Data Transfer Policy

Last updated on April 1, 2025

This Data Transfer Policy explains how Wootzapp Inc. transfers and protects data between jurisdictions when you use our services.

Record 1: EU Meeting Data to US-Based Processing Infrastructure

  • Destination: United States
  • Legal Mechanism: Standard Contractual Clauses (SCCs)
  • Transfer Frequency: Live during active user sessions
  • Objective: Provide real-time transcription, AI analysis, and insight generation for European enterprise clients
  • Data Types:
    • Voice and audio recordings
    • Generated transcripts and text content
    • Participant identifiers and meeting metadata
  • Protective Measures:
    • End-to-end encryption (TLS 1.2+)
    • Encryption at rest using AES-256
    • Strict access controls and audit logging
    • Automated deletion after processing

Record 2: EU User Account Data to US-Based Database Infrastructure

  • Destination: United States
  • Legal Mechanism: Standard Contractual Clauses (SCCs)
  • Transfer Frequency: Ongoing for account management
  • Objective: Enable authentication, account management, and service delivery for EU users
  • Data Types:
    • Authentication credentials
    • User profile information
    • Settings and usage preferences
    • Session data and login history
  • Protective Measures:
    • AES-256 encryption at rest
    • Encrypted connections for database access
    • Multi-factor authentication for administrators
    • Regular security patches and isolated networks

Contact

For questions about this Data Transfer Policy, contact support@wootzapp.com.