Privacy Policy

1. Who is responsible

This policy explains how the person responsible for Ozamigos, the controller of the personal data processed in the app, on the website and in the rooms, handles that data under Brazil's General Data Protection Law (Law No. 13,709/2018, the LGPD).

For anything about privacy and personal data, including the requests in section 7, write to kalinauskas@live.com. This is also the channel of the data protection officer.

2. What data we process

What you provide:

• the name others see in the room (it doesn't have to be your real name);
• the group password, checked each time you join and never stored by Ozamigos;
• the name and password of a group you create: the server keeps the group name and a digest of the password, from which the password can't be recovered, only in memory and only while the group exists;
• the room code;
• the messages and images you send in the chat;
• your voice, your screen and your computer's audio, when you talk or stream.

What is generated by use:

• your IP address and technical connection data, needed to deliver the service;
• technical operation logs, with a random connection identifier, the room code and timestamps, without names, passwords or conversation content. When an address is blocked for too many wrong passwords, its IP is logged as well;
• video and channel links sent in the chat (YouTube, Twitch, Kick, TikTok, Streamable and Medal): the Ozamigos server fetches the title and preview image from the site and sends them to the room. The server does the fetching, with none of your data; nobody in the room accesses the site just by receiving the link;
• technical stream quality measurements, only when someone in the room records the room's statistics for diagnostics. In that case, the app notifies everyone in the room, and the measurements go to whoever is recording, together with the name shown in the room.

What stays only on your device: your name, the group password and your preferences (volumes, microphone, shortcuts), stored in the browser or in the app. Diagnostic reports you save also stay on your device and only leave it if you send them to someone.

Ozamigos does not record your voice, your streams, your messages or your images. They are encrypted and delivered in real time to the people in the room.

3. Why we use it and on what legal basis

• Providing the service you asked for (joining rooms, talking, streaming and watching): performance of the service at the data subject's request (LGPD, art. 7, V).
• Security and abuse prevention (checking the password, blocking password guessing, technical logs to investigate failures): legitimate interest (art. 7, IX).
• Stream quality diagnostics, when someone in the room records statistics: legitimate interest, with notice to everyone in the room.

Statistics to improve the app. Today Ozamigos does not collect usage statistics. When it starts using technical performance statistics (such as connection quality) to improve the app, you will be notified in the app beforehand, this policy will be updated, and the content of your conversations will never be part of them.

Ozamigos doesn't sell personal data, doesn't show ads and doesn't use your data for advertising profiles.

4. Who we share it with

• People in the same room: your name, your status (microphone, streaming), what you say, stream and send in the chat. Since participants connect directly, people in the same room can also see your IP address. Use rooms with people you know.
• Infrastructure providers that run the service on our behalf: server and website hosting, network protection and delivery, and services that help devices connect. They receive your IP address and technical connection data. When two devices can't connect directly, voice, streams and images go through a relay service run by one of these providers, encrypted: it only passes them along, with no access to the content.
• Authorities, when required by law.

5. Transfers outside Brazil

Some infrastructure providers are located outside Brazil, such as in the United States. This transfer is necessary to provide the service you asked for (LGPD, art. 33, IX), and Ozamigos chooses providers with security measures compatible with the law.

6. How long we keep it

• Rooms, names and chat messages: only while the room is open, in the server's memory. None of it is recorded.
• IP address of someone who enters a wrong password: 5 minutes, in memory.
• Created groups (the name and the password digest): in memory, until the server restarts (or earlier, if the server fills up with groups and an empty group makes room for another). The IP address of someone who creates a group stays in memory for 10 minutes, to limit how many groups each person creates.
• IP address of someone who gets access to the relay: up to 2 days, in memory, to limit how much each person uses.
• Video links and their previews: up to 1 hour, in memory, so the same link isn't fetched again.
• Technical logs: for a short period, as long as the hosting provider keeps them.
• Data on your device: until you delete it.

7. Your rights

Under the LGPD (art. 18), you can request at any time: confirmation that we process your data; access to it; correction of incomplete or wrong data; anonymization, blocking or deletion of unnecessary data or data processed against the law; portability; information about who we share it with; review of automated decisions; and withdrawal of consent. You can also object to processing based on legitimate interest.

Send your request to kalinauskas@live.com. We reply within 15 days. If you are not satisfied, you can file a complaint with Brazil's National Data Protection Authority (ANPD).

Since Ozamigos keeps almost nothing, much of this is in your hands: you change your name when joining a room; in the browser, clear the site's data; in the app, uninstall Ozamigos and delete the %APPDATA%\Ozamigos Share folder.

8. Security

Connections to the server and between participants are encrypted, rooms require the group password, and repeated password guessing is blocked. No system is infallible: if we identify a security incident that may put you at risk, we'll notify you and the ANPD, as the law requires.

9. Children and teenagers

Children (under 12) should only use Ozamigos with the consent and supervision of their parents or guardians. Teenagers should use it with their guidance.

10. Cookies

The website and the app don't use cookies. The website keeps the latest app version in your browser for 10 minutes to show it on the download button, with no personal data.

11. Changes to this policy

When this policy changes, the date at the top is updated. If the change is significant (for example, collecting usage statistics), you'll be notified in the app.