Privacy Policy
Provider: Alterante Inc. ("we," "us")
Effective date: 2026-08-24
Privacy Policy Version: 1.0
Contact: support@alterante.com
Company website: https://www.alterante.com
This Privacy Policy explains what personal data we process, why, and your rights. It covers our website, the free trial and contact/sign-up forms, and our vendor-hosted (managed) service. It does not cover self-hosted installations of our software — see "Self-hosted deployments" below.
The core principle: we cannot see your calls
hivedrop and alt-rtc-java (each, and together, the "Product") are peer-to-peer and end-to-end encrypted. Call content — audio, video, chat, and anything exchanged during a call — flows directly between participants and, when a direct connection isn't possible, is relayed only as encrypted data. We do not have access to, collect, or store the content of your calls. What we do process to run the service is limited connection and operational metadata, described below.
Information we process
1. Information you give us (website / forms). When you request a trial, contact us, or sign up, we collect what you submit — typically name, email address, company, phone number, country, and any message. These forms may be handled through a third-party form/spreadsheet provider (Google) acting as our processor.
2. Operational and connection metadata (managed service). To operate, secure, meter, and bill the hosted service, we process data such as: IP addresses; timestamps; session/meeting identifiers; connection and call *state* events (e.g. connect, pair, disconnect — not content); token and usage records; coarse browser/device characteristics; and diagnostic/security logs.
3. Call content. Not accessible to us and not collected (see above).
4. Cookies and local storage (the app). The application stores small items on your own device to make it work — for example a cookie holding your access token and its remaining balance, and browser local-storage preferences (such as whether the chat panel is shown). These are used to remember your token and settings on that device and are not used to track you across sites. See "Cookies" below.
5. Website analytics. Our website uses Google Analytics, provided by Google, to understand how visitors use the site and to improve it. Google Analytics sets cookies and processes usage data (such as pages viewed, referring source, approximate location, and device/browser information) as our processor. Where required, we obtain consent through our website cookie notice, and you can opt out using your browser controls or Google's opt-out tools. The calling application itself contains no analytics or third-party trackers — it stores only the strictly-necessary items described above.
Why we process it, and our legal bases
- To provide the service (connect calls, meter usage, manage tokens) — performance of a contract.
- To secure the service and prevent abuse/fraud (rate-limiting, lockouts, diagnostics, the security/activity log) — legitimate interests, and where applicable, legal obligation.
- To respond to trial/sales inquiries and communicate with you — legitimate interests or, where required, consent.
- To bill and keep records — contract and legal obligation.
- For marketing communications, where applicable — consent (you can opt out at any time).
Cookies
The application uses strictly-necessary storage on your device (the access-token cookie and preference storage described above) to function; it sets no tracking or analytics cookies. Our website additionally uses Google Analytics cookies to measure site usage; where required we present a cookie notice, and you can decline non-essential cookies or use browser/opt-out controls.
How we share data (sub-processors and third parties)
We do not sell personal data. We share data only with service providers acting on our behalf and as needed to run the service, including: hosting/CDN and tunnel providers (Cloudflare); the form provider for inquiries (Google); website analytics (Google Analytics, by Google); and our payment processor. To discover network addresses for a direct connection, the application may contact a STUN server (Google's public STUN server); that provider may observe the connecting IP address — a STUN server can be disabled or self-provided in configuration. A current list of service providers is available on request. We may also disclose data where required by law.
Retention
- Operational/security logs: 90 days, then deleted or anonymized.
- Trial/contact form data: until the inquiry is resolved, unless you ask us to delete it sooner.
- Billing records: as required by applicable law.
Where we process data
We are based in the United States and operate the Service from the United States; the personal data we process is handled in the U.S. We currently offer the Service to customers in the United States.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data; to object to or restrict certain processing; to withdraw consent; and to lodge a complaint with a supervisory authority. California residents have rights to know, delete, correct, and opt out of "sale"/"sharing" — we do not sell or share personal data as those terms are defined. To exercise any right, contact support@alterante.com; we will respond within the timeframe required by law.
Security
We use technical and organizational measures appropriate to the risk, including end-to-end encryption of call content, encryption in transit, access controls, and security logging. No system is perfectly secure; we cannot guarantee absolute security.
Self-hosted deployments
When a customer runs our software on their own infrastructure, that customer — not us — operates the service and determines how personal data is processed. We do not have access to a self-hosted installation, its users, its call content, or its logs. The self-hosting customer is the controller of that data, and its own privacy notice and practices apply. This Policy does not govern self-hosted deployments.
Children
The service is not directed to, and may not be used by, children under 18. We do not knowingly collect personal data from children.
Changes to this Policy
We may update this Policy; we will post the new version with an updated effective date and, where required, notify you.
Contact
Alterante Inc.
P.O. Box 4007, Menlo Park, CA 94026
650-265-7894
support@alterante.com
https://www.alterante.com