Privacy and security
Salary data is sensitive. Meetor only works if you can trust it with that data. These are the rules the product follows.
Free data lives on your device
Section titled “Free data lives on your device”On the free plan, meetings, people, and rates are stored in your browser’s local database. Meetor’s servers hold only your account, your workspace settings, your monthly meeting count, and any receipt you chose to share.
This also means that if you lose the device, you lose the data. Download a device backup from time to time.
Pro sync is encrypted at rest
Section titled “Pro sync is encrypted at rest”Pro syncs your data across devices. On the server:
- Names, rates, salaries, and notes are encrypted with AES-256-GCM.
- Each workspace has its own encryption key. That key is itself encrypted by a key held apart from the database.
- Each encrypted value is bound to its record and field, so it cannot be copied to another row.
- No admin screen shows these fields.
- Logs redact salary, rate, name, and note fields.
Shared receipts carry no names
Section titled “Shared receipts carry no names”A shared receipt contains totals only: no names, no roles, no rates. The API rejects any receipt that includes them. See Receipts and sharing.
Nothing sensitive on the live screen
Section titled “Nothing sensitive on the live screen”The meter shows the total. Per-person costs appear only when you tap Show breakdown, and hide again after 10 seconds.
Sign-in
Section titled “Sign-in”- You sign in with a 6-digit code sent to your email. There are no passwords to leak.
- Codes last 10 minutes and allow 5 attempts. Requests are rate limited.
- Sessions, sign-in codes, and API tokens are stored as hashes, never in plain text.
No tracking
Section titled “No tracking”The app has no tracking scripts. Meetor uses Cloudflare Web Analytics, which counts page views in aggregate and sets no cookies.
Delete means delete
Section titled “Delete means delete”Deleting your account in Settings, Account removes your data from Meetor’s servers, revokes every shared receipt, deletes uploaded logos, and cancels any subscription at the end of the paid period. You get a confirmation email.
Data on your devices stays until you clear it from the browser.
What Meetor is not
Section titled “What Meetor is not”- Not a time tracker. Nobody clocks in.
- Not surveillance. Meetor does not listen, record, transcribe, or watch anyone.
- Not payroll. Rates are estimates you enter. Meetor never connects to payroll.