Privacy Policy — Groupchatty

1. Overview

Groupchatty ("we," "us," or "our") operates a terminal-native messaging platform. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

Account information — When you sign in via OAuth (WorkOS), we receive your email address and profile information from your identity provider. We store your email and a username you choose during onboarding.

Messages — Chat messages you send are stored in our database and associated with your username. Messages in public channels are visible to all channel members; messages in private channels or DMs are visible only to their participants.

Usage data — We may collect basic analytics (page views, install command clicks) through Vercel Analytics. This data is aggregated and does not identify individual users.

3. How We Use Your Information

— To authenticate you and provide access to your account
— To display your username alongside messages you send
— To deliver messages to the correct recipients in real-time
— To send you invite notifications from other users
— To improve the service through aggregated analytics

4. Third-Party Services

WorkOS — We use WorkOS for authentication. When you sign in, WorkOS processes your credentials according to their privacy policy.

Fly.io — Our backend runs on Fly.io infrastructure in the US. Data is processed and stored on their servers per their privacy policy.

Vercel — Our web properties run on Vercel. See their privacy policy.

5. Data Retention

We retain your account data and messages for as long as your account is active. You may request deletion of your account and associated data by contacting us. After deletion, your messages will be removed from active storage within 30 days.

6. Data Security

All data is transmitted over TLS (HTTPS/WSS). Authentication tokens are signed with industry-standard algorithms (RS256 / HS256) and expire after 30 days. We do not store passwords — authentication is delegated to WorkOS.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

— Access the personal data we hold about you
— Request correction of inaccurate data
— Request deletion of your data
— Object to or restrict certain processing
— Data portability

To exercise these rights, contact us at the address below.

8. Children

Groupchatty is not intended for use by anyone under 13 years of age. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this policy periodically. We will notify users of material changes by updating the "Last updated" date above.

10. Contact

For privacy-related questions or requests, open an issue on our GitHub repository.