Privacy & Media Retention Policy
How PulseRTC protects in-flight WebRTC media streams, tenant metadata, and optional cloud egress recordings.
01. Volatile RAM-Only Media Forwarding
In-flight audio and video packets routed through the LiveKit SFU and Coturn TURN relay are encrypted via DTLS-SRTP and held strictly in volatile memory for real-time forwarding. Packets are never written to disk unless the tenant explicitly triggers a cloud egress recording.
02. Customer-Owned Cloud Recording Buckets
When LiveKit Egress is enabled, composite recordings and transcripts are pushed directly to the tenant's configured S3 or GCS bucket. Call Detail Records (CDRs) store only room name, participant identity, duration, and billed minutes for auditability.
03. Ephemeral TURN Authentication
STUN/TURN credentials are minted dynamically per room join using time-bounded HMAC-SHA1 tokens and expire automatically at session end.