Privacy Policy

LiveKit Incorporated ("LiveKit," "we," "our," and/or "us") values the privacy of individuals who use our website (available at https://livekit.com/) (our “Services”). This privacy policy (the “Privacy Policy”) explains how we collect, use, and disclose information from users of our Services (“Users”). By using our Services, you agree to the collection, use, disclosure, and procedures this Privacy Policy describes. Beyond the Privacy Policy, your use of our Services is also subject to our Terms of Service https://livekit.com/legal/terms-of-service.

This Privacy Policy does not apply to the extent we process information in the role of a processor or service provider on behalf of our customers (for example, your company when you use our tools at https://cloud.livekit.io/ or a third-party platform that uses our technology to power their AI agents). In that context, our processing of your Personal Data is subject to our agreements with our customers. Our customers are the data controllers and their privacy policies will apply to the processing of your Personal Data. We are not responsible for the privacy or data security practices of our customers, which may differ from those explained in this Privacy Policy.

Information We Collect#Link to this section

In this Privacy Policy, "Personal Data" means any information relating to an identified or identifiable natural person. We may collect a variety of information from or about you or your devices from various sources, as described below.

A. Information You Provide to Us.#Link to this section

Account Information. When you sign up for an account, we ask you for your name, email address, billing information, and phone number. You can also log in via Single Sign On (SSO).

Text (SMS/MMS) Messaging Opt-In. If you opt in to receive text (SMS/MMS) messages from us, we collect your mobile phone number, the date, time and method of your opt-in, and your message history with us, including any media you send or receive.

Communications and Contact Forms. If you contact us directly, we may receive additional information about you, such as your name, email address, company website, job title, the contents of a message or attachments that you may send to us, and other information you choose to provide. When you communicate with us online, such as when you talk to one of our LiveKit agents, third-party vendors receive and store these communications on our behalf. When we send you emails, our email service provider may use embedded pixels or other technologies to track information about your receipt and interaction with our emails, such as whether and when you open them, whether you access any links included in our emails, your Location Information (based on IP address), and your device/browser type (described below). We use this information to understand engagement and improve our communications.

Our Blog. If you subscribe to our blog, we will collect your name and email address.

Incident Status Updates. If you subscribe to updates to learn when incidents on LiveKit are created, updated, or resolved, we may collect your contact information, such as your email address, phone number, or other communication service that you choose.

Careers. If you decide that you wish to apply for a job with us, you may submit your contact information and your resume online. We will collect the information you choose to provide on your resume, such as your education and employment experience.

Payment Information. If you make a payment on our Services, your payment-related information, such as credit card or other financial information, is collected by our third-party payment processor on our behalf.

B. Information We Collect When You Use Our Services.#Link to this section

Device Information. We receive information about the device and software you use to access our Services, including IP address (which may provide us with your general location information), device type, operating system and version, web browser type and version, screen resolution, and certain device or session identifiers.

Usage Information. We automatically collect information about your interactions with our Services, like the pages or other content you view, features you use, referrer information (the website you visited before coming to our Services), and the dates and times of your visits. We also collect performance and diagnostic data (such as error logs, latency, and crash reports) to help us maintain security, reliability, and improve our Services.

Prompts and Outputs. Our Services allow you to submit audio to the Services ("Prompts"), which generate responses based on your Prompts ("Outputs"). We will process any information you choose to provide in your Prompts and this information may be reproduced in the Outputs.

Inference Data. Inference Data means model inputs (e.g., prompts, parameters, media snippets), and resulting outputs/responses transmitted through LiveKit's Inference services. LiveKit acts solely as a conduit and inference providers used through LiveKit Inference are contractually required not to retain, log, train on, fine-tune on, or otherwise use Inference Data for model improvement. LiveKit does not retain Inference Data beyond the duration necessary to complete each request, and does not use Inference Data for training.

Messaging Data. If a LiveKit customer uses our Services to send or receive SMS or MMS messages, we process the phone numbers, message content, media attachments and delivery records involved on that customer's behalf. The customer determines why those messages are sent and is responsible for obtaining any required consent. That customer's privacy policy, not this one, governs those messages.

Voice Samples. If you use our voice cloning feature, we collect the audio recordings you upload for the purpose of creating a synthetic voice ("Voice Samples"), together with any biometric identifiers or biometric information derived from those recordings. Before you can upload a Voice Sample, you must affirmatively confirm that you have all necessary rights and consents from each identifiable individual whose voice is contained in the Voice Sample, and that you will not use the Services for any illegal, fraudulent, or harmful purpose. We transmit Voice Samples to the third-party text-to-speech and other inference providers you select in order to create and operate the voice clone you request. We have opted out, on your behalf, of any use of Voice Samples (including any biometric data contained in them) by those inference providers for training, fine-tuning, or other improvement of their models; we likewise do not use Voice Samples to train our own models. We retain Voice Samples for up to twelve (12) months; Voice Samples that are no longer associated with an active voice clone are deleted after that period.

Information from Cookies and Other Tracking Technologies. We and our third-party partners collect information about your activities on our Services using cookies, pixel tags, SDKs, or other tracking technologies. Our third-party partners, such as analytics, advertising and security partners, may also use these technologies to collect information about your online activities over time and across different services. You can learn more about how we collect, use, and disclose information via cookies here: https://livekit.com/legal/cookie-policy.

WebRTC Browser Test. When you use our WebRTC Browser Test, we may collect information about your browser and connected devices, such as your microphone and camera. We only collect this information when you affirmatively choose to run a test.

How We Use the Information We Collect#Link to this section

We use the information we collect:

• To deliver and maintain our Services, including observability features that allow customers to monitor and debug their implementations.
• To develop and improve the artificial intelligence ("AI"), machine learning, and models that we use to support our Services, excluding Inference Data;
• To personalize your experience on our Services such as by providing tailored content and recommendations;
• To understand and analyze how you use our Services and develop new products, services, features, and functionality;
• To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to comments and questions, and otherwise provide customer support;
• For marketing purposes, such as developing and providing promotional materials that may be relevant, valuable or otherwise of interest to you;
• To generate anonymized or aggregate data containing only de-identified, non-Personal Data that we may use for any lawful purposes such as to publish reports;
• To send you text (SMS/MMS) messages where you have opted in, such as verification codes, account and service notifications and, with your separate consent, promotional messages. Message frequency varies. Message and data rates may apply. Reply STOP to cancel and HELP for help;
• To facilitate transactions and payments;
• To find and prevent fraud and abuse, and respond to trust and safety issues that may arise;
• For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
• For other purposes for which we provide specific notice at the time the information is collected.

Artificial Intelligence#Link to this section

LiveKit uses AI and machine-learning technologies to power certain features, such as audio enhancement, transcription, and performance optimization. These features process only the data necessary to operate the service you request, and LiveKit does not store or use this data for any unrelated purposes.

LiveKit does not use identifiable personal data, customer content, prompts, transcripts, or audio to train or fine-tune LiveKit’s own models. Limited aggregated and de-identified telemetry may be used to improve the reliability and performance of AI-powered features, but this data cannot be linked back to you or your end users.

When LiveKit transmits data to third-party model providers, such providers apply their own retention or training policies, except for inference providers through LiveKit Inference, as described above under “Inference Data.”

How We Disclose the Information We Collect#Link to this section

Vendors and Service Providers. Subject to the limits described under "Messaging Providers and Carriers" below, we may disclose information we receive to vendors and service providers retained in connection with the provision of our Services.

AI Service Providers. We may disclose information we receive to vendors that provide artificial intelligence services that provide backend support for our Services.

Messaging Providers and Carriers. We share mobile phone numbers and message content (including media attachments) with our messaging service provider, CarrierX, and with wireless carriers solely to deliver messages. Mobile phone numbers and text messaging opt-in data and consent are not shared with any third parties or affiliates for marketing or promotional purposes.

Certain third-party providers may have their own retention or training policies, which apply independently, except for inference providers through LiveKit Inference as described above under “Inference Data.”

Analytics Partners. We use analytics services such as PostHog and Google Analytics to collect and process certain analytics data.

Advertising Partners. We use advertising services such as Google Ads, LinkedIn, Meta, Reddit, TikTok and X. See our Cookie Policy at https://livekit.com/legal/cookie-policy.

As Required by Law and Similar Disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests, national security requirements, and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others' rights, property, or safety. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through the Services.

Merger, Sale, or Other Asset Transfers. We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets. The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.

Consent. We may also disclose your information with your permission.

Your Choices#Link to this section

Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt out of receiving promotional email messages from us, you will continue to receive administrative messages from us.

Text Messages. You can opt out of text (SMS/MMS) messages from us at any time by replying STOP to any message we send. You may receive one final message confirming your opt-out. Reply HELP, or email support@livekit.io, for assistance.

Advertising and Cookies. You can accept or decline Analytics and Marketing cookies, including advertising pixels and tags, at any time through the cookie banner or the "Cookie Preferences" link in the footer of livekit.com. You can also adjust your browser settings to block or delete cookies, and you may be able to opt out of personalized advertising through the settings offered by our advertising partners. We treat a Global Privacy Control (GPC) signal sent by your browser as a request to opt out of Marketing cookies for that browser. For more information, see our Cookie Policy.

Third Parties#Link to this section

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.

Messages from LiveKit Customers. If you receive text (SMS/MMS) messages from an application built on LiveKit, the business that sent them controls that messaging and its privacy policy applies. To stop those messages, reply STOP to the message or contact that business directly.

Security#Link to this section

We make reasonable efforts to protect your information by using physical and electronic safeguards designed to improve the security of the information we maintain. However, because no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information.

Children's Privacy#Link to this section

We do not knowingly collect, maintain, or use Personal Data from children under 18 years of age, and no part of our Services is directed to children. If you learn that a child has provided us with Personal Data in violation of this Privacy Policy, then you may alert us at privacy@livekit.io.

Lawful basis to process Personal Data#Link to this section

The legal basis for which we collect and use the information described above depends on what the information is and why we collected it. The bases upon which we rely include:

Contract. If you decide to use our Services, we will process your Personal Data to perform our contract with you.

Legitimate interests. This means we have a legitimate interest that is not overridden by your privacy rights. When we collect and process information based on our legitimate interests, we consider how we can accomplish what we need to in a way that is the least obtrusive on your privacy. For example, it is in our legitimate interest to provide and improve services requested by the user; to enable us to fight against fraud; and to respond to your inquiries about our Services.

Legal obligations. We may need to use your Personal Data to comply with our legal obligations or to protect the rights of other users, for example to comply with regulatory reporting, tax and accounting obligations.

Consent. We may also process your Personal Data on the basis of consent in some circumstances. For example, we may ask for your consent to sign up to direct marketing, and we rely on your consent to use non-essential cookies, including Analytics and Marketing cookies, where required by applicable law. You may withdraw your consent at any time by contacting us or, for cookies, through the "Cookie Preferences" link in the footer of livekit.com.

Data Retention#Link to this section

We take measures to delete your Personal Data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we need to retain certain information as required by law, including to comply with tax requirements, or for as long as is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud and abuse or enforce our terms and conditions. When determining the specific retention period, we take into account various criteria, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and the relevant statute of limitations. For text messaging, we keep records of your opt-in and opt-out requests for as long as needed to honor them, message delivery records for up to 12 months, and message content and media attachments only for as long as needed to deliver the message and provide the Services. Our messaging service provider and wireless carriers may retain message delivery records for longer periods under their own policies to meet business and regulatory requirements.

Your Rights#Link to this section

Depending on where you reside, you may have certain rights under applicable data privacy laws. For example, in Europe, you have the following legal rights:

Access and Portability. You may ask us to provide you with a copy of the Personal Data we maintain about you, including a machine-readable copy of the Personal Data that you have provided to us, and request information about its processing.

Rectification and Deletion. You may ask us to update and correct inaccuracies in your Personal Data, or to have the information anonymized or deleted, as appropriate.

Restriction and Objection. You may ask us to restrict the processing of your Personal Data, or object to such processing.

Consent withdrawal. You may withdraw any consent you previously provided to us regarding the processing of your Personal Data, at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.

Complaint. You may lodge a complaint with a supervisory authority, including in your country of residence, place of work, or where an incident took place. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us in the first instance.

You may exercise these rights by contacting us using the contact details at the end of this Privacy Policy.

U.S. State Privacy Rights. Depending on your state of residence (for example, California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws), you may have the right to: (a) know and access the Personal Data we have collected about you, including the categories of sources, the purposes for collecting it, and the categories of third parties to whom we disclose it; (b) correct inaccurate Personal Data; (c) delete your Personal Data; (d) obtain a portable copy of your Personal Data; and (e) opt out of the "sale" or "sharing" of your Personal Data, including for cross-context behavioral or targeted advertising.

We do not sell Personal Data for money. However, our use of advertising partners' cookies and pixels, as described above, may be considered a "sale" or "sharing" under some state laws. You can opt out by declining Marketing cookies through the "Cookie Preferences" link in the footer of livekit.com. We also treat a Global Privacy Control (GPC) signal sent by your browser as a valid opt-out request for that browser.

To exercise your other rights, email privacy@livekit.io. We will verify your request by matching the information you provide with information we hold, and you may use an authorized agent to submit a request on your behalf. If we deny your request, you may appeal by emailing privacy@livekit.io with the subject line "Privacy Request Appeal." We will not discriminate against you for exercising any of these rights.

Data Transfers#Link to this section

LiveKit is based in the United States ("U.S.") and processes Personal Data in the U.S. If you are accessing the Services from outside the U.S., we may transfer your Personal Data to countries with different data protection standards.

LiveKit is committed to complying with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Data transferred from the European Union, United Kingdom, or Switzerland to the United States. LiveKit has been certified to the U.S. Department of Commerce that it adheres to the Data Privacy Framework Principles with regard to the processing of personal information received from the European Union, the United Kingdom, and from Switzerland in reliance on the respective Data Privacy Frameworks. If there is any conflict between the terms in this Privacy Policy and the Data Privacy Framework Principles, the Data Privacy Framework Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

LiveKit acknowledges that it is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). We may also disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requests.

Pursuant to the DPF Program, EU, UK, and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States in reliance on the DPF Program should direct their query to privacy@livekit.io. If requested to remove data, we will respond within a reasonable timeframe.

We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to privacy@livekit.io.

If you are an EU, UK, or Swiss Individual, where we transfer your personal data to third-party service providers who perform services for us or on our behalf, we are responsible for the processing of that data by them and shall remain liable if they process your personal data in a manner inconsistent with the DPF Principles, unless we prove that we are not responsible for the event giving rise to the damage.

Individuals with questions or complaints about our compliance with the Data Privacy Framework may contact us at privacy@livekit.io, and unresolved concerns may be referred at no cost to BBB National Programs, a U.S.-based independent dispute resolution mechanism via https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers.

Under certain conditions, individuals have the right to invoke binding arbitration. LiveKit is obligated to arbitrate claims and follow the terms as set forth in Annex I of the Data Privacy Framework Principles. For more information about the arbitration under Annex I of the Data Privacy Framework, please visit https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.

We take measures to ensure that your Personal Data remains protected in accordance with this Privacy Policy and applicable data protection laws. In particular, for data transfers outside Europe, we will rely on (i) the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework; (ii) an EU Commission, UK Secretary of State or Swiss government adequacy decision, (iii) contractual protections for the transfer of your Personal Data, including entering into data transfer agreements with relevant parties, or (iv) another valid data transfer mechanism, where required by law. If you are located in Europe, you may contact us as specified below for more information about the safeguards we use to transfer Personal Data outside of Europe.

Changes to this Privacy Policy#Link to this section

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or disclose Personal Data previously collected from you through the Services, we will notify you through the Services, by email, or other communication.

Contact Information#Link to this section

LiveKit is responsible for processing your information. If you have any questions, comments, or concerns about our processing activities, please email us at privacy@livekit.io.

If you are not satisfied with our response to your complaint or if you believe that the processing of your personal data does not comply with data protection laws, you can lodge a complaint with your local supervisory authority. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us in the first instance.

EU and UK Representatives#Link to this section

In accordance with Article 27 of the GDPR and the UK GDPR, LiveKit has appointed the following representatives to act on its behalf regarding data protection matters in the European Union and United Kingdom:

EU Representative Osano International Compliance Services Limited ATTN: A7CI 25 North Wall Quay Dublin 1 D01 H104

UK Representative Osano UK Compliance LTD ATTN: A7CI 42-46 Fountain Street Belfast Antrim BT1 - 5EF