Tveris Privacy Policy

Effective from: 23 July 2026 Version: 1.0

1. Data Controller

The controller of personal data processing is RR Network SIA, registration No. 40203590624, VAT registration No. LV40203590624, registered address: Zirņu iela 3-5, Riga, LV-1013, Latvia, e-mail: support@tveris.app (hereinafter — we or the Controller).

This privacy policy (hereinafter — the Policy) describes how we process personal data when providing the meeting assistant service Tveris, available at tveris.app (hereinafter — the Service). The Policy is an integral part of the Terms of Service. By registering for and using the Service, you confirm that you have read this Policy and consent to the data processing described in it, including the transfer of your data to third parties (processors) acting on the Controller's behalf.

Data processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter — GDPR) and the laws of the Republic of Latvia.

2. What Data We Process

2.1. Account data

First name, last name, e-mail address, account identifiers, and profile information that we receive from the identity management service provider when you sign in to the Service.

2.2. Calendar data

If you connect your calendar: calendar event titles, times, attendee names and e-mail addresses, the organizer, and joining links. The calendar is synchronized periodically (approximately every 15 minutes).

2.3. Meeting audio

Meeting audio recordings made by an automated recording tool, as well as audio files you upload manually. Audio may contain the voices and statements of both you and other meeting participants.

2.4. Transcripts with speaker identification

Text transcripts generated from audio, in which speakers are separated and may be identified by name (including through automatic speaker name assignment).

2.5. AI-generated content

Summaries (short and full), decisions, action items, quotes with references to the transcript, meeting type classification, and speaker mappings generated from transcripts by large language model tools.

2.6. Context you provide

Text that you save in the Service yourself (for example, a client profile or meeting context) and that is passed to artificial intelligence tools together with the transcript during processing.

2.7. Usage and technical data

Notification settings, product usage analytics data (for example, feature usage), website visit statistics, technical access information (for example, device and browser data), feature flag settings, and your cookie consent choices.

3. Purposes and Legal Bases of Processing

Regarding meeting participants who are not users of the Service, see Section 9.

4. Processors (Third Parties)

To provide the Service, we engage processors — service providers that process data on our behalf and under contracts that comply with the requirements of Article 28 GDPR. The processors fall into the following categories:

• cloud and hosting service providers — operating the Service and storing data;
• database service providers — storing structured data (accounts, meetings, transcripts, summaries);
• identity management service providers — sign-in and account authentication;
• automated meeting recording service providers — the recording tool (bot) joining video meetings and recording audio;
• automated transcription service providers — converting speech to text and separating speakers;
• artificial intelligence (large language model) service providers — generating summaries, decisions, action items, and other derived information from transcripts and the context you provide;
• e-mail delivery service providers — delivering notifications;
• product and web analytics service providers — analyzing Service and website usage and managing feature availability;
• consent management service providers — collecting, managing, and recording cookie consent.

We do not sell your personal data and do not transfer it to third parties for their own independent use, except where required by law (for example, at the request of a competent authority).

A current list of processors (by category) can be requested by writing to support@tveris.app.

5. Google User Data

If you sign in with a Google account or connect your Google Calendar, we access the following data from your Google Account via Google APIs:

• your Google Account e-mail address (scope userinfo.email) — for account identification and authentication;
• your Google Calendar events in read-only mode (scope calendar.events.readonly) — event titles, times, attendee names and e-mail addresses, the organizer, and video meeting joining links.

We use this data solely to (1) show you your upcoming meetings in the Service and (2) allow our automated recording tool (bot) to join scheduled video meetings at the correct time using the joining link specified in the event. We do not modify, create, or delete your Google Calendar events — access is read-only.

Google user data is not sold, not used for advertising, and not used to train artificial intelligence or machine learning models. It is not shared with third parties except the processors listed in Section 4, to the extent necessary to provide the Service.

Synchronized calendar data is stored for as long as your account exists or your calendar remains connected; when you disconnect your calendar or delete your account, it is deleted in accordance with Section 7. You can revoke access to your Google account at any time in your Google Account security settings (myaccount.google.com/permissions) or request deletion of your data by writing to support@tveris.app.

Tveris's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Transfers Outside the EEA

Some processors may process personal data in countries outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards in accordance with Chapter V of the GDPR — a European Commission adequacy decision or the standard contractual clauses (SCCs) approved by the European Commission, supplemented with additional protective measures where necessary.

Information about the safeguards applied can be requested by writing to support@tveris.app.

7. Retention Periods

After account deletion, your data is deleted or irreversibly anonymized within the periods indicated, except for data we are legally obliged to retain longer.

8. Your Rights

Under the GDPR, you have the right to:

• access your personal data and receive a copy of it (Article 15 GDPR);
• rectify inaccurate or incomplete data (Article 16 GDPR);
• erase data ("right to be forgotten") where the circumstances set out in Article 17 GDPR apply;
• restrict processing (Article 18 GDPR);
• data portability — receive your data in a structured, commonly used, machine-readable format (Article 20 GDPR);
• object to processing based on legitimate interests (Article 21 GDPR);
• withdraw consent at any time where processing is based on consent; withdrawal does not affect the lawfulness of processing carried out beforehand.

To exercise your rights, write to support@tveris.app. We will respond within one month (this period may be extended by a further two months in the cases provided for by the GDPR).

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Data State Inspectorate of Latvia (Elijas iela 17, Riga, LV-1050; www.dvi.gov.lv) or the supervisory authority of your member state of residence.

9. Data of Meeting Participants Who Are Not Users

Recorded meetings may include persons who are not users of the Service. These persons' voices, statements, names, and e-mail addresses (from calendar data) may appear in audio recordings, transcripts, and summaries.

Regarding the processing of such data:

• it is the User's obligation, under Section 5 of the Terms of Service, to inform all meeting participants about the recording and to obtain the consents required by law before recording;
• the Controller processes this data as part of providing the Service;
• a meeting participant who is not a user may contact us to exercise the rights listed in Section 8 by writing to support@tveris.app.

10. Shared Meetings

If several registered users of the Service participate in the same calendar event, a single recording is made, and the transcript and summary are made available to each of those users in their accounts. This means that the content of the meeting, including any personal information disclosed in it, will be visible to all registered users of that event. If you do not want the content of a particular meeting to be available to other participants, do not schedule it for recording or contact us.

11. Cookies and Analytics

11.1. What cookies are

Cookies are small text files that a website stores on your device. We use cookies and similar technologies that are necessary for the operation of the tveris.app website and the Service, as well as — only with your consent — for analytics purposes.

11.2. Consent management

We collect and manage cookie consent using the consent management platform CookieScript (cookie-script.com). When you first visit the website, you are shown a cookie notice in which you can accept or decline analytics cookies. Analytics cookies are not set until you have given consent. You can change or withdraw your choice at any time using the cookie settings link on the website. Consent choices (including the time of consent and the categories selected) are recorded so that we can demonstrate consent in accordance with Article 7(1) GDPR.

11.3. Strictly necessary cookies

These enable the core operation of the website and the Service — session maintenance, authentication, and storing your cookie preferences. They operate without consent, based on our legitimate interest in ensuring the secure operation of the website.

11.4. Analytics cookies (only with your consent)

With your consent (Article 6(1)(a) GDPR), we use:

• Google Analytics 4 (Google Ireland Limited) — for website visit statistics: pages visited, events, approximate location (city level), and device and browser data (cookies _ga, _ga_*). Data may also be processed by Google LLC (USA) on the basis of the EU–U.S. Data Privacy Framework. Retention period: up to 14 months. Information on how Google uses data from sites that use Google services: policies.google.com/technologies/partner-sites. You can also install the Google Analytics opt-out browser add-on.
• PostHog — for product usage analytics, feature availability management and session recordings (how pages are used — clicks, scrolling, navigation between pages); input fields are always masked in recordings, and inside the Service all text is masked too, so meeting content never appears in them; data is stored in the European Union.

11.5. Withdrawing consent

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. A current and detailed list of the cookies used (names, purposes, durations) is available in the website's cookie notice.

12. Data Security

We implement appropriate technical and organizational measures to protect data, including encrypted data transmission, access control, and restricting access to only those personnel and processors who need it to provide the Service. However, no method of data transmission or storage is absolutely secure; in the event of a personal data breach, we will act in accordance with the requirements of Articles 33 and 34 GDPR.

13. Changes to This Policy

We may update this Policy from time to time. We will inform you of material changes by e-mail or through a notice in the Service before the changes take effect. The current version of the Policy is always available at tveris.app.

14. Contact

For questions about personal data processing:

RR Network SIA Reg. No.: 40203590624 VAT Reg. No.: LV40203590624 Registered address: Zirņu iela 3-5, Riga, LV-1013, Latvia E-mail: support@tveris.app