Privacy Policy
Last updated: 28 September 2026
This policy explains what personal data Tratovi processes, why, on what legal basis, who receives it and what rights you have. It is written to be understood; if anything is unclear, write tohola@tratovi.com.
1. Data controller
- Controller: Mateo Moreno Beltrán (Empresario individual (autónomo))
- Tax ID (NIF): 44568110K
- Address: Calle de Juan Bravo 2, 4.º derecha, 28006 Madrid, España
- Email: hola@tratovi.com
We are not required to appoint a data protection officer. For any privacy matter, use the email above.
2. One-screen summary
- The audio of your meetings never leaves your Mac and is never stored. Transcription happens on your computer, is kept only in memory and is deleted when the meeting ends.
- During a meeting, the Application sends text (fragments of the transcript and any context you have configured) to our relay server and from there to the AI model provider, without your email or user identifier.
- The summaries and notes the Application generates are stored only on your Mac, not on our servers.
- On our servers we keep the minimum needed for your account to work: email, password (hashed), account identifier and AI usage (token counts, no content).
- We do not sell data, we do not run ads and we do not use your content to train models.
3. What data we process, why and on what basis
3.1 User account (Application)
- Data: email address, password (stored hashed by our authentication provider), unique account identifier, sign-up and session dates, email verification status.
- Purpose: create and manage your account, verify your email, let you sign in and reset your password.
- Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Retention: while the account is active and, after closure, for as long as needed to meet legal obligations.
3.2 Subscription and payments
- Data: subscription status (plan, free trial, dates), customer identifier at the payment processor. Card details are processed exclusively by the payment processor; we neither receive nor store them.
- Purpose: manage your subscription, check that you have active access and handle refunds.
- Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal, tax and accounting obligations (Art. 6(1)(c) GDPR).
- Retention: for the duration of the contract and the statutory retention periods for tax records (generally six years).
3.3 Meeting content
This is where we take the most care, so here it is step by step.
- Audio. The Application captures audio from your microphone and from the system (the other participants' voices) only in your Mac's memory, in order to transcribe it. Audio is not written to disk, not sent to any server, and is discarded immediately after transcription.
- Transcript. Produced on your Mac by a speech-recognition model that runs locally. The transcript is kept only in memory during the meeting and is deleted when the summary is generated. It is not saved to our servers. On your Mac, the only exception is the ratings you give to suggestions (👍/👎): alongside each rating, a short fragment of the surrounding transcript is stored locally, which you can delete at any time and which is never sent to our servers.
- Suggestions and summaries. To generate real-time suggestions and the final summary, the Application sends fragments of the transcript, together with any context you have configured (for example, notes about the meeting or the other party), to our relay server, which forwards them to the AI provider. That transmission contains text; it does not contain your email address or user identifier. Our relay server does not store that content: it forwards it and discards it.
- Results. Suggestions and the summary are shown in the Application, and the summary is stored only on your Mac, in Tratovi's data folder. You can delete it whenever you wish.
- Usage log. We record the number of tokens consumed in each AI call (model, input and output counts, date), linked to your account identifier, with no content. This is used to enforce your plan's limits and control costs.
Purpose: to provide the contracted service (meeting assistance and summaries).Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Other people's data. The transcript may include the voice and words of other participants. In respect of that content, you decide which meetings you process with Tratovi and you are responsible for complying with the law that applies to you, including, where required, informing participants or obtaining their consent. Tratovi processes that content on your instructions, as a processor, under section 8 of theTerms of Service. The Application does not itself notify other participants.
3.4 Website: waitlist and contact
- Data: email address, platform of interest (macOS/Windows), version and text of the consent given, page language, date, and the result of the anti-spam check. Campaign parameters (UTM) and the referring page are recorded only in an anonymous event, with no link to your email, to count conversions in aggregate.
- Purpose: notify you when the product is available and send you news about Tratovi.
- Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in each email or by writing to us.
- Retention: until you withdraw consent or, failing that, up to two years from the last contact.
3.5 Transactional emails and support
- Data: email address, the content of messages you send us and any data you include in them.
- Purpose: send emails required for the service (verification, password reset, account notices) and handle your enquiries.
- Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legitimate interest in handling requests (Art. 6(1)(f) GDPR).
- Retention: as long as needed to resolve the enquiry and thereafter for the limitation period of any liability.
3.6 Technical and security data
- Data: technical logs of our relay server (date and time, AI model used, account identifier, request size, token counts, error codes). They do not include meeting content.
- Purpose: security, abuse prevention, error diagnosis and cost control.
- Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Retention: logs are kept for a limited period on the hosting platform and deleted on a rolling basis.
4. Who receives your data (processors and third parties)
We use providers that process data on our behalf as processors, under contract and only for the purposes stated. By category:
| Provider category | Role | Data received | Location |
|---|---|---|---|
| Authentication and database | Manages your account and the usage log | Email, hashed password, account identifier, dates; token counts | European Union |
| Relay server infrastructure | Hosts the server that forwards requests to the AI model | Meeting text in transit (not stored); technical logs with account identifier and metadata | European Union |
| AI model provider | Generates the suggestions and summaries | Transcript text and meeting context; no email or account identifier | United States |
| Transactional email delivery | Sends verification, password-reset and account emails | Email address and content of automated messages | United States |
| Web infrastructure | Hosts the website, manages the domain, protects the form against spam and produces cookieless visit statistics | IP address and technical browsing data; waitlist form data | United States, with EU data centres |
| Waitlist email delivery | Sends updates to people who joined the waitlist | Email address and form data | United States |
| Payment processor (seller of record) | Bills the subscription, issues invoices, handles taxes and refunds | Payment details, email, country and amount. Acts as seller of record and as controller of its own processing | See its terms at checkout |
The specific list of providers is available on request athola@tratovi.com. We do not disclose data to other third parties unless legally required.
Under its commercial terms, the AI model provider does not use submitted content to train its models and retains it only for a limited period for safety purposes.
5. International transfers
Some providers are located in the United States. Transfers are covered by the EU-U.S. Data Privacy Framework where the provider is certified and, otherwise, by the standard contractual clauses approved by the European Commission, together with additional security measures. You may ask us for information on the safeguards applicable to each provider.
6. Security
We apply appropriate technical and organisational measures: encryption in transit (TLS) for all communications, hashed password storage, session credentials stored in your Mac's system keychain, data minimisation on our servers, and no storage of meeting content outside your computer.
7. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent given, by writing tohola@tratovi.comfrom the email address linked to your account. We will reply within one month.
Account deletion. Until the Application includes an in-app delete option, you can request deletion by email. We will delete your account and the associated data on our servers within 30 days at most, except for data we must keep under a legal obligation (for example, tax records). Summaries stored on your Mac are under your control: you can delete them yourself or uninstall the Application.
If you believe we have not handled your rights properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country of residence.
8. Minors
Tratovi is intended for people aged 18 or over. We do not knowingly process data of minors; if you become aware that a minor has provided us with data, write to us and we will delete it.
9. Cookies and similar technologies
- Website. We use a visit-statistics system that uses no cookies and does not identify visitors, and an anti-spam verification system to protect the waitlist form, which may set strictly necessary technical cookies. We use no advertising or tracking cookies, so no consent banner is shown.
- Application. It uses no cookies. It stores on your Mac your session credentials (in the system keychain), session metadata, your preferences, meeting summaries and a local usage log. All of this is removed when you sign out (credentials) or when you uninstall the Application and delete its data folder.
10. Changes to this policy
We may update this policy when the service, our providers or the law change. We will publish the current version on this page with its date and, if the change is significant, notify you by email or within the Application.