Privacy Policy

1. General Provisions

This Privacy Policy describes how Yapper (“we”, “our”, or “the platform”) collects, uses, processes, and protects your personal data when you interact with our website, desktop client, and mobile applications.

We are committed to respecting your privacy and ensuring that any data entrusted to us is processed in accordance with transparent security practices.

2. Information We Collect

We collect minimal information necessary to provide, protect, and improve our services:

• Account Credentials: Email address, username, display name, and password (securely hashed using salted bcrypt).
• Profile Information: Profile avatar image, biography, status messages, and customized profile themes if set.
• Usage & Telemetry Data: IP addresses, active session identifiers, browser and operating system details, crash logs, and device characteristics used strictly for account security and health monitoring.
• Cookies & Local Storage: Cryptographic session tokens and authentication state cookies necessary to keep you signed in.

3. Audio and Video Calling

Yapper provides high-definition, real-time voice, video, and screen-sharing communication capabilities. Regarding these communications:

• We request device permissions for your microphone and camera exclusively to capture and transmit your media stream to other participants in your active voice channel or direct call.
• Audio, video, and screen streams are transmitted through our low-latency WebRTC relay servers in real time. We never record, listen to, or store your voice conversations or video streams on our servers.

4. Third-Party Services and Infrastructure

To guarantee fast delivery and robust platform security, we work with select trusted third-party providers who may process limited data strictly as needed for their designated services:

• Firebase Cloud Messaging (Google): Delivers push notifications for new direct messages, channel mentions, and incoming call alerts across devices.
• Google reCAPTCHA: Utilized during registration and authentication procedures to protect community infrastructure against bots.
• LiveKit: Powers our real-time WebRTC media engine for ultra-low latency voice rooms, video calls, and screen streaming.

5. Data Security & Encryption

We implement comprehensive technical, administrative, and physical security safeguards to shield your data against unauthorized access, destruction, loss, or disclosure. All communication across our infrastructure is encrypted in transit using TLS/HTTPS and secure WebSockets (WSS). Sensitive data at rest, including passwords, are protected using one-way cryptographic hashing algorithms.

6. Your Rights & Account Deletion

You maintain full control over your personal data:

• You can review, update, or change your profile information at any time via your user account settings.
• You possess the definitive right to permanently delete your Yapper account and purge all associated messages, uploaded attachments, and personal records from our databases. Account deletion can be initiated directly within the application settings or requested via our support team.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Data Protection team at privacy@yapper.chat.