Security

Everything you load from ezmeet travels over TLS (HTTPS). Meeting audio and video use WebRTC with DTLS-SRTP, so media is encrypted in transit between each participant and our media servers.

Media is relayed through our servers (an SFU) rather than exposed peer-to-peer, so participants do not see each other's IP addresses.

Every room is an unguessable link, and joining always requires a signed-in account. Sign-in is by a one-time code sent to your email, so there is no reusable password to leak or reuse elsewhere.

ezmeet does not record meetings. Real-time audio and video are relayed to connected participants and are not written to disk. If a recording feature is ever added, it will be off by default and clearly shown to everyone in the room.

Account and meeting metadata are stored on in-country infrastructure, so the service is fast and data-localization requirements are met for users in Russia (152-FZ). See the Privacy Policy for detail.

We keep account data while your account is active and for a limited period afterward for legal and security purposes, then delete or anonymize it. Meeting audio and video are never stored. You can delete your account at any time.

Account and meeting metadata are backed up regularly so we can recover from failure. Backups are encrypted and retained only as long as needed, then rotated out.

If you believe you have found a security issue, email security@ezmeet.xyz. Tell us what you found and how to reproduce it, and give us reasonable time to fix it before disclosing publicly. We appreciate responsible disclosure.