Privacy Policy

What we collect

• Email address you provide for sign-in.
• Space and room metadata you create.
• Chat messages you send (used to render the conversation).
• Operational logs (IP address, request id, user agent) for security and debugging.

How we use it

We use your data to provide the Service, authenticate you, prevent abuse, and meet legal obligations. We do not sell personal data.

Sub-processors

• Resend (transactional email)
• LiveKit (real-time audio/video transport)
• Postgres-managed hosting (database)

Data retention

Account data is retained while your account is active. Chat messages may be retained until the room is deleted. You can delete your account at any time from your profile; doing so anonymizes your profile (we null your email, name, and avatar) while leaving messages you sent in place, no longer attributed to you, so other participants' conversations stay intact.

Your rights (GDPR)

EU/UK users have the right to access, rectify, or delete personal data, and to object to or restrict processing. You can exercise the core rights yourself from your profile: download a JSON export of your data (access/portability), edit your profile (rectification), and delete your account (erasure). For anything else, or to object to or restrict processing, email [email protected].

Cookies

We use one strictly-necessary cookie (__chatterbox_session) to keep you signed in. We do not use tracking cookies.