Security & privacy

Ownership and access

• Recordings, transcripts and notes belong to the person who created them.
• On team plans, administrators manage members and billing. They cannot see members' recordings or transcripts.
• Content is shared only when you create a share link, share with someone by email, or start live sharing.
• We never sell your data or use your content for advertising.

Encryption

• Traffic between your devices and LecSync is encrypted with TLS (HTTPS and secure WebSockets).
• Audio files and uploaded documents are stored in Cloudflare R2, which encrypts data at rest with AES-256.

How AI processes your content

Content goes to a model only when a feature you use needs it.

• Speech recognition: Soniox, and our own speech models on GPU servers we operate.
• Real-time translation: Soniox and our own translation models.
• Spoken interpretation: our own speech synthesis models.
• AI notes, chat, terminology extraction and other AI features: our own models, and third-party models accessed through OpenRouter (including DeepSeek and Google Gemini).
• Voice typing cleanup: DeepSeek.

Where data is processed and stored

• Live audio is handled by the nearest LecSync real-time gateway, in the United States, United Kingdom, Japan, mainland China or Russia.
• Speech recognition by Soniox runs in its United States, European Union or Japan region, depending on the gateway.
• Our application servers and database are hosted by OVH in the United States.
• Audio files and documents are stored in Cloudflare R2 (some older files in Vercel Blob). Users in mainland China and Russia receive files through Alibaba Cloud's network.

Retention and deletion

• You can delete any recording. It moves to Recently Deleted, where it can be restored for 30 days; after that it is permanently deleted.
• Deleting your account deletes your recordings, transcripts and uploaded files.
• Uploaded documents can be deleted from their folder at any time.

Team administration

• The account owner adds and removes members and pays for the whole team in one place.
• Removing a member ends their paid access; their own recordings remain theirs.

Your rights and compliance

• LecSync is operated by HOPE AI LTD, registered in England and Wales, the data controller for personal data in the service.
• You can access, export, correct or delete your data. Email privacy@lecsync.com to exercise your rights under UK GDPR, EU GDPR or other applicable laws.
• Organizations can request a data processing agreement (DPA) or a completed security questionnaire from our sales team.

Subprocessors

Service providers that process personal data on our behalf.

Report a security issue

If you believe you've found a security vulnerability, email security@lecsync.com with steps to reproduce. We'll acknowledge your report and keep you updated.