Privacy Policy

This policy covers the Si-Des Meet website, web app, desktop apps and Android app operated by Si-Des Tech in Kigali, Rwanda.

Account details from Si-des Auth when you sign in (name, email). We never see or store your password.

Meeting settings you create: title, schedule, passcode, participant limit, guest email addresses you enter for invitations, and access rules.

Basic technical data needed to enforce access rules you or an administrator switch on: approximate country, device type, browser and operating system.

A hashed device identifier (see “Device identifiers”), used for rate limits, device bans and a short badge shown to other participants.

Reports you send about other participants (category, details, optional evidence) and role-play practice sessions you run (transcript, scores and feedback).

Messages you send through the contact form. They reach us by email and are not stored in our database.

Preferences such as language and theme: saved to your account when you are signed in, and in your browser or app otherwise.

We do not sell data, show ads, or use advertising or analytics trackers.

We do not record meetings unless the host starts a recording, and we do not inspect audio, video or chat content.

Audio and video travel over encrypted WebRTC (DTLS-SRTP) through our media provider, LiveKit, and are not stored by default.

In an end-to-end encrypted meeting, audio, video and in-meeting messages are encrypted on your device with a key we never receive, so neither we nor our media provider can read them. Metadata such as names, IP addresses and connection times remains visible to the servers involved.

Chat and Q&A history is kept only in your browser while you are in the meeting, and is deleted when you leave, the meeting ends, or you close the tab. Stray data from meetings you did not close cleanly is removed the next time you open the app.

When the host invites the AI assistant, spoken audio and messages directed at it are sent to the AI providers configured by the platform administrator (for speech recognition, language models and screen understanding) to produce a response. It joins only when invited and can be removed at any time.

AI-assisted meetings cannot be end-to-end encrypted. If you want the strongest privacy, do not invite the assistant.

Captions: your browser turns your speech into text and shares only that text with the room. Depending on your browser, speech recognition may be performed by a cloud service run by the browser vendor under its own policy.

Translation: when your browser can translate on-device, the text stays on your device. Otherwise the text is sent to our server and processed by an AI provider to translate it. In end-to-end encrypted meetings this server route is off unless you opt in. Translated text is not saved in our database.

To limit abuse, your browser computes a visitor identifier with the open-source FingerprintJS library. Our server converts it into a keyed hash straight away and does not store the raw value. The hash is used for per-device rate limits, for blocking a removed participant’s device from a room for a limited time, and for a short badge shown to other participants.

It is not used for advertising or to follow you across other sites. Using a private window or clearing site data produces a different identifier, which may weaken abuse protection for you.

One essential cookie keeps you signed in. Your browser also stores small preferences (language, theme) and, during a meeting, the temporary join details for that meeting. See the cookie section of the documentation for details.

Local storage and session storage hold preferences (language, theme, display options), temporary join details and, in encrypted meetings, the meeting key for that tab. They stay on your device. We use no advertising or analytics cookies.

If a host adds your address as an invitee, you receive the invitation and any reminder they enabled. Each email states why you received it. Ignore it and nothing further happens.

Service providers help us run the platform: hosting for the website and API, a database provider, LiveKit for real-time media, an email (SMTP) provider, Si-des Auth for sign-in, and AI model providers for the assistant and the translation fallback. They act on our behalf to provide those services.

We do not sell personal data. We may disclose information when the law requires it.

The Security page lists what we store, where, and for how long, including what is not deleted automatically.

Si-Des Tech is based in Rwanda. Our providers may process data in other countries, and meeting participants can be anywhere in the world. Where the law requires safeguards for such transfers, we aim to put them in place. This section needs legal review before anyone relies on it.

You can ask to see or delete your account data by contacting us. Guests can join without an account and can leave at any time; leaving clears the meeting data from their browser.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, to withdraw consent, and to complain to your data-protection authority. Contact us and we will respond within a reasonable time; we may need to verify your identity first.

Si-Des Meet is not directed at children under 13 and we do not knowingly collect their personal data. Where local law sets a higher age for digital consent, that age applies. Schools and parents who use the service with children are responsible for supervising its use and for having a lawful basis.

We may update this policy. The date at the top shows the latest version, and we will point out material changes on this page.