🔒 Privacy Policy

1. Introduction

ChatSpheres ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video chat platform.

This policy complies with the General Data Protection Regulation (GDPR) for EU users and the California Consumer Privacy Act (CCPA) for California residents.

2. Information We Collect

2.1 Information You Provide

2.2 Information We Automatically Collect

2.3 Video & Audio Content

• Live Video/Audio: Transmitted in real-time during calls via LiveKit (not stored unless recording enabled)
• Recordings: Stored if you enable recording (Free: 30 days, Pro: permanent)
• Transcripts: Auto-generated from recordings for search (stored indefinitely)

3. How We Use Your Information

We use your data to:

• Provide Services: Enable video rooms, spectating, recordings, and social features
• Process Payments: Handle subscriptions, Gem purchases, and creator payouts
• Improve Platform: Analyze usage patterns, fix bugs, develop new features
• Communicate: Send service updates, marketing (with consent), and support responses
• Ensure Safety: Detect fraud, enforce policies, protect users
• Legal Compliance: Comply with laws, respond to legal requests
• Display Advertising: Show relevant ads through Google AdSense (with consent)

4. Data Sharing & Disclosure

4.1 We Share Data With:

• Service Providers: Stripe (payments), Supabase (database), LiveKit (video), Netlify (hosting), Google AdSense (advertising)
• Other Users: Your public profile, video presence when in rooms
• Legal Authorities: When required by law or to protect rights/safety

4.2 We Never:

• Sell your personal data to advertisers
• Share private video content without consent
• Use your likeness for advertising without permission

5. Data Retention

6. Cookies & Tracking

6.1 Types of Cookies We Use:

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use the platform
• Advertising Cookies: Used by Google AdSense to serve relevant ads (with consent)

6.2 Managing Cookies

You can control cookies through our cookie consent banner or your browser settings. Note that disabling essential cookies may prevent some features from working.

6.3 Google AdSense & Advertising

We use Google AdSense to display advertisements on our website. Google AdSense uses cookies to serve ads based on your prior visits to our website or other websites. Here's what you should know:

• DoubleClick Cookie: Google uses the DoubleClick cookie to serve ads based on your visit to this site and/or other sites on the Internet.
• Personalized Ads: Google may use information about your visits to this and other websites to provide relevant advertisements about goods and services that may interest you.
• Opt-Out Options: You can opt out of personalized advertising by visiting Google Ads Settings.
• NAI Opt-Out: You can also opt out of third-party vendor cookies by visiting the Network Advertising Initiative opt-out page.

For more information about how Google uses data when you use our site, please visit: How Google uses data when you use our partners' sites or apps.

7. Your Rights

7.1 All Users Can:

• Access: View your personal data in account settings
• Correct: Update inaccurate information
• Delete: Remove your account and associated data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing emails

7.2 GDPR Rights (EU Users)

EU residents have additional rights under GDPR:

• Right to Erasure: Request complete deletion of your data within 30 days
• Right to Restriction: Limit how we process your data
• Right to Object: Object to processing based on legitimate interests
• Right to Portability: Receive your data in a machine-readable format
• Right to Complain: Lodge a complaint with your local data protection authority

7.3 CCPA Rights (California Residents)

California residents have the right to:

• Know what personal information we collect
• Request deletion of personal information
• Opt-out of data sales (we do not sell data)
• Non-discrimination for exercising your rights

8. Data Security

We implement industry-standard security measures:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Secure authentication via Supabase
• Regular security audits and penetration testing
• Employee access controls and training
• PCI-compliant payment processing via Stripe

While we take extensive precautions, no system is 100% secure. Please protect your account credentials.

9. International Data Transfers

Your data may be processed in the United States and other countries. For EU users, we ensure adequate protection through:

• Standard Contractual Clauses with our service providers
• Using providers with EU-US Data Privacy Framework certification

10. Children's Privacy

ChatSpheres is not intended for users under 18 years old. We do not knowingly collect data from minors. If you believe a child has provided us personal information, please contact us immediately.

11. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing any information.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting a notice on our website
• Sending an email to your registered address
• Updating the "Last Updated" date

13. Contact Us

For privacy-related questions or to exercise your rights:

• Email: chatspheres.worldwide@mail.com
• Support: Contact Form