Privacy Policy

AppLooma RTC is a real-time voice, video, live streaming and messaging platform for developers, operated by AppLooma LLC (“we”, “us”). This policy covers our website, console, APIs and SDKs.

When you build an app on AppLooma RTC, you decide what data about your own users passes through the service. For that data you are the controller and we process it on your behalf.

• Account data: your name, email address, company name and console login details.
• Billing data: your plan, credit purchases, invoices and payment status. Card and PayPal details are entered with our payment providers, not with us.
• Usage data: session start and end times, participant minutes, room names and the participant identities your app sends, used for metering and your analytics.
• Technical data: IP address, device and SDK version, network quality and error reports sent by the SDKs to diagnose call problems.
• Messages you send us: what you write through the contact form or by email.

We sell monthly plans and prepaid credits. Payments are processed by Stripe and PayPal, depending on the method you choose. They collect and secure your card or PayPal account details under their own privacy policies; we receive only what we need to run billing, such as the payment status, amount, the last four digits and expiry of a card, and the billing country.

We keep invoices and payment records for as long as tax and accounting law requires.

• Live media is encrypted in transit and relayed between participants in real time. It is not stored.
• Recordings are made only when your app starts one, and are written to the storage bucket you configure, not to ours.
• Chat messages sent through Signaling are stored for the retention period of your plan, then deleted automatically.

If you record or store your users’ sessions, getting their consent is your responsibility.

To provide and secure the service, meter usage and bill you, show you analytics, diagnose call quality, prevent fraud and abuse, answer your questions, and tell you about changes to the service. We do not sell personal data and do not use it for advertising.

We share data only with the providers needed to run the service: hosting and media server providers, Stripe and PayPal for payments, an email delivery provider, and error monitoring. Each receives only what its job needs. We may also disclose data when the law requires it.

• Account data: while your account is open, and deleted after you close it, except records the law requires us to keep.
• SDK diagnostics: 14 days. Device reports: 90 days.
• Chat messages: your plan’s retention period.
• Payment and invoice records: as long as tax law requires.

Media is encrypted in transit with DTLS-SRTP and all API traffic uses HTTPS. API secrets are stored hashed, and access to production systems is restricted.

You can ask to see, correct, export or delete your personal data, or object to how we use it. Email info@applooma.dev from your account email and we will respond within 30 days. Customers in the EU and UK can request a data processing agreement.

When this policy changes we update the date at the top, and we email account holders about significant changes. Questions: info@applooma.dev or the contact form. See also our Refund Policy and Terms & Conditions.