Privacy Policy

MinbarLive

Last updated: September 9, 2026

1. Introduction

This Privacy Policy (“Policy”) explains how MegaBooker d.o.o., the company operating the MinbarLive platform (“MinbarLive”, “we”, “us”, “our”), collects, uses, stores, shares and otherwise processes personal data in connection with the use of MinbarLive websites, mobile applications, modules, administration interfaces, public displays, QR access, APIs and related digital services available through minbarlive.com, its subdomains and connected services (collectively, the “Service”).

This Policy applies to:

registered users and organization administrators;
users of MinbarLive mobile applications;
persons accessing publicly available content through a QR code, public link or embedded view;
other persons whose data is processed through the Service, where applicable.

In certain situations, MinbarLive acts as a data controller, while in others it acts as a data processor on behalf of the organization using the Service.

2. Who is the data controller

Unless otherwise specified in this Policy, a Data Processing Agreement or another specific agreement, the data controller is:

MegaBooker d.o.o. / MinbarLive

Privacy contact: privacy@minbarlive.com

MegaBooker d.o.o. generally acts as the data controller for data we process for the purposes of:

creating and managing user accounts;
authentication and access security;
managing organizations and user permissions;
customer support and business communications;
billing and administration of the business relationship;
security, maintenance and improvement of the Service;
compliance with legal obligations.

Where a user or organization transmits, streams, uploads, processes, archives or publicly publishes content through MinbarLive that contains personal data relating to other persons, the organization or user generally determines the purpose of that processing, while MinbarLive processes the data on their behalf and according to their instructions.

3. Categories of data we process

3.1. Account and organization data

Depending on how the Service is used, we may process:

the user's first and last name, if provided;
email address;
name of the organization, mosque, Islamic center or other legal entity;
user roles and permissions;
administrative and organization settings;
information required for authentication and access management;
information related to the plan and available functionality.

3.2. Public users and audience data

MinbarLive is designed so that people following a public live session can access content without creating a user account.

For this type of use, we may process limited information necessary to operate the Service, such as:

an anonymous or pseudonymous session identifier;
selected language;
display preferences;
access, connection or disconnection time;
limited technical and network data required for content delivery, security and Service stability.

3.3. Audio, transcripts, translations and other content

Depending on the functionality used by a user or organization, MinbarLive may process:

live audio content;
audio or video content uploaded by the user;
speech and other audio recordings;
transcripts and captions;
translations;
summaries;
results of automated and AI processing;
content associated with Studio, Podcast, Meetings, HutbaAssistant and other MinbarLive modules;
archived sessions and content the user chooses to save.

3.4. Technical, diagnostic and security data

We may process:

IP address or other network identifiers where necessary;
device type;
operating system;
browser type and version;
application version;
access logs;
error and performance information;
security events;
information about features used and system interactions.

Such data is primarily used for security, stability, diagnostics and prevention of abuse.

3.5. Billing and business relationship data

For organizations using paid plans, we may process:

active plan information;
usage information relating to included Service quotas;
invoice and billing information;
subscription or business relationship status;
information required for accounting and invoicing;
business communications relating to the Service.

Payment card information, where applicable, may be processed through appropriate payment service providers in accordance with their policies and applicable security standards.

4. How we obtain data

We may obtain personal data:

directly from you;
from the organization you belong to;
automatically while you use the Service;
from content transmitted or processed through the Service;
through authentication, infrastructure and other contracted service providers;
through third-party integrations that the user deliberately chooses to use.

5. Purposes of processing

We process personal data for the purposes of:

providing and administering the MinbarLive Service;
creating and managing user accounts;
authentication and access control;
enabling live audio processing;
generating transcripts and captions;
automatic language recognition;
generating translations;
generating summaries and other AI outputs;
enabling public access to live content through QR codes or links;
managing content archives and libraries;
providing Studio, Podcast, Meetings, HutbaAssistant and other functionality;
customer support;
sending service and security notifications;
maintaining stability and performance;
detecting and preventing abuse;
improving the functionality and quality of the Service;
subscription and billing administration;
complying with accounting, tax and other legal obligations;
protecting our rights and the security of users and the Service.

6. Legal bases for processing

Where the General Data Protection Regulation (GDPR) applies, we process personal data on one or more appropriate legal bases.

6.1. Performance of a contract

Where processing is necessary to provide the contracted Service to a user or organization, including:

account registration and management;
authentication;
use of contracted functionality;
processing of content;
delivery of results;
subscription and billing administration.

6.2. Legitimate interests

We may process certain data for our legitimate interests, provided those interests are not overridden by the rights and freedoms of the data subject, particularly for:

information security;
prevention of fraud and abuse;
prevention of unauthorized access;
monitoring system stability;
detecting and resolving errors;
improving Service quality and reliability;
establishment, exercise or defense of legal claims.

6.3. Legal obligation

We may process data where necessary to comply with legal obligations, including accounting, tax, regulatory and other obligations.

6.4. Consent

Where processing is based on consent, we will provide appropriate information before consent is given.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6.5. Processing on an organization's instructions

Where MinbarLive acts as a processor, we process data according to the documented instructions of the organization acting as controller.

7. Audio content and artificial intelligence processing

MinbarLive uses automated systems and artificial intelligence technologies to provide functionality such as:

speech recognition;
transcription;
language recognition;
captioning;
translation;
summary generation;
content processing and analysis;
other functionality expressly initiated by the user through the Service.

7.1. Audio processing

When a user starts a live session or another feature requiring speech processing, MinbarLive may transmit audio content through secure communication channels for real-time or near-real-time processing.

Audio segments used solely for live processing are not permanently stored by MinbarLive unless the user or organization uses a feature that expressly includes recording, uploading or archiving audio or video content.

7.2. External AI and technology service providers

To provide certain functionality, MinbarLive uses contracted providers of specialized technology and AI services.

Depending on the functionality used, relevant portions of audio content, text, transcripts or other data may be securely transmitted to such providers for:

speech recognition;
automated transcription;
translation;
text generation or processing;
generation of speech output;
other functionality requested by the user.

Such providers process data only to the extent necessary to provide the relevant functionality and are subject to appropriate contractual, security and legal obligations.

MinbarLive requires its contracted service providers to apply a level of personal data protection appropriate to our obligations and applicable law.

Where applicable law or platform rules require specific consent for the transfer of personal data to an external AI provider, such consent will be requested before the relevant processing takes place.

Information regarding individual processors may additionally be provided to organizations where required by applicable law or a Data Processing Agreement.

7.3. Mobile application and microphone

The MinbarLive mobile application may request permission to access the microphone.

The microphone is used when the user knowingly starts a feature that requires speech transmission, such as live transcription and translation.

MinbarLive does not access the microphone for this purpose without the appropriate permission from the operating system.

The user can manage microphone permission in the device settings.

Disabling microphone access may prevent features that depend on audio processing from functioning.

7.4. Accuracy of AI-generated results

Transcripts, translations, summaries and other automated outputs are generated by machine systems and may contain errors.

Such results are not a professional, legal, theological or certified human translation.

For content where complete accuracy is important, we recommend appropriate human review.

8. Organization content and third-party personal data

Organizations and users who transmit or process content through MinbarLive are responsible for ensuring an appropriate legal basis for that processing.

This may include an obligation to:

inform persons whose speech or other data is being processed;
obtain consent where required;
ensure that recording or streaming is lawful;
ensure that public publication is lawful;
respect intellectual property rights;
protect personal data and other rights of third parties.

Depending on the circumstances, content may contain sensitive data or special categories of personal data.

The organization deciding to process such content is responsible for ensuring an appropriate legal basis and fulfilling its obligations toward data subjects.

9. Categories of data recipients

We may make personal data available, only to the extent necessary, to the following categories of recipients:

cloud infrastructure and hosting providers;
database and storage providers;
authentication and access-management providers;
speech recognition and transcription providers;
translation service providers;
AI processing providers;
speech processing or speech generation providers;
email and notification service providers;
security, backup, monitoring and technical service providers;
payment service providers, where applicable;
accounting, legal and other professional advisers;
competent public authorities where required by law.

We do not grant third parties the right to use user content for their own purposes unrelated to providing the contracted service, unless there is a separate legal basis or the user expressly requests a feature involving a different type of processing.

10. International data transfers

Some infrastructure, AI or other technology service providers may process data outside the European Economic Area.

Where personal data is transferred to a country for which the European Commission has not adopted an adequacy decision, we use appropriate legal mechanisms and safeguards where required, including:

Standard Contractual Clauses;
appropriate contractual safeguards;
technical and organizational measures;
other mechanisms for international data transfers permitted by law.

11. Data retention

We retain personal data only for as long as necessary for the purposes for which it was processed, unless a longer retention period is required by law.

In general:

user account data is retained for the duration of the account and, where necessary, for a reasonable period after closure;
audio segments used solely for live processing are not permanently stored by MinbarLive unless a recording or archiving feature is enabled;
transcripts, captions, translations, summaries and other archived content may be retained until deleted by the organization or an authorized user, until an applicable retention period expires, or until account closure;
business, accounting and tax data is retained for periods required by law;
security and diagnostic data is retained only for as long as reasonably necessary for security, diagnostics, prevention of abuse or incident resolution.

12. Cookies and local storage

MinbarLive may use cookies, local storage, session storage and similar technologies for:

authentication;
maintaining the user session;
security;
saving language preferences;
saving display settings;
enabling core Service functionality;
diagnostics and improving Service reliability.

If we introduce technologies requiring additional consent under applicable law, users will be provided with an appropriate choice.

13. Data security

We apply appropriate technical and organizational measures to protect personal data, including, where applicable:

encrypted communications;
access controls;
authentication;
management of user permissions;
role- and need-based access restrictions;
security logging and monitoring;
infrastructure protection;
contractual and security requirements for service providers.

Although we take reasonable security measures, no electronic system can guarantee absolute security.

14. Your rights

Where the GDPR applies to the processing, you may, subject to conditions set out by law, have the right to request:

access to your personal data;
correction of inaccurate or incomplete data;
deletion of data;
restriction of processing;
data portability;
objection to processing based on legitimate interests;
withdrawal of consent where processing is based on consent.

You may send a request to:

privacy@minbarlive.com

Before acting on a request, we may ask for information necessary to verify the identity of the requester.

If you believe that your personal data is being processed in violation of applicable data protection law, you have the right to lodge a complaint with the competent data protection authority.

15. Account and data deletion

A user may request deletion of their user account and personal data by contacting MinbarLive at:

privacy@minbarlive.com

Where the user account is managed by an organization, certain requests relating to organization content may be referred to the relevant organization acting as controller.

Deleting an account does not necessarily result in automatic deletion of information we are required to retain for legal, accounting, security or legal-claims purposes.

16. MinbarLive as a data processor

Where an organization uses MinbarLive to process personal data relating to its members, speakers, employees, visitors or other persons and determines the purposes and means of that processing, the organization generally acts as controller and MinbarLive as processor.

In such situations:

we process data according to the organization's documented instructions;
we apply appropriate security measures;
we use subprocessors only in accordance with applicable contractual and legal requirements;
we assist the organization in meeting applicable obligations where contractually agreed or legally required.

17. Children

MinbarLive organization user accounts are not intended for children.

Certain publicly available content may be accessible to a wider audience, including through public links or QR codes, under the responsibility of the organization publishing that content.

We do not knowingly collect children's personal data for the purpose of opening a standard user account contrary to applicable law.

If we become aware that a child's personal data has been processed in violation of applicable law, we will take appropriate steps to delete it or restrict the processing.

18. Changes to this Privacy Policy

We may update this Policy from time to time due to:

changes to MinbarLive functionality;
introduction of new products or services;
changes in how data is processed;
changes to service providers;
security reasons;
legal or regulatory requirements.

The current version will always be available on the MinbarLive privacy page together with the date of the latest update.

Where a change materially affects users' rights or how personal data is processed, we may provide additional notice where required.

19. Contact

For questions, requests or complaints relating to this Privacy Policy or the processing of personal data, contact us at:

MegaBooker d.o.o. / MinbarLive

Email: privacy@minbarlive.com

Web: minbarlive.com