Privacy Notice

1. Who is responsible for your data

EvenQuad LLC is the controller of personal information processed through MyOpenTalk. You can reach us at support@evenquad.com with any privacy question, request, or complaint.

2. Data we collect and why

We collect the following categories of data:

• Account data(name, email address, password — stored only as a salted hash, plan/subscription status): collected at registration and used to create and secure your account, operate your subscription, and communicate with you about the service.
• Listener data (a display name you choose or that is generated for you, and presence timestamps): used to show a live listener count, enforce the ten-listener session limit, and let a session function as a shared live room.
• Audio: while a speaker runs a live session, their microphone audio is streamed in real time to our speech-to-text provider (AssemblyAI) solely to generate the live transcript. We do not record or store the raw audio ourselves.
• Transcript text: the text produced from a session is stored temporarily in our database so the speaker and connected listeners can view it live and so it remains viewable for a short window after the session ends, as described in our Terms.
• Payment data: if you subscribe to a paid plan, we process it through Stripe. We store your Stripe customer and subscription identifiers, plan, billing period, and payment status — we never receive or store your full card number. Stripe collects and processes your card and billing details directly, as described in Stripe’s own privacy policy.
• Cookies: we set one strictly-necessary, first-party session cookie (opentalk_session) to keep you logged in. It is required for the service to function and is not used for advertising, analytics, or cross-site tracking, so it is not subject to cookie-consent banners under applicable law. We do not currently use any non-essential or third-party tracking cookies.
• Log and technical data: our infrastructure automatically records request logs, IP addresses, timestamps, and error diagnostics. We use this to operate, secure, debug, and prevent abuse of the service.

3. Service providers we use

We share personal information with the following service providers, each acting on our behalf and only to the extent needed to provide MyOpenTalk:

• AssemblyAI— receives streamed speaker audio to generate real-time speech-to-text transcription. See AssemblyAI’s own privacy policy for how it handles data it processes on our behalf.
• Stripe, Inc.— processes subscription payments, stores payment method details, and handles billing, invoicing, and refunds. See Stripe’s own privacy policy for details.
• Amazon Web Services (AWS) — hosts the application (Lambda, API Gateway, and CloudFront) and stores operational logs (CloudWatch) used to run and secure the service.
• Our database provider (Neon) — hosts the managed PostgreSQL database where account, session, and transcript records are stored, including its automated backups.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

4. How long we keep data

• Account data is kept while your account is active. If you delete your account, we delete your account record, subject to the limited retention described in section 6 below.
• Transcript text and listener presence records are automatically deleted by an automated cleanup process approximately one hour after a session ends. Deletion from our primary database does not necessarily mean immediate removal from database backups or from copies a listener chose to save independently, which we cannot control.
• Audiois not retained by us; it is streamed transiently to AssemblyAI for processing. AssemblyAI’s own retention of data it processes on our behalf is governed by our agreement with them and their privacy policy.
• Payment and subscription records are retained for as long as your subscription is active and, after cancellation or account deletion, for the period needed to meet accounting, tax, and fraud-prevention obligations. Stripe retains payment records under its own retention practices and applicable law.
• Server and application logs are retained in AWS CloudWatch for 30 days and then automatically deleted.
• Database backups are retained by our database provider on a rolling window under its standard backup policy, after which older backups are automatically overwritten.

5. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent where processing relies on it. Speakers can exercise most of these rights directly through their account settings (including account deletion) or by contacting us.

To make a request, or if you have a complaint about how we handle your personal information, email support@evenquad.com. We will respond within the time required by applicable law. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority (for example, the Information Commissioner’s Office in the UK).

6. Legal bases and retention after deletion

We process your data to perform our contract with you (running your account and sessions), to comply with legal obligations (such as tax and accounting records), and based on our legitimate interests in operating, securing, and improving the service. Where required, we rely on your consent, which you may withdraw at any time.

Even after account deletion, we may retain a limited record (such as billing history required for tax purposes, or information needed to investigate fraud or enforce our Terms) for as long as necessary for those specific purposes, and no longer.

7. International transfers

Our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for transfers of personal information out of the UK or EEA.

8. Children

MyOpenTalk is not directed at children, and speakers must have the legal capacity (or parental/guardian permission, where required) described in our Terms.

9. Changes to this notice

We may update this Privacy Notice to reflect changes to the service, our providers, or legal requirements. We will update the effective date above and provide reasonable notice of material changes.

10. Contact

For privacy questions, requests, or complaints:

EvenQuad LLC
Email: support@evenquad.com