Legal
Privacy Policy
Effective 2026-05-01
1. What we collect
Account information (name, email, profile photo) you provide when signing in via Google. Workspace data (rooms, chat messages, whiteboard contents, recordings) created by you and your teammates. Usage telemetry (page views, feature events) for product improvement. Diagnostic data (errors, performance) via Sentry.
2. How we use it
To provide the product (sign you in, render your workspace, synchronise audio / video / chat). To bill you (Stripe receives only the metadata it needs to charge). To improve the product (aggregated analytics; never sold). To respond when you contact support.
3. Where it lives
Postgres on Supabase (US region by default). Object storage on Supabase Storage. Real-time WebRTC media routed through LiveKit Cloud. Email via Resend. Stripe handles payment data; we never see your card number.
4. Sharing
We don't sell your data. Workspace content is visible only to members of that workspace. Subprocessors (Stripe, Supabase, LiveKit, Vercel, Sentry, Resend, Google Cloud) process data on our behalf under their own DPAs. A current list will live on /security once we publish a subprocessor page.
5. Your rights
You can export your workspace data, request deletion, or correct inaccurate information by emailing privacy@mbccanadainc.com. We honour deletion requests within 7 days for now; the self-serve flow is on the roadmap.
6. Contact
Privacy questions: privacy@mbccanadainc.com.