Privacy Policy

This Privacy Policy explains how Optando, LLC ("Optando", "we", "us", "our") collects, uses, discloses, and protects information in connection with EVAP.io and any related software, applications, websites, APIs, SDKs, or services (collectively, the "Service").

Last Modified: January 27, 2026

This Privacy Policy is part of (and incorporated by reference into) the Terms of Service. Your use of the Service is also subject to our Acceptable Use Policy.

This Privacy Policy applies to individuals who use the Service directly. It also applies to End Users who use the Service through a Customer's enterprise or white-label deployment, unless the Customer provides its own privacy notice that applies to that deployment.

In enterprise or white-label scenarios, the Customer may control certain settings, configurations, or user experiences. Depending on the circumstances, Optando may act as a service provider to the Customer with respect to data processed on the Customer's behalf. Customers are responsible for providing appropriate notices and obtaining any required consents from their End Users.

We collect information in the following categories (some categories may not apply depending on how you use the Service):

• Account and contact information: such as email address, display name, and optional profile image if you create an account.
• Token-based access identifiers: such as session or access tokens used to join or host a session without creating a traditional account.
• User Content: communications or media you transmit using the Service (for example, audio/video streams, messages, files, images).
• Usage and technical data: such as IP address, device type, browser/OS version, app version, user agent, timestamps, and diagnostic information.
• Communications with us: information you provide when you contact support or otherwise communicate with Optando.

We use information to:

• Provide, operate, maintain, and secure the Service
• Authenticate users and prevent fraud or abuse
• Support real-time communications (including routing and session coordination)
• Troubleshoot issues, improve performance and reliability, and develop new features
• Respond to inquiries and provide customer support
• Comply with legal obligations and enforce our policies

The Service may use cookies, local storage, or similar technologies for purposes such as maintaining session state, enabling core functionality, remembering preferences, fraud prevention, and security.

Depending on your browser or device, you may be able to control cookies through settings. Disabling cookies may impact certain features or functionality.

Optando implements technical and organizational measures designed to protect information processed by the Service. However, no method of transmission or storage is completely secure, and we do not guarantee absolute security.

The Service may use encryption technologies to protect certain communications. In general, this may include encryption for media content in transit. Operational data (such as session coordination information, device/network diagnostics, and security logs) may be processed to operate and protect the Service. The specific technical design and security posture may vary depending on features used, platform, and Customer-specific deployments.

We do not sell personal information. We may share information in the following circumstances:

• Service providers: with vendors that help us operate the Service (for example hosting, infrastructure, email delivery, analytics, or support tooling). They are permitted to use information only to provide services to us.
• Enterprise and white-label Customers: where an End User uses the Service through a Customer deployment, certain information may be visible to or controlled by the Customer as part of that deployment.
• Legal and safety: to comply with applicable law or legal process, to protect rights and safety, or to investigate suspected violations of our policies.
• Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, subject to appropriate protections.

We retain information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of information and how the Service is used.

Some operational logs and diagnostic data may be retained for limited periods to support reliability, security, and troubleshooting. Customers may also have their own retention policies for data within Customer deployments.

Depending on your location and how you use the Service, you may have certain rights regarding your information, such as: access, correction, deletion, and objection or restriction to certain processing. To request help with your information, contact us using the information in the "Contact us" section below.

If you use the Service through a Customer deployment, requests may need to be directed to the Customer, depending on the Customer's role and configuration.

Optando is based in the United States and the Service may be operated, processed, or supported in the United States and other locations. If you access the Service from outside the United States, you understand that information may be transferred to, stored in, and processed in jurisdictions that may have different data protection laws than your jurisdiction.

We may cooperate with law enforcement authorities, regulators, or courts where required by applicable law, legal process, or valid governmental request.

We may disclose information or take action where we believe in good faith that disclosure is required to comply with law, subpoenas, court orders, or other lawful requests, or to protect the rights, property, or safety of Optando, our users, or others.

We may update this Privacy Policy from time to time. Changes become effective when posted. If changes are material, we may provide additional notice (for example, by posting a notice on the Service).

If you have questions about this Privacy Policy or our privacy practices, please contact us via the contact methods listed on our website, or by email at support@evap.io.