Roomrop Privacy Policy

Effective Date: April 22, 2026 · Last Updated: April 22, 2026

1. Introduction

Roomrop ("we," "us," or "our") is operated by Hayes Digital Ventures LLC, an Arizona limited liability company. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use Roomrop ("the Service").

By using Roomrop, you agree to this Privacy Policy. If you do not agree, do not use the Service.

2. Age Requirements (COPPA Compliance)

Roomrop is intended for users aged 18 and older. We do not knowingly collect personal information from children under 18. If you are under 18, do not use this Service. If we discover we have collected information from a user under 18, we will delete it immediately. If you believe someone under 18 has provided us personal information, contact us at legal@roomrop.com.

3. Information We Collect

Information you provide:

• Email address (used for authentication via Google OAuth)
• Display name (chosen by you)
• Profile information you voluntarily add

Information collected automatically:

• Device type and browser
• IP address
• Usage data (pages visited, features used, time spent)
• Log data (errors, timestamps)

Information from video/audio rooms:

Real-time video and audio are transmitted through our infrastructure but are not recorded or storedby Roomrop unless explicitly stated. Roomrop reserves the right to review room activity for trust and safety purposes following a user report, as described in our Content & Safety Policy.

4. How We Use Your Information

We use your information to:

• Create and manage your account
• Provide and improve the Service
• Send authentication confirmation emails
• Respond to support requests
• Ensure safety and enforce our Terms of Service
• Comply with legal obligations

We do not sell your personal information to third parties.

5. Data Sharing

We may share your information with:

• Service providers — third parties that help us operate the Service (e.g., Supabase for database, Vercel for hosting, LiveKit for video infrastructure)
• OpenAI — chat message content moderation (messages are analyzed for prohibited content and are not used for training)
• Legal requirements — if required by law, court order, or to protect our legal rights
• Business transfers — in connection with a merger, acquisition, or sale of assets

6. Data Retention

Chat messages are retained for 90 days after the room session ends. Contact form submissions are retained for 1 year. Account data (profile, preferences) is retained as long as your account is active.

You may delete your account at any time from your profile settings, or request deletion by contacting legal@roomrop.com. We will delete your data within 30 days of a verified request.

7. Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), secure authentication, and access controls. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security.

8. International Users

Roomrop is operated from the United States. If you access the Service from outside the US, your information may be transferred to and processed in the US. By using the Service, you consent to this transfer.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict processing of your information

To exercise these rights, contact legal@roomrop.com.

10. Third-Party Links

Roomrop may contain links to third-party websites. We are not responsible for their privacy practices.

11. Breach Notification

In the event of a confirmed data breach affecting your personal information, we will notify affected users within 72 hours via email and a prominent in-app notice. We will describe the nature of the breach, the data affected, and the steps we are taking to address it.

12. Local Storage

Roomrop uses browser localStorage for session preferences (theme selection, display name, and ToS acceptance). This data stays on your device and is not transmitted to our servers. You can clear this data at any time through your browser settings. Roomrop also uses session cookies for authentication, managed by Supabase Auth.

13. Sale of Personal Data

Roomrop does not sell, rent, or trade your personal data to third parties. We do not participate in data brokerage or share your information for advertising purposes. Your data is used solely to provide and improve the Roomrop service.

14. Changes to This Policy

We may update this Privacy Policy. We will notify you of significant changes by email or a prominent notice in the app. Continued use after changes constitutes acceptance.

15. Contact Us

Hayes Digital Ventures LLC
Data requests: legal@roomrop.com
General questions: support@roomrop.com