Privacy Policy

1. Introduction

Welcome to Confera ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI meeting agent service at confera.me and our application platform.

Confera provides AI agents that automatically join your Teams, Zoom, and Google Meet meetings, answer questions in real-time during meetings, and save complete transcripts for later review. We are committed to protecting your privacy and handling your data responsibly.

2. Information We Collect

2.1 Account Information

When you create an account with Confera, we collect:

• Your name (first and last name)
• Email address
• Account preferences and settings

2.2 Meeting Data

When our AI agents join your meetings, we collect:

• Meeting transcripts (text only - no audio or video recordings)
• AI agent responses and answers provided during meetings
• Meeting metadata (subject, participants, start/end times, platform)
• Meeting platform details (Zoom/Teams/Google Meet meeting IDs, URLs)

2.3 Usage Information

We collect information about how you use our service:

• AI agent configurations and access controls
• Email whitelist settings and meeting confirmation preferences
• Feature usage and preferences
• Billing and payment information (processed through DodoPayments)
• Technical logs for service operation and debugging

2.4 Technical Information

We may collect technical information including:

• IP address and device information
• Browser type and version
• Cookies for authentication and functionality

3. How We Use Your Information

We use your information to:

• Provide our AI meeting agent services
• Enable AI agents to join meetings automatically
• Generate transcripts and provide real-time question answering
• Manage access controls and meeting confirmations
• Manage your account and billing
• Provide customer support
• Ensure security and prevent fraud
• Comply with legal obligations

4. Meeting Platform Integration

4.1 Platform Access

Confera connects to Microsoft Teams, Zoom, and Google Meet to provide our services:

• Your AI agent joins meetings when invited via email
• We process meeting audio in real-time for transcription and question answering
• No audio or video recordings are stored
• Only text transcripts and AI responses are retained

4.2 Access Controls

You control your AI agent's access through:

• Email Whitelisting: Restrict who can invite your agent
• Meeting Confirmation: Approve or deny meeting participation via email
• Manual Controls: Start, stop, or manage agents during meetings

4.3 AI Providers and Your API Keys

Confera allows you to use your own API keys with various AI providers to process your meeting data:

• Speech-to-Text (STT): OpenAI Whisper, Deepgram, and other transcription services
• Large Language Models (LLM): OpenAI GPT, Anthropic Claude, Google Gemini, Ollama, and others
• Text-to-Speech (TTS): OpenAI TTS, ElevenLabs, and other voice synthesis services

When you provide your own API keys:

• Your meeting transcripts may be processed by your chosen AI providers according to their privacy policies
• You have direct control over which providers process your data
• Your API keys are securely encrypted and stored
• You can change or remove API keys at any time

4.4 Data Processing Locations

• Database & Authentication: European servers
• AI Agents: European servers
• Payment Processing: DodoPayments (Merchant of Record)

5. Data Storage and Retention

5.1 Storage Duration

We store your data as follows:

• Meeting Transcripts: Stored until you delete them
• AI Agent Responses: Stored with transcripts until deletion
• Account Information: Stored while your account is active
• Access Control Settings: Stored with your account preferences
• Billing Records: Retained for legal and tax requirements
• Usage Logs: Retained for service improvement and security

5.2 Data Security

We implement appropriate security measures including:

• Encryption of data in transit and at rest
• Secure API key storage for third-party services
• Secure email-based agent access controls
• Meeting confirmation systems for additional security
• Access controls and authentication
• Regular security audits and monitoring

6. Your Rights and Choices

6.1 Data Control

You have the right to:

• Access your personal data
• Delete your meeting transcripts and AI responses at any time
• Update your account information
• Choose which AI providers to use by providing your own API keys
• Configure email whitelisting and meeting confirmation settings
• Control which meetings your AI agent can join
• Manage agent access and permissions
• Change or remove AI provider API keys at any time

6.2 GDPR Rights (EU Users)

If you are in the European Union, you have additional rights including:

• Right to data portability
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to object to processing

7. Cookies and Tracking

We use cookies for:

• Authentication and session management
• Storing user preferences
• Service functionality and security

8. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in these limited circumstances:

• With your consent: When you explicitly authorize sharing
• AI providers: When you provide your own API keys, your data may be processed by your chosen AI providers (STT, LLM, TTS) according to their privacy policies
• Service providers: Trusted third parties who help us operate our service (payment processors, hosting providers)
• Legal compliance: When required by law or to protect our legal rights
• Business transfers: In connection with a merger, sale, or transfer of assets

9. International Data Transfers

Your data may be processed in different countries:

• Primary data storage is in European Union (Supabase)
• AI agent processing occurs in European servers
• Payment processing through DodoPayments
• We ensure appropriate safeguards are in place for international transfers

10. Children's Privacy

Confera is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications for significant changes
• Updating the "Last Updated" date below

Your continued use of our service after any changes constitutes acceptance of the updated policy.

12. Data Controller Information

For GDPR compliance, the data controller for this service is:

Operated by:
Dzmitryi Hilimovich
Confera.Me

Contact:
contact@confera.me

Website:
confera.me

If you have any questions about this Privacy Policy, data processing, or wish to exercise your GDPR rights, please contact us at the above addresses. We will respond to your inquiries within 30 days.