This Privacy Policy describes how ChatsDeep ("we," "us," or "our") collects, uses, and discloses your information when you use our real-time chat application, ChatsDeep (the "Service"). By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Information We Collect
We collect various types of information to provide and improve our Service to you. This includes:
a. Personal Information You Provide to Us
When you register for an account, use the Service, or communicate with us, you may provide us with personal information, including:
- Account Information: Your email address, display name, and password. We use Supabase Auth for secure authentication, which supports email/password and OAuth (Google, GitHub) sign-in methods.
- Profile Information: Customizable user profiles with avatars, display names, and bio.
- Communications: Content of your messages, including text, images, and other files shared through the chat. This includes public chat rooms and direct messages.
- User Settings: Preferences and configurations you set within the application.
b. Information Collected Automatically
When you access and use the Service, we may automatically collect certain information about your device and usage, including:
- Usage Data: Information on how you access and use the Service, such as chat activity, features used, and interactions with other users.
- Technical Data: IP address, browser type, operating system, device identifiers, and other technical information.
- Online Presence: Real-time user status and last seen indicators.
- Message Read Status: Tracking of unread messages and automatic marking as read when viewed.
c. Information from Third Parties
We may receive information from third-party services integrated with ChatsDeep, such as:
- Supabase: As our Backend-as-a-Service provider, Supabase handles our PostgreSQL database, authentication, file storage, and real-time subscriptions. Information collected and processed by Supabase is subject to their privacy policy.
- OAuth Providers: If you choose to sign in using Google or GitHub, we receive certain information from these providers as authorized by their respective privacy policies.
2. How We Use Your Information
We use the collected information for various purposes, including to:
- Provide and Maintain the Service: Operate, maintain, and improve the functionalities of ChatsDeep, including real-time messaging, user management, and file sharing.
- Personalize User Experience: Customize your user profile, settings, and interactions within the application.
- Communicate with You: Send you service-related notifications, updates, and support messages.
- Ensure Security: Implement and maintain security measures, including Row Level Security (RLS) and data encryption, to protect your data and prevent unauthorized access.
- Analyze and Improve: Understand how users interact with the Service to enhance features, optimize performance, and develop new functionalities.
- Comply with Legal Obligations: Adhere to applicable laws, regulations, and legal processes.
3. Data Sharing and Disclosure
We may share and disclose your information in the following situations:
- With Other Users: Your display name, avatar, online status, and messages are visible to other users within public chat rooms and direct messages.
- Service Providers: We engage third-party service providers to perform functions on our behalf, such as Supabase for backend services and Vercel for deployment and hosting. These providers have access to your information only to perform their tasks and are obligated not to disclose or use it for other purposes.
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency request).
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
- With Your Consent: We may share your information with third parties when we have your explicit consent to do so.
4. Data Security
We implement robust security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Row Level Security (RLS): Database-level security policies to ensure user-specific data access.
- Data Encryption: Secure data transmission and storage.
- Protected Routes: Authentication-required pages to prevent unauthorized access.
- Secure Authentication: Utilizing Supabase Auth for secure login processes.
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.
5. Your Data Protection Rights
Depending on your location and applicable data protection laws (such as GDPR and CCPA), you may have the following rights regarding your personal information:
- Right to Access: You have the right to request copies of your personal data.
- Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
- Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the contact details provided below.
6. International Data Transfers
Your information, including Personal Information, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
7. Children's Privacy
Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from children without verification of parental consent, we take steps to remove that information from our servers.
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at: verbroekj@gmail.com