Privacy Policy
What data we collect, why, for how long, and what you can require of us.
1. Who processes your data
The data controller is legal name to be defined, CNPJ to be defined, based inaddress to be defined.
2. What data we collect
Sign-up
Email, display name, and password, stored with argon2 and never in readable text. If you sign in with Google, we receive your email, name, and Google account identifier.
Use
Communities and rooms you take part in, presence, the status you chose, activity you decide to show, friendships, and text message history.
Technical
IP address, date and time of access, browser type or app version, and connection quality data such as latency.
Payment
Today PartyCall is free and does not collect any payment data. If paid plans ever exist, this policy will be updated beforehand, and your card number will never pass through us: it stays with the payment provider.
Content
Text messages and files you send to chat. Audio and video pass through the server only to reach the people in the room, andare not recorded.
3. What we use it for, and on which legal basis
| Purpose | Data | Legal basis (LGPD) |
|---|---|---|
| Create and keep your account | Sign-up | Performance of a contract, art. 7, V |
| Make the service work: voice, chat, presence, rooms | Use, content, technical | Performance of a contract, art. 7, V |
| Security, fraud prevention, and abuse prevention | Technical, use | Legitimate interest, art. 7, IX |
| Moderation and response to reports | Content, use | Legitimate interest, art. 7, IX |
| Retention of access logs | IP, date, and time | Legal obligation, art. 7, II (Marco Civil, art. 15) |
| Issuing a tax document | Payment, sign-up | Legal obligation, art. 7, II |
| Product news by email | Consent, art. 7, I (optional, can be withdrawn) | |
| Site audience measurement | Aggregated technical | Legitimate interest, art. 7, IX (no individual identification) |
You can object to processing based on legitimate interest, through the channel in item 12. In that case we review the request and reply with the decision and the reason.
4. Who we share it with
We do not sell personal data. We share it only with those needed to operate:
- Hosting and infrastructure: to be defined, which runs the servers.
- Transactional email: to be defined, for messages such as password recovery.
- Google sign-in, if you choose to sign in with Google.
- Authorities, when there is a court order or a legal obligation.
5. International transfer
If a provider is outside Brazil, the transfer is made with the safeguards of art. 33 of the LGPD, bysafeguard to be defined. The list of providers and countries is into be defined.
6. How long we keep it
| Category | Period | Reason |
|---|---|---|
| Sign-up | While the account exists, and for 30 days after a deletion request | A window to undo an accidental deletion |
| Text messages | While the room or the conversation exists, or until the author deletes it | How history works |
| Access logs (IP, date, and time) | 6 months | Marco Civil da Internet, art. 15 |
| Moderation and ban records | 2 years | Repeat violations and defense in a possible dispute |
| Cookie consent record | 2 years | Proof of the choice you made |
| Call audio and video | We do not keep | There is no recording in the service |
7. Account deletion
When you ask for deletion, within 30 days:
- sign-up data, friendships, status, and preferences are deleted;
- messages sent in rooms are anonymized, so they no longer point to you, and the conversation of the people who stayed is not broken;
- communities you own go throughdestination to be defined;
- access logs remain for the 6 months required by the Marco Civil, and tax data for the tax retention period, because that is a legal obligation and cannot be waived.
8. Your rights
Art. 18 of the LGPD guarantees you:
- confirm that we process your data, and access it;
- correct data that is incomplete, inaccurate, or out of date;
- ask for anonymization, blocking, or deletion of data that is unnecessary or excessive;
- ask for portability to another provider;
- delete data processed on the basis of your consent;
- know who we share it with;
- know what happens if you do not consent;
- withdraw consent;
- object to processing based on legitimate interest.
To exercise any of them, write tochannel being defined. We reply within 15 days. If we need to confirm your identity, we ask only for what that requires.
9. Access logs
Art. 15 of the Marco Civil da Internet requires application access logs to be kept for six months. We keep IP, date, and time, and those logs are released only under a court order.
10. Call recording
PartyCall does not record calls. There is no audio or video recording feature in the service.
If it ever comes to exist, this policy will be updated before launch, recording will depend on the consent of everyone in the room, and there will be a visible indicator on screen while it is happening.
11. Security
- All traffic uses HTTPS, and media is encrypted in transit.
- Passwords are stored with argon2.
- Call join credentials expire on their own and are issued per person.
- Internal access to data is limited to people who need it to operate the service.
If a security incident carries a relevant risk, we notify the ANPD and the affected data subjects, under art. 48 of the LGPD, within a reasonable time, describing what happened, which data was affected, and what to do.
12. Data protection officer
Data protection officer: to be defined
Contact: channel being defined
Address: address to be defined
You can also complain to the National Data Protection Authority, through the site gov.br/anpd.
Version 1.0-draft · In effect since to be defined (document being drafted) ·Terms ·Privacy ·Cookies ·Guidelines
When there is a material change, we give notice in advance inside the app and by email, and we ask you to accept again.