: our servers, database and file storage are rented from providers who store data on our behalf.
• Cloudflare: delivers meetall.me and sees IP addresses and requests (the mirror ru.meetall.me works without Cloudflare).
• Email delivery service (Resend or our mail provider): receives your email address and what the email says (a code, a call summary or a meeting invitation).
• Google (Gemini API): the transcript text or finished caption phrases, only for AI summaries, “What did I miss” and translations a participant asked for.
• STUN servers (Google’s by default): see your IP address to help browsers connect.
• Telegram: messages from our bot go through Telegram.
• Watching together: YouTube, Twitch and RuTube players are loaded from those services, and they may receive your IP address and set their own cookies. Netflix and Kinopoisk are watched in your own account in your own tab: we do not get your account data.
• Authorities: when the law requires it.

Some of these companies are in other countries, including the USA, so your data may be processed outside your country.

9. The browser extension

The meetall extension works only on meetall pages and on Netflix and Kinopoisk pages. To keep the film in step with the call, it reads the player state (playing or paused, position, which film or episode is open, whether you are signed in) and passes it to your meetall call. It does not read your Netflix or Kinopoisk account details, viewing history or other sites, and keeps its settings only in the browser.

10. How long we keep data

• Account, rooms, chats and files: until you delete them or the account.
• Calls without an account: the room with its chat and files is deleted about an hour after the 24-hour link expires.
• Guests: about two days after joining, unless the guest owns a room or left messages, files or reactions in it.
• Files attached to the chat but not sent: one day.
• Error reports: 30 days.
• Call statistics and ratings: until the account is deleted.
• Backups of the database are kept for up to about two months, so deleted data disappears from them within that time.

11. Your rights

You may ask to see what data we have about you, get a copy, correct it or delete it, and object to its processing. Much of this can be done yourself: change or remove your email and profile photo, delete your messages, disconnect Telegram, sign out on all devices.

To delete your account and its data, write to [email protected] from the email of the account or name the username. We may ask you to confirm that the account is yours. We answer within 30 days. If you think we process your data unlawfully, you may also complain to the data protection authority of your country.

12. Children

meetall is not intended for children under 16 without permission from a parent or guardian. If you think a child has given us data without such permission, write to us and we will delete it.

13. Security

We store passwords only as hashes, use encrypted connections (HTTPS, WSS, DTLS-SRTP), give out file links that are signed and expire, and limit access to servers. No system is completely safe, so use a unique password.

14. Changes to this policy

When the way we handle data changes, we update this page and its date. We will announce important changes in meetall in advance.