Privacy Policy

Meeting Consent Addendum

This addendum describes data practices specific to the Overturo for Meetings integration with video conferencing platforms (Zoom, Microsoft Teams, Google Meet).

Data We Collect via Meeting Integrations

When a meeting host connects their video conferencing account to Overturo, we collect:

• Account identity: Your email address and display name from the connected platform, used to identify your account in the Overturo dashboard.
• Meeting metadata: Meeting title, scheduled time, meeting ID, and recurring series identifiers. This information is used to create consent flows that reference the correct meeting context.
• Participant consent decisions: When meeting participants interact with a consent flow, we record their consent decisions (accept, decline, or partial consent) for each stated purpose.
• Participant identity (optional): Participants may optionally authenticate during the consent flow. If they do, we associate their email address with their consent record.

Data We Do Not Collect

Overturo does not access, collect, store, or process:

• Meeting audio or video content
• Meeting recordings or transcripts
• Chat messages sent during meetings
• Screen sharing content
• Meeting passwords or host keys

How We Use Meeting Data

• Consent flow creation: Meeting metadata is used to generate consent flows that participants see before or during the meeting.
• Real-time dashboard: Meeting hosts see a live view of which participants have consented and to what purposes.
• Standing mandates: If a participant opts in, their consent decisions may apply to future meetings in the same series, reducing repeated consent prompts.
• Compliance records: Consent decisions are recorded with cryptographic signatures and tamper-evident audit trails for regulatory compliance (GDPR, CCPA, BIPA, EU AI Act).

Data Retention

Consent records are retained for the duration configured by the meeting host's account (default: 7 years, to meet common regulatory retention requirements). Meeting hosts can delete individual consent records at any time. Access tokens are deleted immediately when a user disconnects their video conferencing account.

Disconnecting Your Account

You can disconnect your video conferencing account from Overturo at any time via the Zoom integration settings page or by revoking access from your Zoom account settings. Disconnecting removes all stored access tokens. Existing consent records are retained as independent legal records per your account's retention policy.

Participant Rights

Meeting participants who have interacted with an Overturo consent flow can exercise their data rights (access, rectification, erasure, portability) by contacting the meeting host or by submitting a request to [email protected].