Privacy Policy

Revenue Room ("we", "us", or "our") operates this platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Revenue Room.

---

1. Information We Collect

Account information: When you register, we collect your name, email address, job title, and a secure hash of your password. We never store passwords in plaintext.

Messages and content: We store the messages, files, voice notes, and reactions you send within the platform to provide the service.

Usage data: We collect information about how you use Revenue Room, including last active timestamps and presence status.

OAuth sign-in: If you use Google or Microsoft to sign in, we receive your name and email from that provider. We do not receive your password.

2. How We Use Your Information

• To provide and operate Revenue Room platform
• To send you account-related emails (password resets, invitations, notifications)
• To enforce our Terms of Service and community guidelines
• To diagnose and fix technical problems
• To comply with applicable laws and regulations

3. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Hosting (Replit), email (Google Gmail API), error monitoring (Sentry) — all bound by data processing agreements.
• Law enforcement: When required by valid legal process.

4. Data Retention

We retain your account data and messages for as long as your account is active. When you delete your account, your profile is removed and your messages are anonymized (content replaced with [deleted]). Some data may be retained in backups for up to 30 days.

5. Your Rights (GDPR / CCPA)

• Access: You can download a copy of your data at any time from Account Settings → Export My Data.
• Deletion: You can delete your account from Account Settings → Delete Account.
• Correction: Contact us at support@alwayshired.com to correct inaccurate data.
• Portability: Your data export is in JSON format, a machine-readable standard.

6. Security

We use bcrypt password hashing, HTTPS-only transport, secure session cookies, and rate limiting on all authentication endpoints. Multi-factor authentication is available in Account Settings.

7. Children

Revenue Room is not directed at individuals under 16. We do not knowingly collect data from minors.

8. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated via email or an in-app notice.

9. Contact

For privacy inquiries: support@alwayshired.com
Revenue Room