Privacy Policy
Last updated: May 19, 2026
TL;DR: Your video and audio go directly between you and your call partner — we never see or store them. We only collect your email, your translated text (briefly, for processing — not stored), and basic billing info if you upgrade to Pro. We don't sell your data, ever.
What we collect
- Email address — to create and identify your account.
- Password — stored hashed via Supabase Auth. We never see your plaintext password.
- Usage minutes — a counter that tracks how many translated minutes you've used this month (for free tier limits).
- Billing details (Pro only) — stored and processed by Stripe. We receive your customer ID and subscription status, but not your card number.
- Server logs — standard logs (IP address, timestamp, browser type) for security and debugging. Retained 30 days.
What we don't collect or store
- Your video or audio. Video and audio go peer-to-peer (WebRTC) between you and your call partner. They do not pass through our servers.
- The text of your speech. The transcribed text is sent to our translation provider (Anthropic) for the request, and not stored by us afterward.
- Cookies for advertising. We use only functional cookies needed for sign-in.
Third-party services
- Supabase — handles authentication, your profile data, and the usage counter. Supabase Privacy
- Stripe — handles all payment processing. Stripe Privacy
- Anthropic — provides the translation AI (Claude). Speech text is sent for translation only and is not used to train models. Anthropic Privacy
- Metered.ca — provides relay servers (TURN) used when direct peer-to-peer connections fail due to firewalls.
- PeerJS — handles initial peer signaling. PeerJS
- Vercel — hosts the application and stores server logs.
How long we keep your data
- Your account data is kept as long as your account exists.
- Server logs: 30 days.
- If you delete your account, we delete your profile and associated data within 30 days. Stripe retains your billing records for legal/tax compliance.
Your rights
You can:
- Access your data — email us and we'll send you everything we have.
- Update or correct your data — most fields are editable in your account settings.
- Delete your account — email admin@projectponte.com.
- Export your data — request a copy in machine-readable format.
- Object to processing — let us know and we'll discuss it.
If you're in the EU/UK (GDPR) or California (CCPA), these rights are legally protected. Either way, we'll honor them.
Children
The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we've collected data from a child, email us and we'll delete it.
Changes to this policy
If we make material changes, we'll notify you via email. The "Last updated" date at the top reflects the latest revision.
Contact
Privacy questions or requests: admin@projectponte.com.