Privacy Policy

1. Information We Collect

1.1 Account Information

When you create a Huddly account, we collect your name, email address, and profile picture. If you sign up via a third-party service (Google, GitHub), we receive your basic profile information from that provider.

1.2 Usage Data

We automatically collect certain information when you use Huddly, including:

• Device type, browser version, and operating system
• IP address and approximate geographic location (country-level)
• Pages visited, time spent in rooms, and feature usage
• Crash reports and performance metrics

1.3 Communication Data

Chat messages within rooms are processed in real-time and are not stored on our serversafter the session ends. Audio and video streams are transmitted peer-to-peer via WebRTC and are never recorded or stored by Huddly unless you explicitly enable recording.

1.4 Cookies

We use essential cookies for authentication and session management. We also use analytics cookies to understand how our platform is used. You can disable non-essential cookies in your browser settings.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Huddly platform
• Authenticate your identity and secure your account
• Send important service notifications (security alerts, account updates)
• Analyze usage patterns to improve performance and features
• Prevent abuse, fraud, and violations of our Terms of Service

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

3. Data Sharing

We share your information only in these circumstances:

• With your consent: When you explicitly authorize sharing
• Service providers: We use trusted third parties for hosting (Vercel), database (Supabase), and analytics. These providers are bound by data processing agreements.
• Legal requirements: When required by law, subpoena, or court order
• Safety: To protect the rights, property, or safety of Huddly, our users, or the public

4. Data Security

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted using TLS 1.3
• Passwords are hashed using bcrypt with salt rounds
• Database access is restricted and audited
• Regular security assessments and penetration testing
• WebRTC streams use DTLS-SRTP encryption

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Some anonymized usage data may be retained for analytics purposes.

6. Your Rights

You have the right to:

• Access your personal data we hold
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Withdraw consent for non-essential data processing

To exercise these rights, email us at privacy@huddly.app.

7. Children's Privacy

Huddly is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our platform. Your continued use of Huddly after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@huddly.app.