Privacy policy.
What we collect, what we don’t, and what you can do about it. Written in human, not lawyer.
TL;DR
We don’t sell your data. We don’t train AI on your audio. We collect the minimum needed to run the Service. You can request, correct, or delete your data anytime.
What we collect
Account information you provide (name, email), audio metadata (room IDs, timestamps, durations) and minimal technical data needed to deliver the Service.
What we don’t do
We do not sell your data. We do not share it with advertisers. We do not train AI models on your audio, transcripts, or metadata.
How audio is handled
All audio is end-to-end encrypted in transit using AES-256-GCM with X25519 key exchange. Our servers route encrypted packets but cannot decrypt them.
Cookies & tracking
We use one essential cookie to keep you signed in. We use a privacy-respecting analytics tool (Plausible) that does not set cookies and does not track users across sites.
Data retention
Recordings and transcripts are retained according to your account’s retention policy (default: 30 days, configurable up to forever).
Your rights
You can request a copy, correction, or deletion of your data. Email privacy@xlntalk.com and we will respond within 14 days.
Subprocessors
We use a small set of vetted vendors to operate XLNTalk: AWS (infrastructure), Postmark (email), Plausible (analytics).
Children
XLNTalk is not directed at children under 13 (16 in the EU). We do not knowingly collect personal data from children.
Changes to this policy
We will notify you of material changes at least 30 days before they take effect.
Contact
Privacy questions? Email privacy@xlntalk.com or write to XLNTalk, Västerås, Sweden.