Meet.it is a video classroom for language conversation classes. After a lesson, students who agreed to be recorded receive a speaking diagnostic. This policy explains what personal data we process to make that work, on what basis, and how you can exercise your rights. It applies to teachers, students and visitors of the website.
1. Who is responsible
The data controller is [Company name — legal form], [Registered address]. You can reach us at . When a school or teacher uses Meet.it with their own students, the school remains responsible for the lawfulness of the class itself (enrolment, parental authorisations where required); we process the data on the terms described here.
2. What we collect
- Account data — email address, display name, role (teacher, student or administrator), and the date you answered the recording question.
- Class data — class names, the list of student emails a teacher adds to a class, lesson titles, dates and durations, attendance.
- What happens in a lesson — chat messages, polls and answers, raised hands, reactions and engagement signals (speaking time, turns, “how's the pace” answers). These are needed to run the lesson and to produce the teacher's report.
- Your voice, only with consent — for students who said yes, the audio of their own microphone during lessons, including small-group rooms. Video is never recorded. Nothing is captured for students who said no.
- The diagnostic — transcripts of consented audio, the estimated level (CEFR), scores on four axes, a pronunciation review (listen-back snippets, never scored), quoted errors with corrections, vocabulary used, and the recommendations derived from them.
- Technical data — IP address and browser information in server logs, used for security, abuse prevention and rate limiting (for example on the waiting list form).
- Audience measurement — Vercel Web Analytics and Speed Insights record page views and performance metrics (page, referrer, country, device type, browser, load times) without cookies and without any identifier that follows you across sites. Individual visitors are not identified.
- Waiting list — the email address you leave on the website, and the time you left it.
3. Why, and on what legal basis
- Running the classroom and the accounts — performance of the service you or your school asked for (GDPR art. 6(1)(b)).
- Recording your microphone and producing your diagnostic — your explicit consent (art. 6(1)(a)), asked once before your first lesson and changeable at any time in your settings. Withdrawing consent stops future recordings and ends your teacher's access to your existing audio; it does not undo processing that already took place.
- Security, logs and rate limiting — our legitimate interest in keeping the service safe (art. 6(1)(f)).
- Audience and performance measurement — our legitimate interest in understanding how the website is used (art. 6(1)(f)); the measurement is cookieless and aggregated, which is why it needs no consent banner.
- Waiting list and contact — your consent when you submit the form (art. 6(1)(a)).
We do not use your data for advertising, and we do not sell it.
4. Who can see what
- A student sees their own diagnostics and can listen to their own flagged excerpts.
- A teacher sees the reports of the lessons they ran: attendance, participation, and the diagnostics of the students in that class. They can listen to a student's flagged excerpts only while that student's consent is active.
- An administrator of your school's workspace can manage teacher accounts and classes.
- Other students never see your diagnostic or your recordings.
5. How long we keep it
- Microphone recordings — deleted 90 days after the lesson. The written diagnostic is kept; the audio is not.
- Diagnostics, transcripts and lesson reports — kept while your account exists, so that progress can be followed from one lesson to the next.
- Account and class data — kept while the account exists, then deleted on request or when the school's pilot ends.
- Login links — valid for 15 minutes and single-use. Sessions expire after 30 days of inactivity.
- Waiting list — until we contact you or you ask us to remove you.
- Server logs — a few weeks, for security purposes only.
6. Processors we rely on
We use a small number of providers to run the service. They only process data on our instructions.
- Vercel Inc. — Hosting of the web application (front end) · United States / EU edge
- [Backend host — region] — Hosting of the API and database · [Region]
- LiveKit — Real-time audio and video during lessons · [Region of the LiveKit deployment]
- [Object storage provider] — Storage of microphone recordings (S3-compatible bucket) · [Region]
- Soniox — Speech-to-text and language identification of consented recordings (deleted from Soniox right after processing) · United States
- OpenRouter (DeepSeek) — Language analysis of transcripts (diagnostic) · United States
- Resend — Transactional email (login links, invitations) · United States
Speech-to-text and language analysis providers receive the consented audio and its transcript for the time needed to process them. Where a provider is located outside the European Union, the transfer relies on the European Commission's standard contractual clauses or an adequacy decision.
Practising out loud in a report sends a short clip — a few seconds of speech — to the same speech-to-text provider: it is transcribed once to give you the feedback, and it is not stored by us, not added to your diagnostics and not kept in your history. Your browser may ask for microphone permission the first time; that permission is the browser's own, not your Meet.it recording consent. Lesson recordings are the audio we keep, with the retention in section 5.
7. Students under 18
Meet.it is used in schools with students who may be minors. The recording question is put to the student in plain words before their first lesson, and saying no has no effect on their ability to join, speak, vote or take part. The school or teacher is responsible for obtaining any parental authorisation required by local law before enrolling a minor in a recorded class. A parent or guardian can exercise the rights below on the student's behalf.
8. Cookies and local storage
- One session cookie (HTTP-only, first-party) keeps you logged in. It is strictly necessary and needs no consent banner.
- Your theme preference (light or dark) and small interface preferences are stored in your browser's local storage and never leave it.
- No advertising cookies and no cross-site tracking. Vercel Web Analytics and Speed Insights measure audience and performance without cookies (see section 2).
9. Your rights
You can access, correct and delete your data, withdraw your recording consent at any time from your settings, ask for a copy of your diagnostics, and object to processing based on our legitimate interest. Write to ; we answer within one month. You can also lodge a complaint with your supervisory authority — in France, the CNIL.
10. Security
Data is encrypted in transit. Recordings are stored in a private bucket, served through short-lived signed links, and deleted automatically at the end of the retention period. Access to reports is checked on every request against your role and your class membership.
11. Changes
We will update this page when the service or our providers change, and indicate the date at the top. Material changes affecting recordings will be announced in the application before they take effect. See also our terms of use and legal notice.