Privacy Policy
Last updated TODO: set on first real review
How XRoo handles data. TODO: this needs a full review once the product's account, call, session, and device data flows are finalized.
1. Scope
This policy covers personal data handled by XRternal Operators, LLC in connection with XRoo. It sits alongside our Terms of Service.
2. What we collect
Account and organization data:
- Your name and email address, and those of any users you create.
- Organization name and membership.
- Authentication data, handled via AWS Cognito.
TODO: enumerate call/session data (participants, duration, connection quality), and any recording or markup content, once retention behavior is finalized.
3. How we use it
- To provide directory, calling, and markup features.
- To secure the Service, investigate misuse, and meet legal obligations.
- To bill you and manage your subscription, where applicable.
We do not sell personal data.
4. Who we share it with
We use a small number of service providers, who process data on our instructions:
- Amazon Web Services provides hosting, database, and authentication.
- LiveKit (self-hosted) routes real-time call media.
- TODO: add a payment processor once billing ships.
5. Security
- Data is encrypted in transit and at rest.
- Access to production data is limited to those who need it.
6. Your rights
To exercise data rights available to you, email hello@xroo.app. We'll verify the request is really from you and respond within a reasonable time.
7. Changes
We may update this policy. If a change materially affects how we handle data you've already given us, we'll give notice before it takes effect.
8. Contact
Privacy questions: hello@xroo.app, or by mail to XRternal Operators, LLC, 30 N Gould St, Suite R, Sheridan, WY 82801.