Privacy Policy
Last updated: November 2026
Data controller
Contact : 
Privacy Policy describing how LiveSuggest collects, uses, and protects personal data when you access or use the LiveSuggest service.
How LiveSuggest processes your data
LiveSuggest is a productivity tool for meetings. Here's how we process your data:
- Supported languages: English, French, German, Spanish, Italian, Portuguese, Dutch, Polish, Japanese, Chinese (Simplified), Korean, Turkish
- Data storage: Backend and database hosted by Fly.io in Frankfurt (Germany). Live session cache hosted by Upstash in Paris (France). The website runs on Cloudflare's global network, which also proxies all traffic to our API.
- Data retention: Audio: not stored by LiveSuggest (streamed to Gladia, job deleted at session end). Live session data: deleted at session end (15 min max). Transcripts and session reports (authenticated users): stored per plan (7, 30 or 180 days, unlimited on Pro); deletable anytime.
- Purpose: Productivity tool providing real-time AI suggestions during meetings.
How we handle your data
We are committed to protecting your privacy. Here's how we process your data:
Account data
If you create an account, we store your email address and a hashed password. This data is used only for authentication and subscription management.
If you sign in via Google OAuth, we also store your Google identifier.
After you create an account we may ask for your name and company (both optional), your country, the area you work in, your main goal with LiveSuggest, how many meetings you have in a typical week, the meeting platform you use most, and how you first heard about LiveSuggest. We use these answers to understand how the product fits different ways of working and to improve it. You can skip the questions, change your answers from your account, and they are deleted with your account. If you choose Other, the short text you type is stored with your account and included when you export your data. It is not included in marketing reports.
Usage data
We also collect:
- Credits and consumption: to manage your subscription
- Language preferences: to personalize the interface
Audio data
Audio is not stored by LiveSuggest. It is streamed in real time to our EU-hosted transcription provider, Gladia, and the transcription job is deleted when the session ends. AI suggestions are generated by your chosen AI provider (OpenAI, Google Gemini, or Anthropic Claude); when an OpenAI model is used, OpenAI retains API data for up to 30 days for abuse monitoring. None of them use API data to train their models.
Recording Consent
LiveSuggest is designed with transparency and respect for all participants. Before any audio processing begins, we ask that you confirm all participants are aware and agree to the use of this tool. Consent can be revoked at any time by stopping the session.
Session data
During a live session, the live transcription is deleted when the session ends (or within 15 minutes if disconnected). For authenticated users, LiveSuggest also generates an AI session report (summary, key points, transcript text), produced by Anthropic Claude, and stores it in your account history according to your plan. The transcript is kept with the report for your plan's retention period (7 days on Free, 30 on Basic, 180 on Plus, unlimited on Pro), even if the report could not be generated, and you can delete it at any time. Pro users who enable the option also receive this report by email, with the transcript attached, delivered through our email provider Resend. Guest sessions are not stored.
For authenticated sessions of 500 words or more, Anthropic Claude also classifies the session from its transcript (use case, estimated number of participants, language). Only these labels are kept with your account, not the transcript content.
Uploaded documents
You can optionally upload documents (PDF, DOCX, text files) during a session to give the AI more context. Here's how it works:
- Text extraction happens entirely in your browser. The original file never leaves your device.
- Only the extracted text (up to 8,000 characters per document, max 3 documents) is sent to our server and temporarily stored in session memory
- This text is included in AI prompts sent to your chosen AI provider (OpenAI, Google Gemini, or Anthropic Claude). None of them use API data to train their models.
- All document text is deleted when the session ends, following the same retention rules as other session data (15 minutes max)
- No document content is ever permanently stored on our servers
Payment data
Payments are processed by Lemon Squeezy, our Merchant of Record. We never store your credit card information. Lemon Squeezy collects and processes your payment data in accordance with its own Privacy Policy.
Data usage
We use your data only to:
- Provide and improve the LiveSuggest service
- Manage your account and subscriptions
- Contact you regarding your account or important service updates
- Comply with our legal obligations
We never sell your personal data to third parties.
Data sharing
Sub-processors: these providers process personal data on our behalf and only on our instructions.
| Sub-processor | Purpose | Location |
|---|---|---|
| Gladia | Real-time audio transcription (all sessions) | European Union |
| OpenAI | AI suggestions (when an OpenAI model is selected) | United States |
| Google (Gemini) | AI suggestions (when Gemini model is selected) | United States |
| Anthropic | AI suggestions (when a Claude model is selected), post-session report generation (all authenticated sessions, regardless of the suggestion model) and session classification (authenticated sessions of 500 words or more) | United States |
| Fly.io | Backend hosting (API and WebSocket) and PostgreSQL database | European Union (Frankfurt, Germany) |
| Upstash | Live session cache (session context, transcript, uploaded document text; deleted at session end or within 15 minutes) and rate-limit counters | European Union (Paris, France) |
| Cloudflare | Website hosting, DNS, and security proxy for all traffic to our API (HTTP and WebSocket, including the audio stream). Traffic is encrypted in transit and decrypted at Cloudflare's edge to apply these protections. | Global network (company based in the United States) |
| Resend | Email delivery: account and security emails, product emails, contact form messages and session report emails (Pro, opt-in) | United States |
| Better Stack | Centralized technical logs (may contain pseudonymous identifiers and partially masked IP and email addresses) | European Union (Germany) |
Independent controllers: these providers process your data for their own purposes, under their own privacy policies.
| Provider | Purpose | Location |
|---|---|---|
| Lemon Squeezy | Merchant of Record: payment, invoicing and sales tax for subscriptions; affiliate program | United States |
| Sign in with Google (optional) | United States |
These tables list our sub-processors and the independent controllers involved in the service. We update them when a sub-processor is added or replaced. Our Data Processing Agreement (DPA), available on request through the contact form, contains the same list of sub-processors.
Some of these providers are based outside the European Economic Area, mainly in the United States, or may access data from there. These transfers are subject to Chapter V of the GDPR and rely, depending on the provider, on an adequacy decision (including the EU–U.S. Data Privacy Framework for certified companies) or on Standard Contractual Clauses. You can ask us which safeguard applies to a given provider through the contact form.
Data retention
Retention periods:
| Data type | Retention period |
|---|---|
| Account data | Until account deletion |
| Audio data | Not stored by LiveSuggest (streamed to Gladia, job deleted at session end) |
| Transcriptions | Live transcription deleted at session end (15 min max). For authenticated users, the full transcript is stored with the session report for the plan's retention period (see Session reports). |
| Session reports | 7 days (Free), 30 days (Basic), 180 days (Plus), unlimited (Pro). Deleted when you delete the report or your account |
| Uploaded document text | Deleted at session end (15 min max). Original file never leaves the browser. |
| Payment data | Managed by payment processor according to their policy |
| Technical logs | 90 days before anonymization (audit and consent logs), 30 days for guest balances, 90 days for processed webhooks |
Your rights (GDPR)
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: obtain a copy of your personal data
- Right of rectification: correct inaccurate data
- Right to erasure: request deletion of your data
- Right to portability: receive your data in a structured format
- Right to object: object to the processing of your data
- Right to withdraw your consent: at any time for processing based on consent
Export your data: You can download your account data in JSON format directly from your account page.
Delete your account: You can permanently delete your account and all your data directly from your account page. This action is irreversible.
To exercise these rights, contact us at:
You can also file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): https://www.cnil.fr
Security
We implement appropriate technical and organizational measures to protect your data:
- HTTPS encryption for all communications
- Passwords hashed with bcrypt
- Secure hosting with Fly.io and Cloudflare
- Restricted access to personal data
Minors
LiveSuggest is not intended for persons under 18 years of age. We do not knowingly collect personal data concerning minors.
Modifications
We may update this privacy policy. In case of significant changes, we will inform you by email.