Privacy Policy

1. Introduction

ChatGum ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your personal information.

2. Data We Collect

• Account data: username, display name, and email address provided during signup
• Messages: chat messages you send, including timestamps and room IDs
• Connection data: WebSocket connection IDs for real-time delivery
• Security data: hashed passwords, login attempt counts, and session tokens

3. How We Use Your Data

• To provide and operate the ChatGum service
• To authenticate your identity securely
• To deliver messages to the correct recipients
• To send password reset emails when requested
• To detect and prevent abuse or unauthorized access

4. Data Storage

Your data is stored on Amazon Web Services (AWS) infrastructure in the us-east-1 (N. Virginia) region. All data is encrypted at rest using AES-256 encryption provided by AWS DynamoDB. Passwords are never stored in plain text — we use PBKDF2-SHA256 with 200,000 iterations and a unique salt per user.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be shared only:

• With AWS as our infrastructure provider
• If required by law or a valid legal order

6. Cookies and Local Storage

ChatGum uses browser localStorage to store your session token, username, and display name so you stay logged in between visits. We do not use tracking cookies or advertising cookies.

7. Your Rights

• Access: you can request a copy of your data
• Correction: you can update your display name and password
• Deletion: you can request deletion of your account and all associated data
• Portability: you can request an export of your data

To exercise any of these rights, contact us at chatgum405@gmail.com.

8. Data Retention

We retain your account data for as long as your account is active. Chat messages are retained indefinitely unless you request deletion. Session tokens expire after 24 hours.

9. Children's Privacy

ChatGum is not intended for users under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of significant changes via email. Continued use of ChatGum after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests:
📧 chatgum405@gmail.com