Privacy Policy

This Privacy Policy (“Policy”) explains how Meetie (“Service”) collects, uses, stores, and shares your personal data when you use our website and related web applications.

By continuing to use the Service, you confirm that you have read and accepted this Policy.

The data controller for the Service is Anton (the “Administrator”), a natural person located in the Russian Federation. Contact email: [email protected].

The Administrator processes personal data in accordance with Russian Federal Law No. 152-FZ “On Personal Data” (“152-FZ”) and applicable principles derived from international frameworks such as the GDPR.

Personal data — any information relating, directly or indirectly, to an identifiable individual.

Processing — any operation performed on personal data, including collection, recording, storage, modification, disclosure, and deletion.

User — an individual who registers an account or uses the public pages of the Service.

Processor — a third party that processes personal data on behalf of the Administrator (for example, a hosting or API provider).

When you register an account

• email address;
• a hashed version of your password;
• display name if provided;
• interface language.

When you use the Service

• audio and video recordings you upload;
• text transcripts of those recordings;
• tasks generated from transcripts by AI, including your edits;
• original file names;
• the user-editable dictionary of word corrections.

When you connect Jira

• Jira domain and email used for the integration;
• Jira API token — stored in encrypted form.

Technical data

• IP address — used for security and abuse prevention;
• User-Agent and basic browser data;
• technical cookies to maintain your session (see the Cookie Policy for details).

When you contact us

• contact form data, chat-bot messages, and bug reports;
• any name and email you include in those messages.

The Service does not deliberately collect sensitive categories of data (race, political opinions, religious beliefs, health, biometric or genetic data, criminal records). If such information incidentally appears in a meeting recording, it is processed only as part of the transcription and is not used for any other purpose.

We process data for the following purposes:

• to provide the Service — transcription and task extraction (legal basis: performance of the contract);
• to manage your account — registration, sign-in, password reset, email verification (legal basis: performance of the contract, your consent);
• to communicate — service emails, processing notifications, replies to inquiries (legal basis: performance of the contract);
• for security and abuse prevention — rate limiting, authentication audits, blocking suspicious activity (legal basis: legitimate interests of the Administrator);
• to improve the Service — reviewing inquiries and bug reports (legal basis: your consent).

We keep data no longer than needed for the purposes above:

• account data: until you request deletion;
• uploaded audio and video files: up to 30 days after processing completes, then deleted from storage;
• transcripts and extracted tasks: until the corresponding meeting or account is deleted;
• refresh tokens: 7 days;
• bug reports and inquiries: 12 months;
• technical logs: 30 days.

After you delete your account, operational data is removed within 30 days. Encrypted backups may contain data for up to 90 days and are then permanently removed in the normal backup rotation.

To operate the Service the Administrator engages technical sub-processors. Personal data is shared with them only to the extent needed for their role:

• Automatic Speech Recognition (ASR) provider — receives audio files for transcription;
• Large language model inference provider — receives transcripts for task extraction;
• Hosting provider — operates servers, database, and object storage;
• Third-party integration providers (task management, CRM) — receive data only at the moment the User explicitly initiates a push to their own workspace.

The current list of specific sub-processors is available upon written request from the data subject, in accordance with 152-FZ Article 14.

The Administrator does not sell personal data and does not share it with advertising or analytics networks. Disclosure required by Russian Federation law (for example, to law-enforcement authorities) may occur to the extent required.

AI inference providers may route requests to models hosted outside the Russian Federation, including in the United States and the European Union. By using the transcription and task-extraction features you consent to these cross-border transfers.

The list of jurisdictions where transfers may occur can change and is available upon request from the data subject. The Administrator monitors compliance of such transfers with 152-FZ.

Under 152-FZ Article 14 and applicable principles you may:

• request information about which of your personal data the Administrator processes;
• request correction, blocking, or deletion of your data;
• withdraw consent to processing (delete your account or contact the Administrator);
• receive a copy of your data in a machine-readable format (task and transcript export is available in the Service);
• lodge a complaint with the Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor) in the Russian Federation, or with your local supervisory authority.

To exercise your rights, email the Administrator. Requests are handled within 30 days of receipt.

The Administrator applies a combination of organizational and technical safeguards that meet the requirements of 152-FZ and industry practice for information security. Safeguards cover encryption of data at rest and in transit, layered access controls, abuse prevention, and incident monitoring.

The specific composition and parameters of these safeguards are not disclosed publicly for security reasons. No system can guarantee absolute security of internet transmissions. If we detect an incident that affects your personal data, we will notify you and Roskomnadzor as required by applicable law.

The Service uses cookies and similar technologies. See the separate Cookie Policy for details.

The Service is intended for people aged 16 or older. We do not knowingly collect personal data of children under 16. If you discover that a child registered without your consent, contact the Administrator and we will delete the account and associated data.

The Administrator may update this Policy from time to time. The current version is always available at /privacy and includes the date of the last revision. We aim to announce significant changes in the Service interface or by email in advance.