Privacy Policy

1. Who We Are

Spaces Companion operates the Spaces Companion web application. For questions about this policy, contact us at info@spacescompanion.com.

2. Data We Collect

Account Data (from X OAuth): X user ID, handle, display name, profile picture URL, and follower/following counts.

Platform Activity: Rooms hosted/joined, music queue history, chat messages, game scores, karma transactions, achievements, streaks, friend connections, and profile settings.

Technical Data: Session tokens (HTTP-only cookies), IP address (retained 30 days), browser/device type, error and performance telemetry.

Payment Data: Tip transaction amounts, sender/recipient, and status. Full payment card details are handled exclusively by Stripe and never touch our servers.

3. How We Use Your Data

We use your data to authenticate you, display your profile to other users, power rooms/games/karma/leaderboard features, send in-app notifications, enforce our Terms of Service, prevent abuse, and improve the platform through aggregated anonymized analytics. We do not use your data for advertising targeting or sell it to data brokers.

4. Data Sharing

Stripe — Payment processing for tipping. Stripe receives transaction details necessary to process payments.

Anthropic — AI Co-Host feature. General room context is sent (no personal user data). See our AI Disclosure for full details.

X (Twitter) — Used for authentication and profile refresh. See our X Integration Disclosure for full details.

Legal Obligations — We may disclose your data if required by law or to protect our rights and the safety of users.

Business Transfer — Your data may be transferred if Spaces Companion is acquired. We will notify users via the platform if this occurs.

5. Data Retention

We retain your account data for as long as your account is active. Server access logs are retained for 30 days. When you delete your account, we delete your personally identifying information within 30 days, except financial records (retained 7 years per tax law).

6. Cookies and Local Storage

We use secure HTTP-only session cookies for authentication. We do not use advertising cookies, tracking pixels, or fingerprinting. We use browser localStorage and sessionStorage for UI preferences only.

7. Data Security

We implement industry-standard security: HTTPS everywhere, encrypted session tokens, parameterized database queries, and server access controls. We will notify affected users within 72 hours of discovering a data breach posing significant risk.

8. Your Rights

You may request: access to your data, correction of inaccurate data, deletion of your account and personal data, and a portable export of your data. To exercise these rights, email info@spacescompanion.com. We will respond within 30 days.

You can also delete your account directly in the app under Settings → Account → Delete Account.

9. California Residents (CCPA)

California residents may request to know what personal information we collect, request deletion, and opt out of the "sale" of their information. We do not sell personal information. To exercise CCPA rights, email info@spacescompanion.com with the subject line "CCPA Request."

10. European Users (GDPR)

Our legal bases for processing your data: (a) contract performance — processing necessary to provide the Service; (b) legitimate interests — preventing fraud, improving the Service; (c) consent — for optional features. You have the right to lodge a complaint with your local data protection authority.

11. Children's Privacy

Spaces Companion is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us at info@spacescompanion.com.

12. Changes to This Policy

We may update this Privacy Policy at any time. We will notify users of material changes via an in-app announcement before the changes take effect.

13. Contact

Privacy questions or requests: info@spacescompanion.com