LEGAL · DRAFT FOR REVIEW
Privacy Policy
How WIMAX handles account data, private voice captures, meeting recordings and the structured workspace created from them.
Effective date: 25 August 2026 · Last updated: 25 August 2026Scope and who is responsible
This Privacy Policy describes how IE BAI Group, the operator of WIMAX, processes information when you use the website, web workspace and mobile applications.
- Controller: IE BAI Group
- Service address: https://cognitive-mirror-two.vercel.app/
- Registered address: [pending owner confirmation]
- Privacy contact: [pending owner confirmation]
- This policy does not replace notices supplied by third-party integrations.
Information we process
We process information you provide, information created through your use of the service and limited technical information needed to operate and secure it.
- Account data, including name, email, authentication records and recognized-device identifiers.
- Voice recordings, imported audio, meeting audio, transcripts, speaker labels and acoustic measurements used to estimate energy or delivery patterns.
- Structured workspace content such as tasks, habits, notes, projects, financial entries, reminders, timer schedules, commands, links and search queries.
- Device, browser, diagnostic, security, notification delivery and integration data.
How we use information
We use information to provide voice capture, transcription, meeting recovery, structured extraction, search, synchronization, security, support and user-requested integrations. We may also use aggregated or de-identified operational data to improve reliability, provided it cannot reasonably identify you.
- We do not sell personal data or use private voice content for advertising.
- AI output may be generated by WIMAX models or contracted model providers acting under appropriate data-processing terms.
- We do not use customer content to train general-purpose models unless the user affirmatively opts in and applicable law permits it.
Meeting recordings and participant data
Meeting Mode can capture people who do not hold a WIMAX account. The person starting a recording is responsible for providing every required notice and obtaining consent or another lawful basis before recording begins.
- WIMAX may keep recoverable local chunks, upload them when connectivity returns, transcribe speech, separate speakers and derive chapters, decisions and action items.
- A consent confirmation is shown before each meeting recording. It is a product safeguard, not a determination that recording is lawful.
- Participants may contact the recording organizer or the WIMAX privacy contact to request access or deletion where applicable.
Storage, retention and deletion
Unless a shorter period is selected, content remains until the user deletes it or closes the account, subject to limited security backups and legal obligations.
- Interrupted meeting chunks may remain on the device until verified upload or manual deletion.
- Users can export structured workspace data and permanently delete their account from Settings.
- Deletion removes active-service data immediately and may take a limited period to propagate through encrypted backups and contracted processors.
Security and service providers
WIMAX uses encryption in transit, access controls and protected storage appropriate to the feature. Cloud processing requires authorized services to access decrypted content; it should not be described as end-to-end encrypted when WIMAX or a processor must process the audio.
- Providers may support hosting, databases, transcription, AI processing, speech synthesis, notifications, analytics and customer support.
- A current subprocessor list and international-transfer mechanism must be published before production use in relevant jurisdictions.
- No security system is infallible; suspected incidents should be reported through the published privacy contact.
Legal bases and your rights
Depending on location, processing may rely on performance of a contract, consent, legitimate interests or compliance with law. Users may have rights to access, correct, delete, restrict, object, withdraw consent, receive a portable copy or complain to a regulator.
- Withdrawing consent does not affect processing already lawfully completed.
- Identity may be verified before a rights request is fulfilled.
- Local law may create exceptions or additional rights.
Children, changes and contact
WIMAX is not directed to children under 16, or a higher minimum age required locally. We will post material policy changes and request renewed consent where required. Questions and rights requests should be sent to the privacy contact published by the operating entity.