Privacy Policy

BBDF Consulting LTD ("BBDF", "we", "us", or "our") operates MeetingStow, the MeetingStow website, purchase and download pages, and license validation service. We are the data controller for personal data processed through those services.

This policy does not make us the controller of meeting recordings created by a customer. Meeting content is stored and processed locally by the customer, and the customer is responsible for using that content lawfully.

1. Who we are

Our data protection contact is Federico Blancato. You can use the data protection address above for privacy questions or requests.

2. Meeting content stays local

MeetingStow stores recordings, transcript and recap files, people data, and settings on your Mac. Speaker diarization, transcription, voice matching, and recap generation run on your Mac. Recaps use Apple's on-device Foundation Models framework when Apple Intelligence is available. Voice templates are stored in an AES-GCM encrypted local archive, with the encryption key kept in macOS Keychain.

If you select the optional Qwen model, your Mac downloads the model from Hugging Face. That download discloses ordinary connection data, such as your IP address and request metadata, to Hugging Face, but it does not send your meeting audio to Hugging Face or to us. Apple may likewise receive ordinary connection data when macOS obtains system speech assets. Local processing is subject to the security and privacy behavior of macOS and the model provider.

Meeting content leaves your Mac only when you choose to move, export, share, back up, or otherwise transmit it.

3. Personal data we process

Purchase and delivery information

Stripe provides us with the purchaser's name and email address, Checkout Session and payment identifiers, product and price identifiers, payment status, refund or dispute status, and transaction time. We do not receive or store full payment card numbers.

We use this information to generate a license, provide a protected download link, send the license email, verify continued eligibility for downloads, and maintain accounting records. Our private Cloudflare R2 storage contains purchase entitlement records, hashed license lookup records, and a marker showing whether the delivery email was sent.

License activation and validation information

MeetingStow sends the entered license key and the following information to our license service when you activate the app and during later launch checks:

• a randomly generated installation identifier;
• whether the check is an activation or launch check;
• app version and build number;
• macOS version and processor architecture;
• Mac model identifier, processor count, and physical memory;
• locale and time zone; and
• network metadata supplied by Cloudflare, including IP address, user agent, approximate city, region and country, ASN, edge location, and Cloudflare request identifier.

We do not collect the Mac serial number, hostname, MAC address, advertising identifier, contact list, meeting content, or files during license validation. The installation identifier is random and is not a hardware fingerprint.

Support information

If you contact us, we process your email address, the contents of your message, attachments you choose to provide, and the information needed to resolve your request. Please do not send meeting recordings or transcripts unless they are necessary and you are authorized to share them.

Website and security information

Our hosting and security provider receives standard request information such as IP address, browser type, requested URL, timestamps, and security signals. MeetingStow does not currently use optional advertising or analytics cookies on its public website. Stripe may use necessary payment, security, and preference technologies on its hosted checkout under Stripe's own policy.

4. Why we process data

• Contract: to process purchases, provide the installer and license, validate the license, supply updates, and respond to customer requests.
• Legitimate interests: to prevent fraud and license abuse, secure the website and services, diagnose delivery or activation problems, and establish or defend legal claims.
• Legal obligations: to maintain tax, accounting, payment, and compliance records.

License validation automatically checks whether the associated Stripe purchase is paid, for the correct product, and not refunded or disputed. If a check is rejected and you believe that result is wrong, contact us for human review.

We do not sell personal data, use meeting content to train artificial intelligence models, or use license validation information for advertising.

5. Service providers and international transfers

We share personal data only as needed with providers that help operate MeetingStow:

• Stripe for hosted checkout, payment processing, fraud controls, refunds, and tax functions;
• Cloudflare for website hosting, security, serverless functions, and private release and entitlement storage;
• Brevo for transactional license and download email delivery;
• Hugging Face when your Mac downloads the optional Qwen speech model; and
• Apple for macOS platform services, Keychain, system speech assets, and on-device Foundation Models.

These providers may process data outside Cyprus or the European Economic Area. Where required, transfers are protected through adequacy decisions, standard contractual clauses, or another lawful transfer mechanism. We may also disclose information when required by law, to protect legal rights or safety, or as part of a corporate transaction subject to appropriate safeguards.

6. How long we retain data

• Local meeting data: controlled by you and retained on your Mac until you delete or move it.
• Purchase, entitlement, and license records: for the life of the license and afterward where reasonably necessary to provide proof of purchase, prevent fraud, or meet legal obligations.
• Billing and tax records: generally up to 10 years from the transaction, or longer if required for an audit or legal claim.
• License validation audit records: up to 12 months from each validation, unless a record is required longer to investigate abuse, a security incident, or a legal claim.
• Support correspondence: up to 24 months after the last interaction, unless a longer period is needed for an unresolved issue or legal obligation.
• Transactional email delivery records: for as long as needed to prevent duplicate delivery and support the associated license.

We may retain de-identified or aggregated information that can no longer reasonably identify you.

7. Your rights

Subject to applicable law, you may have the right to:

• access and receive a copy of your personal data;
• correct inaccurate or incomplete data;
• request deletion of data;
• restrict or object to certain processing;
• receive portable data where applicable; and
• lodge a complaint with a supervisory authority.

Email [email protected] to exercise a right. We may need to verify your identity using your purchase email, Stripe receipt, or license details. Some information may be retained where required by law or necessary to establish, exercise, or defend legal claims.

In Cyprus, you may contact the Office of the Commissioner for Personal Data Protection. You may also contact the supervisory authority where you live or work.

8. Security

We use HTTPS, restricted administrative access, encrypted secrets, private object storage, hashed license lookup keys, and signed access links. MeetingStow encrypts local voice templates and protects their key with macOS Keychain. No system is completely secure, so we cannot guarantee absolute security.

Protected download links and license keys should be kept private. Contact us promptly if you believe either has been exposed or misused.

9. Children

MeetingStow is a professional productivity product and is not directed to children under 16. We do not knowingly collect personal data from children through the purchase or license service without appropriate authorization.

10. Changes to this policy

We may update this policy when MeetingStow, our providers, or legal requirements change. We will publish the revised policy here and update the date above. Material changes will be communicated through the website, purchase email, or app where reasonably practical.

11. Contact

For privacy matters, email [email protected]. For product or purchase support, email [email protected].