Privacy Notice

Effective July 19, 2026

Deployment owner: complete controller identity, address, privacy contact, subprocessors, international-transfer mechanisms, lawful bases, regional rights, backup schedule, and jurisdiction-specific periods with privacy counsel before launch.

Data used

Account and profile details, messages and room activity, reports and moderation records, security events, consent choices, device metadata, delivery metadata, managed media, and administrator audit events are processed to operate and protect the service.

Purposes

Data supports authentication, communication, abuse prevention, moderation, analytics, advertising according to consent, delivery, support, security, and legal obligations.

Choices and rights

Members can edit profiles, control personalized-ad consent, create a comprehensive private export, and request account deletion from Settings. Export and deletion require current-password verification; requests run as audited background jobs. Additional regional requests use the configured privacy contact.

Security and retention

Credentials are hashed, transport uses TLS in production, media and exports use private storage, sensitive downloads use separate expiring credentials, and administrator actions are role-protected and audited. Default technical periods include 24-hour export availability, 30-day delivery/deleted-object metadata, 180-day analytics events, and 365-day audit/privacy-job records; authorized administrators can adjust bounded schedules. Account deletion revokes sessions immediately, requests contracted-provider erasure, removes private objects, and anonymizes or redacts applicable local data. Encrypted backups age out under the deployment's published finite schedule.