Last updated: 2026-08-19 · Beta edition
Beta edition. AcrossTable is in private beta. Two administrative facts are deliberately left open below rather than filled with a guess — the formal operating entity and the governing law — and both will be stated here before paid plans open. Everything this policy says about how the software handles data has been checked against the software itself.
中文 本页为 beta 版。下文有两处行政信息(正式经营主体、适用法域)刻意留白而非随意填写,付费档开放前会在此补全。本政策中关于软件如何处理数据的每一句,都对照软件本身核对过。
中文 本文英文为主文,中文为对照译文。两者含义不一致时以英文为准。
This policy describes what AcrossTable actually does with information, checked line by line against the software that runs the service. Where the software does not do something, this policy does not claim it does.
中文 本政策描述 AcrossTable 对信息的实际处理方式,每一句都对照运行中的代码逐条核对过。软件没做的事,本政策不会声称它做了。
AcrossTable is operated during the private beta by its builder as an individual operator. The formal operating entity will be named here before paid plans open.
Contact for anything in this policy, including a request to delete your data: hello@acrosstable.com
中文 内测期间,AcrossTable 由其开发者以个人身份运营;正式经营主体将在付费档开放前在此列明。与本政策有关的任何事项(包括删除数据的请求),请联系 hello@acrosstable.com。
The host is the person who starts a meeting, and the record of the meeting belongs to them. Today a host proves who they are with a password, and each deployment has exactly one of them; if sign-in accounts ship later, this policy will be updated to describe them before they take effect.
A guest is anyone the host hands the meeting link or QR code to. Guests need no account, no sign-in, and install nothing. Holding the link is the entire boundary.
中文 主持人是发起会谈的人,会谈记录归他。今天主持人以口令证明身份,且每套部署只有一位主持人;将来若上线登录账户,本政策会在其生效前先行更新说明。观看者是主持人把链接或二维码给到的人:无需账号、无需登录、无需安装,「持有链接」就是全部边界。
While a meeting runs, microphone audio is streamed to a speech-recognition provider and forwarded frame by frame. It is never written to disk by this service. Frames are held only as long as it takes to forward them; the only thing the server keeps about a frame is how many bytes it was.
Spoken translation, when a guest turns it on, is the same: the audio clip is sent straight to the listening browser and never lands on disk.
Everything a meeting leaves behind is text — the next section says exactly which text, and none of it is audio.
中文 会谈进行时,麦克风音频实时流向语音识别厂商、逐帧转发,本服务从不把它写入磁盘;音频帧只在转发所需的时间内存在,服务器唯一留下的是「这一帧有多少字节」。观看者开启语音朗读时同理:音频片段直接送到收听的浏览器,不落盘。一场会谈留下的东西全是文字——下一节逐项列出是哪些文字,其中没有音频。
Each meeting becomes one directory on the server, containing:
| File | Contents |
|---|---|
meta.json | Meeting id, host id, topic, the languages, speaker display names, start/end timestamps, and the consent timestamp (§6) |
captions.jsonl | One line per settled sentence: sentence id, speaker label, language, the original text, the translated text, and when it was spoken |
minutes.md | The generated summary — present only if the host asked for one (§8) |
metrics.jsonl | Latency measurements. These include when someone spoke, which is meeting data even though it contains no words |
Three files sit outside the meeting directories:
Speaker labels come from the recogniser and are opaque; the display names a host types are stored in meta.json and stay there.
A meeting in which nobody spoke leaves no record at all — the directory is removed when the meeting ends.
中文 每场会谈在服务器上是一个目录,含 meta.json(会议 id、主持人 id、主题、语种、说话人显示名、起止时刻、同意时刻)、captions.jsonl(每句一行:句 id、说话人标签、语种、原文、译文、说话时刻)、minutes.md(仅当主持人主动生成时存在)、metrics.jsonl(延迟埋点——不含内容,但含谁在何时说话,因此同样属于会谈数据)。目录外另有三份:用量台账(主持人 id、会议 id、起始时刻、有效时长,用于计费与配额)、观看链接令牌、候补名单(见 §10)。说话人标签由识别引擎给出、不含身份信息;主持人输入的显示名存于 meta.json。没有人开口的会谈不留任何记录——结束时目录即被删除。
To produce captions, translation and (on request) minutes, the service sends data to the providers below. This is the complete list — the software calls no other outside service.
| Provider | What it receives | Why | In the default setup |
|---|---|---|---|
| Soniox | Live audio, plus the glossary terms the host typed | Speech recognition, and the first-pass translation | Yes — the default recogniser |
| Anthropic (Claude) | Settled sentence text, recent turns, the meeting topic and glossary | Improving the translation; generating minutes when asked | Yes — the default refiner and minutes engine |
| OpenAI | The same as Anthropic | Fallback refiner if the primary fails; selectable as the minutes engine | As fallback only |
| ElevenLabs | Settled sentence text only — no audio, no topic, no glossary | Spoken translation, when a guest turns listening on | Yes, but only for a language someone is actually listening to |
| Microsoft (Edge read-aloud endpoint) | Settled sentence text only | Spoken translation, as a no-key fallback | Only if selected |
| AssemblyAI, OpenAI Whisper | Live audio | Alternative recognisers a host may select instead of Soniox | No |
Two of them are also contacted for reasons that carry no part of your conversation: a key-validity check when a host saves credentials, and — in the browser-direct mode — minting a short-lived key so the browser can open its own recogniser connection. Neither sends audio or text.
Two honest details the settings screen also states:
These providers process data on infrastructure outside your country, including in the United States.
中文 为产出字幕、翻译与(按需的)纪要,服务会把数据发给上表所列厂商。这就是全部——软件不调用任何其他外部服务。两处诚实细节:默认识别引擎下,第一版译文直接由音频产出而非由文本产出;主持人填写的会议主题发给翻译与纪要厂商,不发给语音识别厂商。这些厂商在你所在国境外(含美国)处理数据。
Before a meeting can start, the host must tick a box that reads:
我已告知所有参与者,本次会谈将被实时转写并生成双语记录 · I have told everyone present that this conversation will be transcribed into a bilingual record
The start button stays disabled until it is ticked, and the box resets for every meeting.
The moment the meeting starts, the server stamps that confirmation with its own clock and writes it into the record. If the confirmation never happened, the field is simply absent — the record says what actually occurred rather than what should have.
Guests see a line they cannot dismiss for the whole meeting: "This conversation is being transcribed · 本会谈正在实时转写". The same sentence is printed at the top of every exported transcript, so the notice travels with the document.
中文 会谈开始前,主持人必须勾选一条确认(原文见上);不勾则开始按钮禁用,且每场都要重勾。会谈开始的瞬间,服务器用自己的时钟给这次确认盖上时间戳并写进记录;没有确认过,该字段就直接缺席——记录如实说话。观看者全程可见一行不可关闭的告知:「本会谈正在实时转写」。同一句话印在每份导出的记录顶部,告知随文档一起走。
/health answers "alive" and a version, with no activity data. The counts endpoint sits behind the host password and returns numbers only — no meeting ids, no topics, no text.中文 无埋点、无追踪、无第三方脚本(应用页只加载自身的一个脚本,落地页不从外部加载任何东西,连字体都不加载);不设 cookie(主持端是口令弹框,WebSocket 票据只在内存里存活 60 秒);不用你的会谈训练模型——本代码库里没有训练链路,也没有把记录复制到 §4、§5 之外任何地方的路径;公开的健康检查端点不透露任何会议信息,计数端点在口令门之后且只返回数字。
Minutes are generated only when the host presses Generate notes on a finished meeting. Nothing generates them on a schedule, and a running meeting is refused.
When you do press it, the whole transcript is sent to a cloud model — the original-language lines, the topic, and the language pair. The settings screen says this in the same words:
发送给选中的厂商:整场会议的逐字记录 · 会议主题;返回:一份摘要。只在你按下「生成纪要」时发生,记录本身仍只保存在本机。
中文 纪要只在主持人对一场已结束的会谈按下「生成纪要」时产生:没有定时任务会生成它,进行中的会谈会被拒绝。一旦按下,整场逐字记录会被发送到云端模型(原文行、主题、语种对;不含译文)。设置屏用的是同一句话(原文见上)。
Plainly: today there is no automatic deletion. A meeting record stays in the deployment's data directory until someone removes it. There is no retention schedule, no expiry, and no self-service delete button in the app.
Two things you can do today:
中文 直说:今天没有自动删除。 会谈记录会一直留在部署的数据目录里,直到有人把它移除——没有保留期、没有过期、应用里也没有自助删除按钮。你现在能做两件事:把数据带走(在结束屏或历史屏把任一场会谈导出为 Markdown,双语或单语自选);请我们删除(写信到 hello@acrosstable.com 并说明是哪一场,我们会删掉记录并回信确认——在自助删除做出来之前,这是人工操作)。
If you enter your email on the marketing page, we store exactly three things: your email address, a short label for which page you signed up from, and the time. No IP address, no browser fingerprint, nothing else.
Write to hello@acrosstable.com and we take you off it.
中文 你在落地页留下邮箱时,我们只存三样:邮箱地址、你从哪个页面提交的简短标记、提交时刻。不存 IP、不做浏览器指纹、别的都不存。写信到 hello@acrosstable.com 即可移除。
0600) inside an owner-only directory (0700).中文 记录、令牌与密钥以仅属主可读写(0600)的权限写入仅属主可进入(0700)的目录;主持端在口令门之后,比较走 SHA-256 摘要 + 恒定时间比对(既不泄内容也不泄长度,答错等 500 毫秒);观看者连接即使自称主持人也发起不了、结束不了、推不动任何会议——能力按角色在连接时接线,而非逐条消息稽查。我们不做超出以上的承诺。
When this policy changes in a way that affects what happens to your data, we update the date at the top and post the change on this page before it takes effect. The service does not yet hold hosts' email addresses, so this page — not an email — is where changes are announced; if that changes, so will this sentence.
中文 当本政策的变更影响到你的数据处理方式时,我们会更新顶部日期,并在变更生效前在本页公布。服务目前不持有主持人的邮箱,因此变更以本页公告为准而非邮件通知;这一点如有改变,本句会随之更新。
hello@acrosstable.com — questions, deletion requests, or a copy of what we hold about you.
中文 hello@acrosstable.com —— 咨询、删除请求,或索取我们持有的与你有关的数据副本。