Privacy & Security Policy

Last Updated: August 2026

Welcome to Rooila. Your privacy and security are our top priorities. This comprehensive Privacy and Security Policy outlines how we collect, process, protect, and retain your data. By accessing or using Rooila, you consent to the data practices described in this document. We comply with international data protection standards, including GDPR and local regulations, while enforcing strict anti-cybercrime measures.

1. Information We Collect

To provide a secure, seamless, and reliable communication experience, we collect the following types of information:

• Account Information: When you register, we collect your email address, a chosen username, and securely hashed passwords.
• Security & Audit Logs (Security Audit Trail): We strictly monitor and log your IP address, User-Agent (browser/device data), login/logout timestamps, and any critical account modifications (such as password or email changes). This data is essential for identifying unauthorized access and preventing brute-force attacks.
• Communication & Media Data: Chat messages and shared media files (images, videos, documents). Please note that real-time voice and video calls are encrypted point-to-point and the media streams themselves are never recorded or stored on our servers.
• Device & Usage Data: We may collect non-identifiable usage statistics to improve our platform's performance and fix bugs.

2. Data Retention Policy

Rooila operates on a strictly audited, forensics-ready infrastructure. Our data retention policy balances user privacy with public safety and legal compliance:

• No Permanent Deletion: When you choose to "delete" a message, photo, video, or document on Rooila, the data is not permanently erased from our physical databases. Instead, it undergoes a Soft Delete process and is retained for up to one year.
• Instant Interface Hiding: Soft-deleted content is instantaneously removed from all user interfaces and public APIs. Neither you, the recipient, nor group administrators can access or view your deleted messages.
• Forensic Archiving: Deleted media files and chat records are securely moved to an isolated, encrypted internal archive for this one-year period. This ensures that critical evidence remains intact, uncorrupted, and available strictly for potential legal investigations.

3. Your Rights & GDPR Compliance

Under the General Data Protection Regulation (GDPR) and other relevant privacy laws, you possess several rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can update or correct inaccurate personal data through your account settings.
• Right to Restrict Processing: You have the right to request that we temporarily or permanently stop processing your personal data, subject to legal limits.

4. Cookies and Tracking Technologies

Rooila uses minimal tracking technologies. We primarily use local storage (LocalStorage and SessionStorage) to securely hold your authentication tokens and application state. We do not use third-party advertising cookies or cross-site tracking scripts.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data, chat history, or audit logs with advertisers, marketers, or any third-party commercial entities under any circumstances. Your data is strictly used for the operational security and functionality of the Rooila platform.

6. Legal Compliance & Law Enforcement

We maintain a zero-tolerance policy towards severe criminal activities. While your privacy is paramount to us, it does not supersede public safety and the law. In extreme legal circumstances (including but not limited to terrorism, child exploitation, organized crime, or immediate threats to life), we will fully cooperate with official law enforcement agencies globally. Thanks to our Security Audit Trail and Soft Delete architecture, we are technically capable of providing comprehensive forensic data—including historically deleted messages, IP addresses, and media—to authorities when presented with a valid, legally binding subpoena, warrant, or court order.

7. Changes to This Policy

We may update this Privacy and Security Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify users of significant changes via email or an in-app announcement. Continued use of Rooila after such modifications constitutes your acknowledgment of the updated policy.