Privacy Policy

LiveKit Incorporated ("LiveKit," "we," "our," and/or "us") values the privacy of individuals who use our website (available at https://livekit.io/) (our "Services"). This privacy policy (the "Privacy Policy") explains how we collect, use, and disclose information from users of our Services ("Users"). By using our Services, you agree to the collection, use, disclosure, and procedures this Privacy Policy describes. Beyond the Privacy Policy, your use of our Services is also subject to our Terms of Service https://livekit.io/legal/terms-of-service.

This Privacy Policy does not apply to the extent we process information in the role of a processor or service provider on behalf of our customers (for example, your company when you use our tools at https://cloud.livekit.io/ or a third party platform that uses our technology to power their AI agents). In that context, our processing of your Personal Data is subject to our agreements with our customers. Our customers are the data controllers and their privacy policies will apply to the processing of your Personal Data. We are not responsible for the privacy or data security practices of our customers, which may differ from those explained in this Privacy Policy.

Information We Collect

In this Privacy Policy, "Personal Data" means any information relating to an identified or identifiable natural person. We may collect a variety of information from or about you or your devices from various sources, as described below.

A. Information You Provide to Us.

Account Information. When you sign up for an account, we ask you for your name, email address, billing information, and phone number. You can also log in via Single Sign On (SSO).

Communications and Contact Forms. If you contact us directly, we may receive additional information about you, such as your name, email address, company website, job title, the contents of a message or attachments that you may send to us, and other information you choose to provide. When you communicate with us online, such as when you talk to one of our LiveKit agents, third party vendors receive and store these communications on our behalf. When we send you emails, our email service provider may use embedded pixels or other technologies to track information about your receipt and interaction with our emails, such as whether and when you open them, whether you access any links included in our emails, your Location Information (based on IP address), and your device/browser type (described below).We use this information to understand engagement and improve our communications.

Our Blog. If you subscribe to our blog, we will collect your name and email address.

Incident Status Updates. If you subscribe to updates to learn when incidents on LiveKit are created, updated, or resolved, we may collect your contact information, such as your email address, phone number, or other communication service that you choose.

Careers. If you decide that you wish to apply for a job with us, you may submit your contact information and your resume online. We will collect the information you choose to provide on your resume, such as your education and employment experience.

Payment Information. If you make a payment on our Services, your payment-related information, such as credit card or other financial information, is collected by our third-party payment processor on our behalf.

B. Information We Collect When You Use Our Services.

Device Information. We receive information about the device and software you use to access our Services, including IP address (which may provide us with your general location information), device type, operating system and version, web browser type and version, screen resolution, and certain device or session identifiers.

Usage Information. We automatically collect information about your interactions with our Services, like the pages or other content you view, features you use, referrer information (the website you visited before coming to our Services), and the dates and times of your visits. We also collect performance and diagnostic data (such as error logs, latency, and crash reports) to help us maintain security, reliability, and improve our Services.

Prompts and Outputs. Our Services allow you to submit audio to the Services ("Prompts"), which generate responses based on your Prompts ("Outputs"). We will collect any information you choose to provide in your Prompts and this information may be reproduced in the Outputs.

Information from Cookies and Other Tracking Technologies. We and our third-party partners collect information about your activities on our Services using cookies, pixel tags, SDKs, or other tracking technologies. Our third-party partners, such as analytics and security partners, may also use these technologies to collect information about your online activities over time and across different services. You can learn more about how we collect, use, and disclose information via cookies here: https://livekit.io/legal/cookie-policy.

WebRTC Browser Test. When you use our WebRTC Browser Test, we may collect information about your browser and connected devices, such as your microphone and camera. We only collect this information when you affirmatively choose to run a test.

How We Use the Information We Collect

We use the information we collect:

• To provide, maintain, improve, and enhance our Services;
• To train, develop, and improve the artificial intelligence ("AI"), machine learning, and models that we use to support our Services;
• To personalize your experience on our Services such as by providing tailored content and recommendations;
• To understand and analyze how you use our Services and develop new products, services, features, and functionality;
• To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to comments and questions, and otherwise provide customer support;
• For marketing purposes, such as developing and providing promotional materials that may be relevant, valuable or otherwise of interest to you;
• To generate anonymized or aggregate data containing only de-identified, non-Personal Data that we may use for any lawful purposes such as to publish reports;
• To send you text messages;
• To facilitate transactions and payments;
• To find and prevent fraud and abuse, and respond to trust and safety issues that may arise;
• For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
• For other purposes for which we provide specific notice at the time the information is collected.

Artificial Intelligence

We may use AI and machine learning technologies to power features such as real-time audio enhancement and transcription and optimizing overall performance. To support these capabilities, we may process data such as audio and video streams, device and network metadata, and user interaction patterns. This data is used solely to operate, maintain, and enhance AI-powered features, and is not stored or used for any unrelated purposes.

We may use data in an aggregated and de-identified form to train and improve our AI and machine learning models. We do not use directly identifiable Personal Data for training purposes.

How We Disclose the Information We Collect

Vendors and Service Providers. We may disclose any information we receive to vendors and service providers retained in connection with the provision of our Services.

AI Service Providers. We may disclose information we receive to vendors that provide artificial intelligence services that provide backend support for our Services.

Analytics Partners. We use analytics services such as PostHog to collect and process certain analytics data.

As Required By Law and Similar Disclosures. We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests, national security requirements, and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others' rights, property, or safety. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through the Services.

Merger, Sale, or Other Asset Transfers. We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets. The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.

Consent. We may also disclose your information with your permission.

Your Choices

Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt out of receiving promotional email messages from us, you will continue to receive administrative messages from us. You can opt out from our promotional SMS messages by replying "STOP" to our message.

Third Parties

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them.

Security

We make reasonable efforts to protect your information by using physical and electronic safeguards designed to improve the security of the information we maintain. However, because no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information.

Children's Privacy

We do not knowingly collect, maintain, or use Personal Data from children under 18 years of age, and no part of our Service(s) is directed to children. If you learn that a child has provided us with Personal Data in violation of this Privacy Policy, then you may alert us at [email protected].

Lawful basis to process Personal Data

The legal basis for which we collect and use the information described above depends on what the information is and why we collected it. The bases upon which we rely include:

Contract. If you decide to use our Services, we will process your Personal Data to perform our contract with you.

Legitimate interests. This means we have a legitimate interest that does not outweigh your privacy rights. When we collect and process information based on our legitimate interests, we consider how we can accomplish what we need to in a way that is the least obtrusive on your privacy. For example, it is in our legitimate interest to provide and improve services requested by the user; to enable us to fight against fraud; and to respond to your inquiries about our Services.

Legal obligations. We may need to use your Personal Data to comply with our legal obligations or to protect the rights of other users, for example to comply with regulatory reporting, tax and accounting obligations.

Consent. We may also process your Personal Data on the basis of consent in some circumstances. For example, we may ask for your consent to sign up to direct marketing. You may withdraw your consent at any time by contacting us.

Data Retention

We take measures to delete your Personal Data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we need to retain certain information as required by law, including to comply with tax requirements, or for as long as is reasonably necessary to meet regulatory requirements, resolve disputes, prevent fraud and abuse or enforce our terms and conditions. When determining the specific retention period, we take into account various criteria, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and the relevant statute of limitations.

Your Rights

Depending on where you reside, you may have certain rights under applicable data privacy laws. For example, in Europe, you have the following legal rights:

Access and Portability. You may ask us to provide you with a copy of the Personal Data we maintain about you, including a machine-readable copy of the Personal Data that you have provided to us, and request information about its processing.

Rectification and Deletion. You may ask us to update and correct inaccuracies in your Personal Data, or to have the information anonymized or deleted, as appropriate.

Restriction and Objection. You may ask us to restrict the processing of your Personal Data, or object to such processing.

Consent withdrawal. You may withdraw any consent you previously provided to us regarding the processing of your Personal Data, at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.

Complaint. You may lodge a complaint with a supervisory authority, including in your country of residence, place of work, or where an incident took place. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us in the first instance.

You may exercise these rights by contacting us using the contact details at the end of this Privacy Policy.

Data Transfers

LiveKit is based in the United States ("U.S.") and processes Personal Data in the U.S. If you are accessing the Services from outside the U.S., we may transfer your Personal Data to countries with different data protection standards.

LiveKit is committed to complying with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Data transferred from the European Union, United Kingdom, or Switzerland to the United States. LiveKit is in the process of certifying to the U.S. Department of Commerce that it adheres to the Data Privacy Framework Principles with regard to the processing of personal information received from the European Union, the United Kingdom, and from Switzerland in reliance on the respective Data Privacy Frameworks. If there is any conflict between the terms in this Privacy Policy and the Data Privacy Framework Principles, the Data Privacy Framework Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification (once issued), please visit https://www.dataprivacyframework.gov/.

LiveKit acknowledges that it is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). We may also disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requests.

Under certain conditions, individuals have the right to invoke binding arbitration. LiveKit is obligated to arbitrate claims and follow the terms as set forth in Annex I of the Data Privacy Framework Principles once LiveKit has been certified by the Department of Commerce.

Individuals with questions or complaints about our compliance with the Data Privacy Framework may contact us at [email protected], and unresolved concerns may be referred at no cost to BBB National Programs, a U.S.- based independent dispute resolution mechanism via https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers.

We take measures to ensure that your Personal Data remains protected in accordance with this Privacy Policy and applicable data protection laws. In particular, for data transfers outside Europe, we will rely on (i) the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework; (ii) an EU Commission, UK Secretary of State or Swiss government adequacy decision, (iii) contractual protections for the transfer of your Personal Data, including entering into data transfer agreements with relevant parties, or (iv) another valid data transfer mechanism. where required by law. If you are located in Europe, you may contact us as specified below for more information about the safeguards we use to transfer Personal Data outside of Europe.

Changes to this Privacy Policy

We will post any adjustments to the Privacy Policy on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we use or disclose Personal Data previously collected from you through the Services, we will notify you through the Services, by email, or other communication.

Contact Information

LiveKit is responsible for processing your information. If you have any questions, comments, or concerns about our processing activities, please email us at [email protected].

If you are not satisfied with our response to your complaint or if you believe that the processing of your personal data does not comply with data protection laws, you can lodge a complaint with your local supervisory authority. We would, however, appreciate the chance to deal with your concerns before you approach a supervisory authority, so please contact us in the first instance.

Last Updated: October 25, 2025