Privacy Policy
Last updated: 11 July 2026
This Privacy Policy explains how NVM Apps ("we", "us") collects, uses, and protects information when you use NVM Assemble (the "Service"). By using the Service you agree to this Policy.
1. Information we collect
- Account information — your name, email address, and profile photo, provided when you sign in with Google or Microsoft.
- Meeting content — chat messages, and, where the host enables it, audio for transcription and the resulting transcript text.
- Usage & security data — session participation, device identifiers, IP address, browser/user-agent, and audit logs of key actions.
2. How we use information
We use information to: operate and provide the Service (host meetings, deliver chat, generate transcripts and summaries); authenticate you and secure accounts; enforce device limits and moderation; send service emails (such as reminders and summaries); maintain security and audit logs; and comply with law.
3. AI processing
To provide transcription, meeting Q&A, and summaries, meeting audio and transcript text are processed by our AI provider (Groq) over encrypted connections. We minimise what is sent: only audio is sent for transcription (never your video), and personal identifiers (such as emails and phone numbers) are redacted from transcript text before it is used for Q&A or summaries. AI output may be inaccurate.
4. Recording and transcripts
A meeting host/admin may record a session and enable transcription. Recordings and transcripts are used to provide the Service (for example, post-meeting review and summaries). By joining a meeting you acknowledge recording and transcription may occur. Where your local laws require participant consent, hosts are responsible for obtaining it.
5. How information is shared
We do not sell your personal information. We share information only with service providers that help us run the Service, under appropriate safeguards:
- Supabase — database, authentication, and hosting of your data.
- LiveKit — real-time audio/video transport.
- Groq — AI transcription and language processing.
- Google / Microsoft — sign-in (authentication).
- Resend — transactional email.
- Vercel — application hosting.
6. Cookies and local storage
We use strictly necessary cookies and browser storage to keep you signed in, remember your theme and preferences, and maintain a per-device identifier for the device limit. We do not use advertising cookies.
7. Data retention
We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion (see "Your rights").
8. Security
We protect data in transit with TLS/HTTPS, enforce row-level access controls on our database, restrict administrative keys to server-side use, and log sensitive actions. No method of transmission or storage is 100% secure, but we work to protect your information.
9. Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at contact@nvmapps.com.
10. International transfers
Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.
11. Children
The Service is not directed to children below the age required by applicable law without appropriate consent. If you believe a child has provided us information without proper consent, contact us and we will take appropriate steps.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
13. Contact
For any privacy questions or requests, contact us at contact@nvmapps.com.