The media server runs on a box you rent, in a region you chose, with keys you hold.Read more

Privacy

What this product holds, where it holds it, and who can see it.

The part worth knowing first: when you run LiveGrid yourself, the audio and video of a call never reach us. They are routed by a media server on a machine you rent. This page is about the rest — the account, the history and the record.

Read the documentation

image slot

Where the call itself goes

Media flows between participants and your own media plane

One `livekit-server` on a box you rent, in a region you chose, holding a key pair you generated. We do not proxy it, store it, or hold a credential that could. A region shares nothing with any other region, including ours.

Media
your machine, your region
Keys
generated by you, held by you
Us
not in the path

What is stored

The account, the call history, and the record of what was said

Who is in your organisation, which calls happened and for how long, the transcript of a call where you enabled one, and the avatars and voices you enrolled. Nothing is sold, nothing is passed to a data broker, and no general-purpose model is trained on it.

History
rooms, durations, participants
Transcripts
where you turned them on
Enrolment
avatars, voices, and their consent

Consent

Permission to use a likeness is a row, checked on every call

An avatar carries a named grantor, the attestation in their own words, and what they agreed to. Permission to appear on a call defaults to NOT being permission to be training data, and the two are stored as separate columns so they can never be conflated by accident.

Credentials

Provider keys are encrypted per organisation

Each organisation may supply its own model and media credentials. They are encrypted before they are written, under a key this deployment holds, and decrypted only to make that organisation’s own calls.

Ending it

Deleting a call removes its record; erasure empties the record of a person

A call you delete takes its transcript and statistics with it. A request for erasure empties every readable field attached to that person and keeps the rows empty, so a later sync cannot write them back.

Contact

Building Humanity Up, at livegrid.dev

Questions about this page, a request to see what is held about you, or a request to erase it: [email protected].

Put your calls on infrastructure you own.

Get in touch