Privacy policy
Atlayo Meet is built to know as little about you as possible. Here is exactly what we process and for how long.
Last updated: 6 November 2026
Who is responsible
The controller is Atlayo Overseas s.r.o., company ID 29645433, VAT ID CZ29645433, Příkop 843/4, 602 00 Brno, Czech Republic. We run the service on our own infrastructure.
What we process
| Data | Why | How long |
|---|---|---|
| Audio and video | Real-time call delivery through our media server. | Not stored. They exist only while being relayed. |
| Chat and captions | Delivering messages and captions to the other participants. | Not stored. They disappear when the meeting ends. |
| The name you enter | Shown to other participants. In meetings with a waiting room the host sees it when admitting you. | On the server only for a pending join request, at most 24 hours. Otherwise only in memory during the call. |
| Meeting record | Meeting code, waiting room, lock and signed-in-only settings, creation and last-use time, a hash of the host key. If you were signed in when you created it, also a link to your account. | Deleted 45 days after last use. |
| Signing in with Atlayo ID (optional) | From Atlayo ID we only receive a pseudonymous account identifier, your first name, last name, language and the address of your profile picture. We get no phone number or e-mail. It is used for your meeting list, running your meetings from other devices, signed-in-only meetings and the “signed in with Atlayo ID” marker next to your join request. | Until you delete your Meet account (button on the “My meetings” page). If you do not sign in for more than 12 months and have no meetings, we delete it ourselves. A sign-in lasts 30 days. |
| IP address | Technically required to connect. We store it when a meeting is created and to limit abuse (request counting). | With the meeting record until it is deleted (see above). Request counters 2 hours. Web server log 14 days. |
Cookies and browser storage
We use no analytics or advertising tools. Guests receive no cookies. If you sign in with Atlayo ID we set a single strictly necessary cookie, meet_sid (HttpOnly, 30 days), which keeps you signed in, and we delete it when you sign out. Your browser’s storage (localStorage) only keeps your own settings: name, chosen devices, language, theme and the host key of meetings you created. That data stays with you and you can clear it in your browser settings.
Encryption
The site and API use HTTPS. Audio and video are encrypted in transit (DTLS-SRTP) between your device and our server. The server relays the call to the other participants, so this is not end-to-end encryption yet.
Live captions
Captions are optional and you turn them on yourself. Your browser transcribes your speech. In Chrome and Edge the browser vendor (Google or Microsoft) may process audio for recognition, in Safari Apple does. We then relay the resulting text to the other participants. Atlayo does not see the audio used for transcription and does not store the text.
Who we share data with
Nobody. We use no external analytics, ad networks or call-relay subprocessors. Signing in is handled by Atlayo ID (id.atlayo.com), a service run by the same operator. Data could only be released where the law requires it.
Your rights
You have the right to access, correct and erase data, to restrict processing and to object. You can delete your Meet sign-in data yourself on the “My meetings” page. Because we keep so little and cannot identify you without an account, verifying your identity may take a moment. You can also complain to the Czech Data Protection Authority (uoou.gov.cz).
The legal basis is providing the service you opened and our legitimate interest in running it securely.