🔒 Privacy Policy

1. Introduction

Tivoq ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video chat platform.

This policy complies with the General Data Protection Regulation (GDPR) for EU users and the California Consumer Privacy Act (CCPA) for California residents.

2. Information We Collect

2.1 Information You Provide

Data Type	Examples	Purpose
Account Info	Email, username, password, profile picture	Account creation & authentication
Profile Data	Display name, bio, avatar	Personalization & social features
Payment Info	Billing address, payment method (via Stripe or Square), payout handle (if you request a cashout)	Processing purchases and recording payout requests
Communication	Support emails, feedback	Customer service

2.2 Information We Automatically Collect

Data Type	Examples	Purpose
Device Info	Browser type, OS, device ID	Service optimization & security
Usage Data	Pages visited, features used, session duration	Analytics & improvement
IP Address	Your IP address	Security, fraud prevention, approximate location
Cookies	Session cookies, preference cookies	Authentication & preferences

2.3 Video & Audio Content

• Live Video/Audio: Transmitted in real-time during calls (not stored unless recording enabled)
• Recordings: Stored if you enable recording (Free: 30 days, Pro: permanent)
• Transcripts: Auto-generated from recordings for search/SEO (stored indefinitely)

3. How We Use Your Information

We use your data to:

• Provide Services: Enable video calls, spectating, recordings, and social features
• Process Payments: Handle subscriptions, Gem purchases, and creator payouts
• Improve Platform: Analyze usage patterns, fix bugs, develop new features
• Communicate: Send service updates, marketing (with consent), and support responses
• Ensure Safety: Detect fraud, enforce policies, protect users
• Legal Compliance: Comply with laws, respond to legal requests

4. Data Sharing & Disclosure

4.1 We Share Data With:

• Service Providers: Stripe and/or Square (payments), Supabase (database/auth), LiveKit (video), Netlify (hosting), Firebase (storage/ops), Resend (email)
• Other Users: Your public profile, video presence when in rooms
• Legal Authorities: When required by law or to protect rights/safety

4.2 We Never:

• Sell your personal data to advertisers
• Share private video content without consent
• Use your likeness for advertising without permission

5. Data Retention

Data Type	Retention Period
Account Information	Until you delete your account
Video Recordings (Free)	30 days
Video Recordings (Pro)	Permanent (unless deleted)
Transcripts	Indefinite (for SEO/search)
Payment Records	7 years (legal requirement)
Analytics Data	26 months

6. Cookies & Tracking

6.1 Types of Cookies We Use:

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use the platform

6.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may prevent some features from working.

EU users will see a cookie consent banner on their first visit.

7. Your Rights

7.1 All Users Can:

• Access: View your personal data in account settings
• Correct: Update inaccurate information
• Delete: Remove your account and associated data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing emails

7.2 GDPR Rights (EU Users)

EU residents have additional rights under GDPR:

• Right to Erasure: Request complete deletion of your data within 30 days
• Right to Restriction: Limit how we process your data
• Right to Object: Object to processing based on legitimate interests
• Right to Portability: Receive your data in a machine-readable format
• Right to Complain: Lodge a complaint with your local data protection authority

7.3 CCPA Rights (California Residents)

California residents have the right to:

• Know what personal information we collect
• Request deletion of personal information
• Opt-out of data sales (we do not sell data)
• Non-discrimination for exercising your rights

8. Data Security

We implement industry-standard security measures:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Secure authentication via Supabase
• Regular security audits and penetration testing
• Employee access controls and training
• PCI-compliant payment processing via Stripe and/or Square

While we take extensive precautions, no system is 100% secure. Please protect your account credentials.

9. International Data Transfers

Your data may be processed in the United States and other countries. For EU users, we ensure adequate protection through:

• Standard Contractual Clauses with our service providers
• Using providers with EU-US Data Privacy Framework certification

10. Children's Privacy

Tivoq is not intended for users under 18 years old. We do not knowingly collect data from minors. If you believe a child has provided us personal information, please contact us immediately.

11. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing any information.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting a notice on our website
• Sending an email to your registered address
• Updating the "Last Updated" date

13. Contact Us

For privacy-related questions or to exercise your rights:

• Email: support@tivoq.com
• Support: Contact Form

For GDPR matters, you may also contact your local Data Protection Authority.