JOINROOMS BUSINESS CHAT
JoinRooms Business Chat Privacy Notice
This Notice explains how JoinRooms handles personal information in the Business Chat product. Business Chat is separate from consumer JoinRooms Rooms and has business-specific identity, retention, moderation, and recordkeeping behavior.
1. Information we handle
We handle business account and employee information such as names, login identifiers, roles, authentication records, device and session information, business name, website, timezone, branding, configuration, and support communications. We also handle customer or member identifiers supplied through Business Chat or an authorized business integration; conversation content; images and other permitted media; GIF references; reactions; typing, delivery, and read-state signals; community memberships and areas; waiting-room status; assignment history; and related timestamps and operational metadata.
2. How we use information
We use information to authenticate users; provide, route, retain, and secure conversations; operate Inbox, Team, Analytics, Community, Waiting Room, Hosted, Widget, and App Connect features; store private media; deliver notifications and partner events; prevent abuse; troubleshoot; maintain backups and recovery; meter product usage; administer subscriptions; comply with law; and improve reliability and usability. We do not use Business Chat content for advertising profiles and do not install third-party advertising trackers on the Business public site.
3. Hosted customer sign-in providers
When a Business customer enables Google or Facebook sign-in for hosted or website chat, the provider supplies a provider-specific user ID and display name so JoinRooms can authenticate the customer and keep that identity scoped to the correct Business and origin. For Facebook Login, JoinRooms exchanges and validates the access token on the server and does not permanently store the Facebook access token. We use provider identity information only for sign-in, tenant isolation, session security, abuse prevention, and operating the requested chat—not for advertising.
4. Provider identity retention, disconnection, and deletion
A provider identity association is retained while needed to recognize the customer for that Business chat. A signed-in Facebook customer can use Disconnect Facebook on the hosted chat page to remove the tenant-scoped association and revoke affected local sessions. Customers may also follow the public Facebook Data Deletion Instructions at /facebook-data-deletion or contact support@joinrooms.us. Disconnecting a sign-in association does not immediately erase conversation content governed by the Business customer's retention period or records JoinRooms must retain for security, legal, or contractual purposes.
5. Business Chat is server-readable
Business Chat content is processed and stored by JoinRooms systems so the service can deliver messages, retain history, support authorized business access, secure the service, and perform approved moderation and operational functions. Business Chat is not end-to-end encrypted and is not a zero-knowledge service. Transport is encrypted in transit, and private stored media is retrieved through authorized application routes.
6. Business customer and JoinRooms roles
A Business customer generally decides why and how it communicates with its own customers, members, or users and is responsible for the notices, permissions, and lawful basis required for those relationships. JoinRooms processes that information to provide Business Chat under the customer's instructions and the agreement. JoinRooms may separately determine limited processing necessary for account administration, billing, security, fraud prevention, service metering, legal compliance, and protecting the service. The exact legal roles may depend on the use case and applicable law.
7. Sharing and subprocessors
We disclose information to personnel and service providers only as needed to operate Business Chat, including Railway for application and PostgreSQL infrastructure, Cloudflare R2 for private object storage, Stripe for Business subscription checkout and billing when enabled, and an identity provider selected by the customer when provider sign-in is used. We may disclose information when required by law, to protect rights or safety, in a business transfer subject to appropriate safeguards, or with the customer's direction. We do not sell Business Chat message content or provider identity information.
8. Retention
Conversation content and media ordinarily follow the Business customer's selected 30-, 60-, or 90-day retention setting and the service lifecycle rules. Account, subscription, security, audit, legal-acceptance, aggregate usage, backup, and operational records may be retained longer where reasonably needed for their stated purpose, contractual records, fraud prevention, accounting, dispute resolution, or law. Backup and recovery copies are access-restricted and expire under documented schedules. Content subject to a lawful legal or safety hold follows a separate restricted process.
9. Cookies and local storage
Business Chat uses host-only cookies and browser storage needed for sign-in, security, session continuity, embedded handoff, presentation, and reliable chat behavior. These technologies are functional, not advertising trackers. Browser or device settings that remove them may require a user to sign in or resume chat again.
10. Security
We use measures designed for Business Chat such as tenant-scoped authorization, role-based employee access, encrypted transport, private media storage, restricted production services, credential separation, backups, monitoring, and security logging. No system is perfectly secure, and customers must protect their credentials and integration secrets.
11. Choices and requests
Business Owners and Managers can manage employee access, retention, branding, and supported settings in the Business Dashboard. Individuals should usually contact the Business customer they interacted with because that business controls the relationship and can identify the relevant conversation. Businesses and individuals may also contact support@joinrooms.us for privacy requests or questions. We may need to verify identity and authority, preserve records required by law, or direct a request to the appropriate Business customer.
12. Changes
We may update this Notice as Business Chat or applicable requirements change. Material changes will receive a new version and effective date, and we may require renewed acceptance where appropriate.