DRAFT: for legal review. This document is a placeholder. It has not been reviewed by counsel and must not be relied upon for any compliance or contractual purpose. Final wording will replace this notice on go-live.

Legal

Privacy Policy

Effective 2026-05-01

1. What we collect

Account information (name, email, profile photo) you provide when signing in via Google. Workspace data (rooms, chat messages, whiteboard contents, recordings) created by you and your teammates. Usage telemetry (page views, feature events) for product improvement. Diagnostic data (errors, performance) via Sentry.

2. How we use it

To provide the product (sign you in, render your workspace, synchronise audio / video / chat). To bill you (Stripe receives only the metadata it needs to charge). To improve the product (aggregated analytics; never sold). To respond when you contact support.

3. Where it lives

Postgres on Supabase (US region by default). Object storage on Supabase Storage. Real-time WebRTC media routed through LiveKit Cloud. Email via Resend. Stripe handles payment data; we never see your card number.

4. Sharing

We don't sell your data. Workspace content is visible only to members of that workspace. Subprocessors (Stripe, Supabase, LiveKit, Vercel, Sentry, Resend, Google Cloud) process data on our behalf under their own DPAs. A current list will live on /security once we publish a subprocessor page.

5. Your rights

You can export your workspace data, request deletion, or correct inaccurate information by emailing privacy@mbccanadainc.com. We honour deletion requests within 7 days for now; the self-serve flow is on the roadmap.

6. Contact

Privacy questions: privacy@mbccanadainc.com.