Privacy Policy
How Interprevo handles information.
Version 1.0 · Effective August 13, 2026
This Privacy Policy explains how Interprevo, a service operated by its owner in Massachusetts, United States (“Interprevo,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects information when people visit interprevo.com, purchase or administer access, use an organization workspace, operate an event, or listen to AI-generated interpretation.
1. Roles and scope
For account, commercial, website, security, and support information, Interprevo generally determines how information is processed. For event speech, terminology, prepared knowledge, participant information, and related Customer Content, the organization ordinarily determines what to provide and why, and Interprevo processes it to deliver the service. This Policy does not replace an organization’s own notices or obligations.
2. Information we collect
Account and organization information
We receive basic Google identity information for staff sign-in, such as name, verified email address, provider subject identifier, and authentication timestamps. We process organization name, country, timezone, membership, roles, settings, invitations, consent versions, and account status.
Payment and transaction information
Stripe collects payment-card and financial information. Interprevo may receive customer name and email, billing location or tax-related fields, product, amount, currency, payment and checkout identifiers, status, refund or dispute information, and timestamps. We do not receive or store full card numbers or security codes.
Provider credentials
Organization administrators may provide an OpenAI API credential. Interprevo encrypts it for server-side use and displays only limited status or fingerprint information. We do not intentionally log it, return it after storage, or use it for another organization.
Event and prepared information
We process event titles, schedules, languages, privacy and access settings, capacity, profiles, terminology, pronunciation hints, preferred translations, pasted text, uploaded documents, extracted text, website reference material, approval state, and version history. Organizations choose what material to provide and must have authority to do so.
Live content
To provide interpretation, source audio and transient representations may be transmitted through Interprevo infrastructure and the organization’s AI provider, and generated audio is distributed to listeners. In Maximum Privacy mode, Interprevo is designed not to durably store source audio, transcripts, translated text, or generated audio. Short-lived memory buffers may be used for processing, transport, jitter control, and reconnection and are cleared when no longer needed.
Listener and operational information
Listeners ordinarily do not create accounts. We process high-entropy event and listener tokens, selected language, consent, connection and playback state, approximate session timing, and non-content operational metrics. We may process IP address, browser/device information, request identifiers, security events, failures, latency, event duration, language, and aggregate listener counts. We do not intentionally build advertising profiles or track listeners across unrelated events.
Communications
We process information you send to support, privacy, billing, or other Interprevo addresses, including attachments and correspondence needed to respond.
3. How we use information
We use information to authenticate staff; create and isolate workspaces; process payments and entitlements; provide, secure, monitor, troubleshoot, and improve the service; validate and use the correct organization-owned AI credential; prepare terminology and approved context; operate events and listener access; prevent abuse and fraud; communicate about service, security, and support; enforce agreements; comply with law; and protect users, Interprevo, and others.
We do not sell personal information, use private Customer Content for cross-organization training, or use event content for targeted advertising. Interprevo does not train a foundation model on Customer Content. We may use de-identified, aggregated, non-content operational statistics to understand reliability and capacity where the information cannot reasonably identify a person or reveal private event content.
4. How information is disclosed
We disclose information only as reasonably needed:
- Organization administrators and members: according to workspace roles and permissions.
- OpenAI: live content and approved context are processed using the organization’s account. OpenAI’s API terms, data controls, and organization settings apply.
- Google: for staff authentication.
- Stripe: for checkout, payment, fraud, refunds, and disputes.
- Infrastructure providers: including hosting, database, networking, email routing, monitoring, and security providers acting to support the service.
- Professional advisers and authorities: when reasonably necessary for legal, tax, accounting, security, insurance, or compliance purposes.
- Business transition: in a financing, acquisition, reorganization, or sale, subject to appropriate confidentiality and applicable law.
- Safety and law: to comply with valid legal process or protect rights, safety, and service integrity.
We do not authorize service providers to use Customer Content for their own advertising. Their independent processing remains governed by their own terms and applicable law.
5. Retention
Maximum Privacy live content is not intentionally placed into durable Interprevo content storage. Account, membership, organization, payment, entitlement, audit, security, and operational records are retained for as long as reasonably necessary to provide the service, maintain security, resolve disputes, enforce agreements, and satisfy legal, tax, and accounting requirements. Prepared terminology, documents, extracted text, and versions remain until an authorized administrator deletes them, the workspace is deleted, or a disclosed retention rule applies. Backups and security records may persist for a limited additional period.
Third parties determine their own retention. OpenAI states that API data is not used to train models by default, but eligible API data may be retained in abuse-monitoring logs under OpenAI’s policies and account controls. Customers should configure their provider account appropriately for their use case.
6. Security
We use safeguards designed for the nature of the service, including encrypted transport, server-side credentials, encrypted provider secrets, tenant-scoped authorization and database policies, short-lived access tokens, role controls, CSRF protection, audit records, testing, and content-excluding logs. No method is completely secure. Customers must protect Google and OpenAI accounts, use appropriate provider limits and multifactor authentication, restrict invitations, and avoid submitting data that the service is not suitable to handle.
7. Your choices and requests
Depending on your location, you may have rights to request access, correction, deletion, portability, or information about processing, or to object or appeal. Organization members should first contact their administrator for organization-controlled content. You may contact privacy@interprevo.com. We may verify identity and authority before acting, preserve information required by law, and direct requests to the responsible organization or provider when appropriate.
Listeners may decline the AI and privacy notice and not join. Staff may sign out. Organization administrators can manage members, credentials, terminology, and knowledge. Browser settings may control cookies, but essential authentication and security cookies are required for staff access.
8. Cookies and similar technologies
Interprevo uses essential cookies and browser storage for Google sign-in attempts, secure staff sessions, CSRF protection, active organization selection, event access, listener reconnection, and saved event links. These are used to provide and protect requested functions, not for third-party behavioral advertising. We currently do not use third-party advertising cookies.
9. Children
The service is not directed to children under 13, and children may not create staff accounts or purchase passes. An organization using the service at an event involving minors is responsible for required parental or institutional authorization, notices, supervision, and an appropriate lawful basis. Do not knowingly upload unnecessary personal information about children.
10. International processing
Interprevo operates from the United States and uses providers that may process information in the United States and other countries. Those locations may have different data-protection laws. An organization using the service across borders is responsible for determining whether additional notices, agreements, transfer safeguards, or localization are required.
11. Sensitive and regulated information
Interprevo is not presently represented as HIPAA-compliant, a medical records system, a legal interpretation service, or an emergency communications system. Do not provide protected health information, government identifiers, financial credentials, highly sensitive personal data, or legally privileged or regulated content unless you have independently confirmed that the full configuration, provider agreements, consents, and safeguards meet your obligations.
12. Security incidents
If we discover a security incident affecting information for which notice is legally required, we will investigate and provide notices as required by applicable law. Report suspected incidents to privacy@interprevo.com. Do not include passwords, API keys, payment-card numbers, or sensitive event content in email.
13. Changes and contact
We may update this Policy prospectively as the service or law changes. We will post the effective date and provide reasonable notice of material changes to account holders. Privacy questions and requests may be sent to privacy@interprevo.com; general support may be sent to support@interprevo.com.