Privacy Policy — Zvonok Translator

Last updated: 19 August 2026

Zvonok Translator ("the app") is a live interpreting assistant used by a German

tax consultant (Steuerberater) during client conversations. A human consultant

speaks with the client; the app only interprets between Russian and German and

shows the consultant a written hint on screen. The app never speaks to the

client on its own behalf and never makes decisions for anyone.

This policy describes exactly what the app processes, where it goes, and how

long it stays. It describes the software as it is actually built — nothing is

listed here "just in case".

1. Who is responsible

The app is operated by the tax consultancy that installed it. The app runs on

the consultant's own computer inside the EU; there is no shared multi-tenant

server operated by the app developer.

Contact for privacy questions: the address shown on the app listing page in the

Zoom App Marketplace (Support contact).

2. What the app processes

a) Live meeting and call audio.

While a call or Zoom meeting is running, the app receives the audio of the

conversation. It converts speech to text, translates it, and plays synthesized

speech of the translation back into the call. Audio is processed as a stream in

real time.

b) Conversation text (transcript).

The recognized and translated text of the conversation is kept so the

consultant can see what was said and store a record of the consultation, as

required for professional documentation. Transcripts are stored on the

consultant's own computer.

c) Meeting metadata.

Meeting number, meeting topic, participant display names and join/leave events.

This is used to show the consultant who is in the meeting and to make sure the

interpreter joined the correct meeting.

d) Zoom authorization tokens.

OAuth access and refresh tokens issued by Zoom to the consultant, plus the

short-lived On-Behalf-Of (OBF) token that Zoom requires before the Meeting SDK

may join a meeting hosted by another Zoom account.

e) Diagnostic logs.

Technical events (time, meeting number in masked form, error codes) used to

find faults. Tokens, secrets, passcodes and client passwords are never written

to logs.

The app does not collect: payment data, contact lists, browsing history,

location, biometric identifiers, or advertising identifiers.

3. Recording

The app does not start Zoom cloud recording or local Zoom recording.

The app receives meeting audio through the Zoom Meeting SDK in order to

interpret it. Where the app keeps an audio or text record of a conversation, it

does so only on the consultant's own computer and only when the consultant has

switched that on. All participants are informed at the beginning of the

conversation that an AI interpreter is in use and that the conversation is being

documented.

4. Sub-processors

To turn speech into text, translate it, and turn text back into speech, the app

uses specialized services. Only the audio or text needed for that step is sent,

and only for as long as the step takes:

PurposeService
Speech recognition (German, Russian)Google Cloud Speech-to-Text; optionally Deepgram
Text translationGoogle Gemini / Google Cloud Translation
Speech synthesisMicrosoft Azure Speech; optionally a fully local synthesizer (Piper) running on the consultant's own computer
Telephony (phone consultations only)Twilio
Meeting participationZoom (Meeting SDK and Zoom REST API)

The services are configured to EU regions where the provider offers them.

No conversation content is sent to any other recipient, and none of it is sold,

rented, or used for advertising. The app developer does not receive copies of

conversations.

5. Storage and retention

under the consultant's control and deleted according to the consultancy's own

retention rules.

readable only by that user account (file mode 0600). They are never uploaded

anywhere.

consultancy.

6. Deleting your data / removing the app

A Zoom user may remove the app at any time in Zoom (Settings → Apps → remove).

Zoom then notifies the app through the app_deauthorized event, and the app

immediately deletes the stored Zoom tokens for that user. After removal, the app

can no longer join meetings on that user's behalf.

To have conversation records deleted, contact the consultancy directly — it is

the controller for those records.

6a. Your rights

If you are in the EU/EEA, you have the right to:

took place;

country of residence.

To exercise any of these rights, write to the support address shown on the app's

listing page, or to the tax consultancy that holds the consultation records.

Requests are answered within one month. Note that professional retention duties

(Steuergeheimnis, German tax and commercial retention periods) may require the

consultancy to keep some consultation records even after an erasure request; in

that case you are told which records are affected and why.

7. Legal basis and professional secrecy

The app is used inside a German tax consultancy and is subject to the GDPR

(DSGVO) and to professional secrecy obligations (Steuergeheimnis, § 203 StGB).

Processing of client conversation content takes place for the purpose of

providing the requested consultation, on the basis of the engagement between

the client and the consultancy, and with the participants informed at the start

of the conversation.

8. Security

shown in the user interface; log output is scrubbed automatically.

9. Changes

If the app starts processing something new, this page is updated before that

change is released.