Security at PartyCall
What we do with your data, in plain English, without hiding anything behind opaque terms.
Zero Recording
The server does not record audio or video. The media only goes to the people in the room.
Secure WebRTC
Encrypted communication in transit, with a per-person room credential that expires.
Passwords with Argon2
Cryptographic protection recommended internationally against brute-force attacks.
Minimum Data (LGPD)
We only ask for what is essential to authenticate: no ID number, no phone number, no third-party trackers.
We do not record audio or video from calls
The PartyCall server does not record calls. Audio and video pass through the media server only to reach whoever is in the room at that moment, and are not stored on disk. The desktop app has an optional replay that keeps, strictly on your own computer, the last 60 seconds of your own stream. Chat messages are kept as the room's history.
If recording ever exists, it will be announced on screen while it is happening, and it will depend on the explicit consent of everyone in the room. It is not something that would show up by surprise.
We ask only for the essentials
To create an account we ask for an email, a name and a password, or Google sign-in. That is all. No phone number, no ID number, no date of birth. Collecting less data is a principle of the LGPD (Brazil's data protection law) and the best protection for everyone.
The server decides permissions
Permission to speak, to turn the camera on, and to share the screen is decided on the server and goes inside the call credential. Changing something in the browser does not give back what was taken, because the media server refuses the transmission.
How data travels
- HTTPS requiredThe browser only allows camera and microphone on secure connections.
- Encrypted mediaAudio and video travel over WebRTC, encrypted in transit.
- A credential that expiresThe key to join the call has a short lifetime and is issued per participant.
- Password with Argon2The algorithm the security industry recommends today for storing credentials.
What you control
- Who gets inAn invite with a use limit, an expiry, and revocation at any time.
- Who speaksMute, deafen, kick, and move between rooms, with audit log.
- Who sees the roomA hidden room does not even appear in the list for someone who was not allowed in.
- Your LGPD rightsAccess, correction or deletion of your account can be requested at any time through the privacy channel.
Security is not a paid-plan item
Blocking and controlling who comes in work the same on every plan, including the free one. Putting protection behind a charge would be wrong toward users.
Related documents
The full texts are inPrivacy Policy,Terms of Use,Cookie Policy eCommunity Guidelines.
Found a vulnerability?
We practice responsible disclosure. Write to channel being defined describing the problem and how to reproduce it. We respond quickly, fix it and give credit to whoever reported it.