Always Encrypted

Privacy Policy

Last updated: November 2, 2026

Privacy is the product. Always Encrypted is operated by Start My Business Incorporated, which acts as the data controller (or equivalent role under local law) for the minimal data described here. This policy is written to satisfy the privacy regimes of the jurisdictions we operate in — including the EU/EEA and UK GDPR, California's CCPA/CPRA, Illinois' BIPA, and the laws of the other major commerce hubs — and applies worldwide.

1. Privacy-first design

The service is engineered so that the least possible information about you exists anywhere: anonymous accounts (username and password only — no email, no phone; name and organization optional), meetings with no visitor logs, call media never stored on our servers, local-first signal tooling, and voice anonymization available to every participant on every tier.

2. No third-party sharing

We do not share any lists except through our own network of companies, and there are no third parties that get anybody's information. No sale, rental, trade or brokering of personal data; no advertising networks; no data brokers; no cross-context behavioral advertising; no analytics trackers. Within the meaning of the CCPA/CPRA, we do not sell or share personal information.

3. What we collect

4. Meetings & communications

Guests join by link with no account, no download and no visitor log. Media is encrypted in transit and end-to-end encrypted between participants on supported browsers. Dropped connections leave nothing behind. Recording is host-controlled with mutual consent signaling; recordings made by participants remain with participants. Server-side live translation, where enabled, necessarily processes plaintext audio for the translation path only and does not retain it.

5. Voice & biometric information

Your voice is biometric data. Our voice anonymizer remaps pitch, formants and cadence on your device so that audio defeats forensic voice analysis. We do not maintain voiceprint databases, do not perform voice identification, and do not collect biometric identifiers within the meaning of the Illinois Biometric Information Privacy Act (BIPA) or similar statutes. Where a statute nonetheless applies, written consent is obtained through the E-Sign Consent before any biometric-capable feature is enabled.

6. Signal-intelligence tooling

Field radar, perimeter nodes and related tools are local-first: scanning, baselines, watch lists and logs stay on your device. Passive wireless metadata observed by your devices is not transmitted to us. Optional AI-assisted debrief exports occur only when you deliberately export to a tool of your choice.

7. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, our legal bases are: performance of a contract (providing the service you engaged); legitimate interests (security, fraud prevention, minimal operational logging — balanced against the service's minimal-data design); consent (optional fields, marketing contact); and legal obligation (tax and accounting records where a payment occurs).

8. Your rights — EEA/UK/Switzerland

You have the rights of access, rectification, erasure, restriction, portability, and objection, the right to withdraw consent, and the right to lodge a complaint with your supervisory authority. Because accounts carry no email or phone, identity verification for rights requests is handled through your in-account channel. Our minimal-data design means some requests are trivially satisfied: most of the data these rights contemplate simply does not exist.

9. Your rights — California (CCPA/CPRA)

California residents have the right to know, delete, correct, opt out of sale or sharing (we do not sell or share), limit use of sensitive personal information (we do not use it), and not be discriminated against. Submit requests through your in-account channel or [email protected]; authorized agents may act with written authorization. We do not have "actual knowledge" of any consumer's identity beyond what they deliberately provide.

10. Your rights — other U.S. states

Residents of Illinois, New York, Virginia, Colorado, Connecticut, Texas and other states with comprehensive privacy laws are extended the same rights of access, correction, deletion and portability described above, and the same no-sale, no-sharing commitments. Illinois residents: see Section 5 regarding biometrics.

11. Your rights — other jurisdictions

Canada (PIPEDA and provincial acts), Brazil (LGPD), Singapore (PDPA), Japan (APPI), Australia (Privacy Act 1988 and APPs), the UAE, and other jurisdictions in which we operate: equivalent access, correction and deletion rights are honored on request, and local representative or registration requirements are observed where applicable.

12. International transfers

Infrastructure is distributed and engagements are multi-jurisdictional. Where personal data crosses borders, transfers rely on adequacy, standard contractual clauses, or derogations for contract performance, as applicable. The dominant design control is minimization: anonymous accounts and logless meetings leave almost nothing that can be transferred.

13. Retention & deletion

Waitlist entries are retained until you ask us to remove them or the list is retired. Account data is retained while the account is active. Operational logs rotate out on a short cycle. Call media is never retained. Deletion requests are honored promptly and confirmed; backups, where they exist, expire on their normal rotation.

14. Security

Encryption in transit and end-to-end for meetings; encrypted-at-rest storage for account data; segregated infrastructure; access limited to vetted personnel under confidentiality obligations; no third-party processors for lists or identities. No method is perfectly secure; our answer is to hold almost nothing that would be worth taking.

15. Cookies & tracking

The public site uses no advertising or analytics cookies. Strictly necessary technical storage (for example load balancing and security tokens) may be used. We honor Global Privacy Control signals where applicable.

16. Law-enforcement & legal process

We comply with valid legal process in the jurisdiction to which it properly applies. Because of our minimal-data design, the truthful answer to most demands is that the requested records do not exist. We do not build backdoors, and we do not weaken encryption.

17. Children

Services are business-to-business and not directed to children. We do not knowingly collect children's data.

18. Automated decision-making

Automations act under your configuration (purchasing, booking, communications, translation, anonymization). We do not make decisions producing legal or similarly significant effects about you solely by automated means without human review by your assigned operator.

19. Data protection contact

Privacy contact and, where required, representative or DPO functions: [email protected]. We respond to rights requests within the statutory period of the requesting jurisdiction.

20. Changes

Changes are posted here before they take effect, with the revision date above. Material reductions of your protections will never be applied retroactively.