Privacy Policy

Verbivo is a real-time multilingual meeting transcription and translation platform, operated under the brand Verbivo. For any data-related questions, contact us at [email protected].

We collect and process the following categories of data:

• Account data: name, email address, password (stored only as a bcrypt hash), preferred language, country, position.
• Profile data: profile photo (stored as a data URI in the database), identification color.
• Meeting content: voice transcripts, transcript translations, AI-generated summaries.
• Technical data: JWT authentication token stored in an HTTP-only cookie, activity timestamps.

We do not record or store audio files. Audio is sent transiently to transcription services and is not retained on our servers.

• Providing the real-time transcription and translation service.
• Authenticating and managing your account.
• Generating AI-powered meeting summaries.
• Sending email invitations to meetings (only when you explicitly initiate this).
• Improving the platform via technical error analysis (no behavioral analytics).

We do not sell, transfer, or use your data for advertising or marketing purposes.

To operate the platform, we transmit data (temporarily and strictly as necessary) to the following sub-processors:

Transfers of data outside the European Economic Area (EEA) rely on the European Commission's Standard Contractual Clauses (SCCs) or the Data Privacy Framework (DPF) certification, as applicable.

Your data is retained for as long as your account remains active. When you delete your account, all associated data (transcripts, translations, summaries, profile) is permanently deleted from our databases. Deletion may take up to 30 days to propagate fully across all backup systems.

We use the following categories of cookies:

• Essential (always on): auth_token — HTTP-only cookie required for authentication. Cannot be disabled.
• Analytics (optional): Cookies that help us understand platform usage — features accessed, session durations, error rates. Data is aggregated and anonymous.
• Marketing (optional): Cookies used to measure campaign effectiveness and show relevant content. We do not sell your data to third parties.

On your first visit, we ask for your consent via the cookie banner. You can update your preferences at any time using the "Cookie Preferences" link below.

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: request a copy of all data we hold about you (available from Settings → Privacy → Export data).
• Rectification: correct inaccurate or incomplete data in your profile.
• Erasure: request deletion of your account and all associated data (available from Settings → Privacy → Delete account).
• Portability: receive your data in structured JSON format.
• Objection: object to processing of your data in certain circumstances.
• Restriction: request that we limit processing of your data.

For rights not directly available in-app, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority (e.g., ANSPDCP in Romania, ICO in the UK).

Passwords are stored only as bcrypt hashes (cost factor 10). All communications are encrypted via HTTPS/TLS. The authentication cookie is marked HTTP-only and Secure in production. Database access is restricted via a Turso authorization token.

Material changes to this policy will be notified by email at least 14 days before taking effect. Continued use of the platform after that date constitutes acceptance of the updated policy.