← Legal

Privacy Policy

Effective 2026-09-03.

This Privacy Policy explains what Che Israel Olea ("Prodrooms," "we," "us") collects when you use prodrooms.com and the Prodrooms host application, why, and your choices. We collect as little as we can to run the Service. This Policy works alongside our Terms of Service.

1. What we collect

  • Account information: your email address, and if you use a third-party login (Google or Discord), the basic identity that provider shares. If you set a display name or upload a profile photo, we store those. Passwords for email accounts are stored only in hashed form by our authentication provider.
  • Access and beta data: whether your account has access, your plan or tier, which invite code you redeemed, and when your account was created.
  • Host and session records: for hosts, a record that a device is linked to your account (stored as a hashed token and a device label and fingerprint, not your credentials), and minimal room session records (a room code, and when a session started and ended) used to run the Service and meter usage. We do not record or store the audio or video of your sessions.
  • Room chat: messages you send in a room's chat are stored, together with your account and the time you sent them, so that someone who joins a room partway through can see what was already said. Only people who are in that room can read them. We keep them for 90 days and then delete them.
  • Payment information (when billing is on): when you subscribe or buy hours, our payment processor Stripe collects and processes your payment details. We receive limited information such as a customer identifier and your subscription status. We never receive your full card number.
  • Technical and network data: to connect a live session we use a media relay (Cloudflare) and a signaling service (Supabase Realtime). These services necessarily process network information, including IP addresses, to route the connection. Our web host (Vercel) processes standard request data, including IP addresses, in its server logs. If you request a beta invite, we receive the email you submit.
  • Profile information: if you claim a handle or fill in your profile, we store what you enter: your handle, display name, photo, bio, pronouns, location, roles, gear, skill level, links, and what you are working on. Your profile is public and can be viewed by anyone, including people who are not signed in. We also store who you follow and who you have blocked; we never display a follower count anywhere, to you or to anyone else.
  • Product usage: we record which pages you open and a small, fixed list of actions (for example, claiming a handle, saving your profile, or opening a room from the lobby), together with your account or a random per-browser key. We do not record IP addresses, browser or device details, or where you came from, and we never store a room code or an invite code in these records. We keep them for 180 days. If your browser sends a Do Not Track signal, we record nothing at all.
  • Local storage: we store your login session and small preferences (such as a per-browser key and your theme) in your browser's local storage. We do not use advertising or tracking cookies, and we do not run third-party analytics or ad trackers: the usage records above stay on our own servers and are never shared.

2. Why we use it

To create and secure your account; to provide the Service, including connecting and relaying live sessions and enforcing access, tiers, and usage limits; to process payments when billing is on; to communicate with you about the Service and the beta; to prevent abuse and enforce our Terms; and to comply with law.

3. Legal bases (for users in the EU/UK, if any)

We process account and session data to perform our contract with you, and we rely on our legitimate interest in operating and securing the Service and on your consent where required.

4. Sharing and processors

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We use service providers that process data on our behalf: Supabase (authentication, database, realtime signaling), Vercel (web hosting), Cloudflare (media relay), Stripe (payments, when billing is on), and Resend (email delivery for beta and account messages). Each processes data only to provide its service to us. We may disclose information if required by law or to protect rights and safety.

5. Retention

We keep account and access data while your account exists. Session and usage records are kept as needed to run and meter the Service. Product usage records are deleted after 180 days. Room chat messages are deleted after 90 days. Direct messages are deleted after one year. When you delete your account, we delete the account and the rows associated with it, including your profile, handle, follows, blocks, product usage records, room chat messages, redemptions, host credentials, host link grants, sessions, and usage records, and we remove your authentication user. Some data may persist briefly in backups or in our processors' logs before it ages out.

6. Your choices and rights

You can update your display name, email, password, and photo, and delete your account, from your account settings. Deleting your account removes your data as described above. Depending on where you live (for example, California residents under the CCPA, or EU/UK residents under the GDPR), you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of any sale (we do not sell data). To make a request, email legal@prodrooms.com; we will verify and respond as required by law. We will not discriminate against you for exercising these rights.

7. Children

The Service is for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

8. Security

We use reasonable measures to protect your information, including hashed passwords and tokens, access controls on our database, and encrypted transport. No system is perfectly secure. If a breach affects your personal information, we will notify you and any required authorities as the law requires, including under Florida's data breach law, without unreasonable delay.

9. International users

We operate in the United States, and your information is processed in the United States and wherever our processors operate. By using the Service you understand your information will be processed in the United States.

10. Changes

We may update this Policy. Material changes will be reflected in the effective date and, where reasonable, announced. Continued use means you accept the updated Policy.

11. Contact

Privacy questions or requests: Che Israel Olea, legal@prodrooms.com.