Privacy Policy

1. Data We Collect

• Account data — email address (if you create an account), display name, and account type (anonymous or registered).
• Age verification data — date of birth (self-attested), stored to verify you are 18+.
• Session data — your user ID, interest tags, and match history.
• Network data — IP address (for geo-restriction, ban enforcement, and abuse prevention).
• Device data — device fingerprint (for ban enforcement and abuse prevention).
• Chat metadata — text chat logs are retained for up to 30 days for moderation review, then automatically deleted.
• Report data — reports you submit, including chat logs and toxicity scores.
• Billing data — payment is processed by Lemon Squeezy (our merchant of record). We receive your customer ID and subscription status, but not your credit card details.

2. Data We Do NOT Collect

• Video recordings — we do not record, store, or capture video streams. Video is transmitted peer-to-peer via LiveKit and not stored on our servers.
• Credit card numbers — handled entirely by Lemon Squeezy.
• Browsing history — we do not track your activity outside VideoTalk.
• Personal data of third parties — we do not collect information about people other than our users.

3. How We Use Your Data

• To provide the random video chat matching service
• To verify your age (18+ requirement)
• To enforce geographic restrictions (US & Canada only)
• To moderate content and enforce bans
• To process subscriptions and manage premium features
• To prevent abuse, spam, and bot activity
• To comply with legal obligations, including reporting CSAM to NCMEC

4. Data Retention

• Anonymous user accounts — deleted after 30 days of inactivity
• Chat logs — retained for 30 days, then automatically deleted
• Reports — retained for the duration of the platform's operation for moderation records
• Ban records — retained indefinitely to prevent ban evasion
• Account data — retained until you request deletion

5. Data Sharing

We do NOT sell your data. We do NOT share your data with third parties for advertising. We share data only with:

• Lemon Squeezy — for payment processing (merchant of record)
• LiveKit — for video relay infrastructure (session data only, no video storage)
• Supabase — for database hosting and authentication
• OpenAI Moderation API — for text toxicity scoring (chat text only, not stored by OpenAI)
• Law enforcement — when required by law, including CSAM reports to NCMEC

6. Your Rights

Depending on your jurisdiction (US state privacy laws, Canada PIPEDA), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Opt out of the sale or sharing of your data (we do not sell data)
• Withdraw consent for data processing

To exercise these rights, email privacy@videotalk.me.

7. Children's Privacy

VideoTalk is not directed at children under 18. We do not knowingly collect data from anyone under 18. If we become aware that a minor has used the service, we will delete their account and ban their device. Suspected CSAM is reported to NCMEC immediately.

8. Cookies

We use essential cookies for authentication (Supabase session cookies). We use privacy-friendly analytics (Plausible) that do not use cookies or track individuals. We do not use advertising cookies.

9. Compliance

This policy is designed to comply with:

• Canada — PIPEDA (Personal Information Protection and Electronic Documents Act), and provincial laws including Quebec Law 25
• United States — CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), and other applicable state privacy laws

10. Contact

Privacy questions or data requests? Email privacy@videotalk.me.