Privacy Policy

When you create an AlloChat account, we collect your email address, chosen username, and password (stored as a secure hash — we never store plain-text passwords). You may optionally provide a profile picture, display name, and bio. During normal use of the platform we automatically collect device and browser information, IP address (used for moderation and fraud prevention), pages and features you interact with, and the timing of those interactions. We do not sell this data to third parties.

We use the information we collect to: • Operate, maintain, and improve AlloChat • Deliver messages and manage your real-time sessions • Personalise your experience (e.g., suggested rooms) • Enforce our community guidelines and Terms of Service • Respond to support requests • Send you important service notifications (not marketing, unless you opt in)

We do not sell, rent, or trade your personal information. We may share limited data with: • Service providers who operate infrastructure on our behalf (e.g., hosting, email delivery). These providers are contractually bound to protect your data. • Law enforcement or regulatory authorities when required by law or to protect the safety of our users. • Other users only what you choose to make public on your profile.

AlloChat uses cookies and similar technologies to keep you logged in, remember your theme preference, and measure platform performance. You can control cookie behaviour in your browser settings. Disabling cookies may affect certain features of the platform.

We retain your account data for as long as your account remains active. If you delete your account, we remove your personal data within 30 days, except where retention is required for legal compliance or fraud prevention. Chat messages in public rooms are stored with an automatic expiry and are regularly purged. Private messages are end-to-end accessible only to the participants.

Depending on your location, you may have the right to: • Access the personal data we hold about you • Request correction of inaccurate data • Request deletion of your data ("right to be forgotten") • Object to or restrict processing of your data • Data portability To exercise any of these rights, contact us at privacy@allochat.app.

AlloChat is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us immediately at safety@allochat.app and we will promptly remove the account.

We employ industry-standard security measures including TLS encryption for data in transit, bcrypt password hashing, regular security audits, and strict access controls for our engineering team. No method of transmission over the internet is 100% secure, but we take every reasonable precaution.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the platform or by email at least 7 days before the changes take effect. Continued use of AlloChat after changes constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or your data, please contact our Data Protection team at: Email: privacy@allochat.app Address: AlloChat Inc., [Your Office Address]