AI Live Translator
Back to AI Live Translator

PROTOSPARKS · SECURITY

Security — AI Live Translator

Last updated: 29 September 2026

Security is an integral part of how AI Live Translator is designed and operated.

1. Access protection

Administrative areas are reserved for authorized users. Authentication, roles and permissions limit access to functions and data.

    2. Credentials and secrets

    API keys and credentials from external services are managed server-side and must not be exposed in the public interface. Whenever possible we use temporary tokens.

      3. Communications

      The platform uses HTTPS and real-time technologies designed to protect data in transit. Users must use trusted networks, secure devices and updated browsers.

        4. Data and permissions

        • Super Admin: authorized administrative functions.
        • Admin: own areas and functions according to assigned permissions.
        • Guest: exclusively sessions reached with a valid link.

        5. Invitation links

        Call links use identifiers that are not intended to be predictable. Do not share confidential links publicly.

          6. Technical providers

          OpenAI, LiveKit, Google, Telegram (internal admin notifications only), the email provider and the hosting and managed database providers support their respective technical functions. Integrations are configured to limit data to what is necessary.

            7. Vulnerability reporting

            Please send description, URL or feature, replay steps, useful screenshots, and potential impact to security@protosparks.io. Do not include unnecessary personal data of third parties.

              8. Responsible disclosure

              • Do not access other people's data and do not modify or delete it.
              • Do not interrupt service or conduct destructive or denial-of-service testing.
              • Do not make a vulnerability public before ProtoSparks has had reasonable time to analyze and fix it.

              9. Incidents

              In the event of a data security breach we take measures to contain it, analyse its cause and impact and fix it.

              If the breach is likely to result in a high risk to the persons concerned, we notify the FDPIC as soon as possible; where the GDPR applies, we notify the competent authority within 72 hours unless a risk is unlikely. We also inform the persons concerned when required by law or necessary to protect them. Reports: security@protosparks.io.

                10. Contact

                Security: security@protosparks.io. Privacy: privacy@protosparks.io. Support: support@protosparks.io.