Legal

Privacy Policy

How we collect, use, store and protect your information.

Wirenode s.r.o. ("we," "us," "our") respects your privacy. This Privacy Policy explains how we collect, use, store and protect your information when you use echo99 (the "Service"). By using the Service you agree to the practices described below.

1. Information We Collect

When you sign up for and use echo99 we may collect:

  • Account information: your name, email address and organisation details.
  • OAuth data: when you sign in via Google or Microsoft, we receive your profile information (name, email address, profile picture) from these providers to create and maintain your account.
  • Meeting content: audio and video recordings, transcripts and summaries of your calls.
  • Usage data: information about how you interact with the Service, such as feature usage and access times.

2. How We Use Your Information

We use the information we collect to:

  • Deliver, operate and maintain the Service, including recording meetings and generating transcripts and summaries.
  • Provide customer support and respond to inquiries.
  • Improve and develop the Service based on aggregated and anonymised usage patterns.
  • Communicate with you about updates, security alerts and administrative messages.

We do not sell your personal data or use your meeting content to train large language models. Your recordings, transcripts and summaries are used solely for providing the Service to you.

3. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

  • Contract performance: Processing is necessary to provide the Service to you, including recording meetings, generating transcripts and summaries, and maintaining your account.
  • Legitimate interest: We may process data for purposes such as improving and securing our Service, preventing fraud, and understanding usage patterns, where our interests do not override your fundamental rights and freedoms.
  • Consent: Where required, we will obtain your explicit consent before processing, such as for optional marketing communications. You may withdraw consent at any time.
  • Legal obligation: We may process data where necessary to comply with legal obligations, such as tax and accounting requirements.

4. Data Storage & Security

Your data is stored on secure servers located within the European Union. We use encryption at rest and in transit to protect your recordings, transcripts and summaries. Access to your data is restricted to authorised personnel who require it to operate the Service.

5. Data Retention & Deletion

We retain your meeting content for as long as you maintain an account or as needed to deliver the Service. You can delete your recordings and associated data at any time through the Service interface.

Upon account closure:

  • Recordings, transcripts and summaries will be permanently deleted within 30 days.
  • Account data (name, email) will be deleted unless we are required to retain it for legal or regulatory purposes.
  • Financial records (invoices, payment history) may be retained for up to 10 years as required by tax and accounting regulations.

6. Sharing & Disclosure

We do not share your meeting content with third parties except:

  • When it is necessary to provide the Service (for example, connecting to Zoom, Microsoft Teams or Google Meet via their APIs).
  • If required by law or legal process.
  • To protect our rights or the rights of others, such as investigating fraud or security issues.

7. Sub-processors & Service Providers

We use the following third-party service providers to operate the Service:

  • Recall.ai (USA) – Meeting recording infrastructure. Recall.ai joins meetings on our behalf to capture audio and video.
  • Amazon Web Services (EU – Frankfurt) – Cloud infrastructure and data storage. Your recordings and account data are stored on AWS servers in the European Union.
  • Google (USA) – OAuth authentication provider. If you sign in with Google, we receive your basic profile information.
  • Microsoft (USA) – OAuth authentication provider. If you sign in with Microsoft, we receive your basic profile information.

8. International Data Transfers

Your primary data (recordings, transcripts, summaries) is stored within the European Union on AWS servers in Frankfurt, Germany.

However, some processing may occur through US-based services, particularly Recall.ai for meeting recording. Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission.
  • Data Processing Agreements with our service providers that include appropriate security and confidentiality obligations.

9. Your Rights

If you are located in the European Economic Area or another jurisdiction with similar laws, you have the following rights over your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can request that we correct inaccurate or incomplete data.
  • Right to erasure: You can request that we delete your personal data in certain circumstances.
  • Right to restrict processing: You can request that we limit how we use your data.
  • Right to object: You can object to processing based on legitimate interest.
  • Right to data portability: You can request your data in a structured, machine-readable format and transfer it to another service.

To exercise these rights, please contact us at support@echo99.app.

You also have the right to lodge a complaint with a supervisory authority. For users in the Czech Republic, this is the Office for Personal Data Protection (ÚOOÚ) at www.uoou.cz.

10. Automated Processing

echo99 uses artificial intelligence to process your meeting recordings and generate transcripts and summaries. This automated processing is essential to providing the Service.

We do not make any automated decisions that have legal or similarly significant effects on you based solely on automated processing. All automated outputs (transcripts, summaries) are informational tools provided for your convenience.

If you have concerns about automated processing or would like human review of any automated output, please contact us at support@echo99.app.

11. Children's Privacy

The Service is not intended for users under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us immediately at support@echo99.app. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we will take steps to delete that information.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

  • Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible and required by law.
  • Notify affected users without undue delay if the breach is likely to result in a high risk to their rights and freedoms.
  • Document all breaches, including the facts, effects, and remedial actions taken.

13. Cookies & Tracking

We may use cookies and similar technologies to remember your preferences and analyse how you interact with our website. You can manage your cookie preferences through your browser settings.

14. Third-Party Services

echo99 integrates with third-party conferencing platforms (e.g., Zoom, Microsoft Teams, Google Meet). When you connect these services, you authorise us to share necessary information with them to facilitate meeting recordings and transcripts. These third-party services are governed by their own privacy policies.

15. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. By continuing to use the Service after any changes take effect, you agree to the revised policy.

16. Data Controller & Contact Us

The data controller responsible for your personal data is:

Wirenode s.r.o.
Za navsi 2450/11
Prague 10, 104 00
Czech Republic

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@echo99.app.

Last updated: January 25, 2026