1. Introduction
btalker ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our self-hosted SaaS platform.
2. Data You Own
Because btalker is self-hosted, you retain full ownership and control of all data stored on your instance. We do not have access to your database, user records, page content, or API keys. All data resides on infrastructure you provision and manage.
3. Information We Collect
When you register for a btalker account, we collect the following minimal data:
- Email address (used for authentication and account recovery)
- Hashed password (stored securely using industry-standard hashing)
- Account creation timestamp
- Email verification status
We do not collect personal information beyond what is necessary for account operation.
4. How We Use Your Information
We use your information solely to:
- Provide and maintain the btalker service
- Authenticate your identity for secure access
- Send service-related communications (password resets, verification emails)
- Comply with legal obligations
5. Third-Party Services
btalker may integrate with third-party services including:
- SMTP providers — For sending transactional emails. Your email content is not stored by the SMTP relay.
- Stripe — For processing subscription payments. We do not store payment card details; all payment data is handled by Stripe.
- Let's Encrypt — For automatic SSL/TLS certificate issuance. Domain names are shared with the CA for certificate validation.
6. Data Security
We implement industry-standard security measures:
- All traffic is encrypted via HTTPS/TLS
- Passwords are hashed using bcrypt
- API keys use random generation with configurable expiration
- The PocketBase API is not directly exposed to the internet (reverse-proxy only)
- Regular security updates and dependency patches
7. Data Retention
Your data is retained for as long as your account is active. When you delete your account, your personal data is permanently removed from our systems within 30 days. Data stored on your self-hosted instance is under your control.
8. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request data deletion
- Export your data
- Opt out of non-essential communications
9. Contact
For privacy-related questions, contact us at privacy@btalker (replace with your actual domain).