Privacy policy

This Privacy Policy explains how Lomer handles personal information when you visit our website, create an account, schedule or join a meeting, make a recording, or otherwise use Lomer (the “Service”).

For account, website, security, and service administration data, Lomer determines why and how that information is processed. For meeting content and recordings created at a host's direction, the host decides the purpose of the recording and Lomer processes that content to provide the Service. Hosts may need to provide their own privacy notice to participants.

We collect the following categories of information:

• Account information: name, email address, password credentials in protected form, profile image, email verification status, and linked sign-in provider details.
• Meeting and scheduling information: meeting titles, dates, times, time zones, recurrence settings, descriptions, room codes, guest email addresses, and meeting attendance details.
• Recording content: audio, video, display names, separate participant tracks, combined recordings, and technical information needed to upload, process, recover, stream, and download recordings.
• Device and usage information: IP address, browser and device information, session identifiers, timestamps, connection state, upload progress, file size, media format, and diagnostic information generated when the Service is used.
• Communications: information you provide when you contact us or respond to service and account emails.

Lomer records each participant locally in that participant's browser so the final quality does not depend only on the live connection. During a recording, browser-managed storage may temporarily hold media chunks and upload state. Those chunks are uploaded to Lomer's storage and processed into individual and combined video files.

If an upload is interrupted, local browser data may remain available for recovery. Clearing browser storage, using private browsing, or removing the local data before recovery may make that recording unrecoverable.

The meeting host controls when recording starts and receives access to the resulting files. Participants should direct questions about why a meeting is being recorded or how the host will use a recording to that host.

Google Sign-In is optional. If you choose “Continue with Google,” “Sign up with Google,” or link Google to an existing Lomer account, Google asks you to authorize Lomer to receive basic identity information. Lomer requests only the standard openid, email, and profile permissions needed for authentication.

Through those permissions, Lomer may receive:

• your unique Google Account identifier;
• your email address and whether Google has verified it;
• your display name, given name, and family name; and
• your Google profile picture URL.

To maintain the connection securely, our authentication system may also receive and store the OAuth scopes granted, an ID token, an access token, a refresh token if Google issues one, and their expiration times. Lomer never receives your Google password.

Lomer does not request or access your Gmail, Google Drive, Google Calendar, Google Contacts, or other Google content. The “Add to Google Calendar” feature opens a pre-filled Google Calendar webpage in your browser. It does not give Lomer access to read, create, change, or delete events in your Google Account.

We use information received from Google only to:

• create or link your Lomer account;
• authenticate you and maintain your signed-in session;
• populate your Lomer name, email address, and profile picture; and
• prevent account abuse, investigate authentication failures, and protect the Service.

We do not use Google user data for advertising, credit decisions, data brokerage, profiling unrelated to authentication, or training artificial intelligence models. We do not sell Google user data.

Google user data is shared only with infrastructure and authentication service providers that process it for us under contractual restrictions, or when disclosure is required by law, needed to protect users and the Service, or directed by you. Service providers may not use that data for their own advertising or unrelated purposes.

Lomer's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Google profile data and the linked Google account identifier are stored in Lomer's account database. OAuth tokens returned by Google are stored with the linked account record and are available only to the authentication service and authorized systems that need them to sign you in and secure your account. Data is encrypted in transit using HTTPS.

We retain Google user data while your Google account remains linked to an active Lomer account. Expired or replaced authentication tokens may remain in protected backups for a limited period before those backups are overwritten. We may retain a minimal record when required for security, fraud prevention, dispute resolution, or legal compliance.

You can revoke Lomer's Google access at any time from your Google Account's third-party connections page. Revoking access prevents future Google access, but it does not by itself delete information already stored in your Lomer account.

To delete Google-derived data from Lomer, email [email protected] from the email address associated with your account and use the subject “Delete my Google data.” You may request deletion of only the linked Google data or your entire Lomer account. We will verify the request, delete the applicable profile data, linked-account record, and stored OAuth tokens within 30 days, and confirm completion, except for data we must retain for legal or security reasons.

Deleting or disconnecting Google data does not automatically delete a recording controlled by another meeting host. Contact that host about a host-controlled recording and copy [email protected] if you need our assistance.

We use personal information to:

• provide live meetings, scheduling, local recording, uploads, processing, recovery, playback, and downloads;
• create and secure accounts, authenticate users, and support Google sign-in where selected;
• send password resets and important account, security, and service messages;
• maintain, troubleshoot, protect, and improve the reliability of the Service;
• prevent fraud, misuse, and security incidents, and enforce our Terms of Use; and
• comply with law and respond to valid legal requests.

Where applicable law requires a legal basis, we rely on performance of our contract, our legitimate interests in operating and securing the Service, consent where requested, and compliance with legal obligations.

We may share information with:

• Hosts and participants: display names, meeting status, and meeting content are shared as needed to conduct the call. Recordings and download access are made available to the meeting host.
• Service providers: providers that support cloud hosting, database services, media storage and delivery, video processing, email delivery, authentication, networking, and security. They may process information only to perform services for us and under appropriate contractual protections.
• Third-party sign-in providers: if you choose Google Sign-In, Google processes information under its own privacy terms. The Google data Lomer receives and the limits on our use of it are described in the Google-specific sections above.
• Legal and safety recipients: regulators, courts, law enforcement, or other parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, and the integrity of the Service.
• Business transaction recipients: advisers and a successor in connection with a financing, reorganization, acquisition, or sale, subject to appropriate safeguards.

We do not sell personal information or use meeting recordings for targeted advertising.

Lomer uses cookies and similar browser storage that are necessary to keep you signed in, protect account sessions, remember operational state, and recover recording uploads. The website may also request media through hosting and content-delivery providers, which receive standard network information such as an IP address and user agent.

Blocking essential cookies or browser storage may prevent sign-in, meetings, or recording recovery from working correctly.

We retain account, meeting, and recording information for as long as reasonably necessary to provide the Service, follow the host's instructions, maintain security and business records, resolve disputes, and comply with law. Different categories may have different retention periods.

Temporary recording files may be removed after upload or processing, while completed recordings and related metadata may remain until they are deleted under the host's plan or instructions. Backup copies may persist for a limited period before being overwritten.

Lomer and its service providers may process information in countries other than the country where you live. Where required, we use recognized safeguards for international transfers, such as contractual protections, and apply the protections described in this policy.

We use technical and organizational safeguards designed to protect information, including access controls, protected account credentials, time-limited recording links, and restricted storage access. No online service can guarantee absolute security. Keep meeting links and account credentials private, and tell us promptly if you suspect unauthorized access.

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information; object to certain processing; withdraw consent; or appeal a decision. You may also have the right to complain to a local data protection authority.

Account holders can update certain profile and meeting information through the Service. For other requests, email [email protected]. We may need to verify your identity. If your request concerns a host's recording, contact the host first; we will assist the host where required.

The Service is not directed to children under 16, and children may not create accounts. A host who invites or records a minor is responsible for obtaining consent from a parent or guardian and meeting all applicable legal requirements.

We may update this policy as the Service or law changes. We will post the revised version here, update the effective date, and provide additional notice when required.

For privacy questions or requests, email [email protected]. Please include “Privacy request” in the subject and do not send passwords, OAuth tokens, or recording files by email.