Stored in the EU
Your account, audio, transcripts and minutes are stored on servers in Frankfurt (Germany), and the app runs in the same city.
Security and privacy
Your meetings are confidential. We treat them that way.
We store your data in the European Union, never use it to train any AI, and you decide when it's deleted. Here's where each piece of data lives and who processes it, with no small print.
The essentials
We never train AI on your data
Neither we nor our AI providers use your audio or transcripts to train models, under their API terms.
Encrypted in transit and at rest
Everything travels over TLS and is stored encrypted at rest. Audio sits in private storage and only plays through links that expire in an hour.
Deleted when you say
Delete any session instantly, have the audio deleted as soon as the minutes are ready, or have everything delete itself after 30, 90, 180 or 365 days.
Transparent recording
The assistant joins under a visible name and says in the chat that it records. Before processing each recording, we ask you to confirm the participants know.
Access only for the right people
Row-level security in the database, every request checks the session is yours, and public links use long tokens you can revoke.
Where each piece of data is processed
The providers that process data on our behalf, under contract and only to provide their service to us.
| Provider | What for | Where |
|---|---|---|
| SupabaseDatabase, accounts and audio storage | Database, accounts and audio storage | Frankfurt (EU) |
| VercelThe website and the app | The website and the app | Frankfurt (EU) |
| Recall.ai and our own server (Oracle Cloud)The assistant that joins video calls; they delete their copy once we've processed it, and within 48 hours at most | The assistant that joins video calls; they delete their copy once we've processed it, and within 48 hours at most | Frankfurt (EU) |
| Groq, Deepgram and OpenAIAI transcription and summaries; they don't train on your data and may keep it for up to 30 days only to monitor abuse | AI transcription and summaries; they don't train on your data and may keep it for up to 30 days only to monitor abuse | US, with GDPR safeguards |
| Stripe, Resend and UpstashPayments, sending emails and anti-abuse counters | Payments, sending emails and anti-abuse counters | EU and US, with GDPR safeguards |
Transfers outside the European Economic Area rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. The full detail is in the Privacy Policy.
Compliance
GDPR
When you use SwiftBOL for work, you are the controller of your recordings and SwiftBOL acts as processor: we only process them on your instructions, under the published data processing agreement (DPA).
Transparency about AI
You always know you're working with an AI: the documents it creates carry a reminder to review them, the assistant identifies itself in every meeting, and SwiftBOL doesn't make decisions about people: it doesn't score candidates or employees.
Your rights, no hoops
Export your sessions to PDF, Word or TXT whenever you like and delete your account from Settings: the data is removed at once and disappears from the encrypted backups within 30 days.
Security questions
Do you use my meetings to train AI?
No. We don't use your audio, transcripts or minutes to train any model, and under their API terms neither do OpenAI or Groq; our requests to Deepgram are excluded from its model improvement program.
Does my data leave the European Union?
It's stored in Frankfurt. To transcribe and summarize it, the audio and text are sent to AI providers in the United States with GDPR safeguards (the Data Privacy Framework or standard contractual clauses), who may keep it for up to 30 days only to monitor abuse and then delete it.
Can I record without a bot joining?
Yes: in Chrome or Edge on a computer you can record the video call's tab and no assistant joins. The Business plan also has a discreet bot, with no picture, which still posts in the chat that it is recording. Either way, tell the participants you're recording.
Do you sign a data processing agreement?
Yes. The DPA is published and is part of the contract. If your company needs its own template, a security questionnaire or more detail on the providers, email us at support@swiftbol.com.
Documents
Try it with a real meeting
120 min of audio and 60 min of meeting assistant free a month, no card. And if your security team needs more, we reply the same business day.
Start free