Privacy notice

A practical description of how this Roamzi prototype handles information.

Information the service uses

Account setup and promotional trial-code redemption require you to provide or confirm your name and email address. These private contact details are stored with your account for account support, trial administration and operational communications. The Roamzi owner can view them in the admin member list. They are separate from your public avatar display name and are not shown in room visitor lists or friend search. Entering an address does not itself verify ownership of that mailbox.

When you sign in, the hosting platform supplies an account identifier and may supply your name and email. Roamzi uses these to identify your account, save your work, show owner-only administration and contact you about account concerns. Roamzi stores uploaded room content, saved snapshots, Directory descriptions and tags, avatar choices and optional profile images, favorites, trial redemptions, agreement version and acceptance time, moderation records and submitted concerns.

Your browser also keeps room drafts, local profile settings, carts, volume and other preferences in device storage. Clearing browser data can remove unsynced work. Anonymous agreement acceptance uses an essential, secure cookie containing a random token, with a 30-day expiry; the server stores a hash and acceptance version. Signing in requires acceptance associated with that account.

Public rooms, voice and recordings

When you are signed in, visibly visiting a listed public room and actively using immersive VR, other signed-in members can see your public display name, bot choice and public room in Who’s online in VR. Private/unlisted rooms, Invisible mode, blocked accounts and expired connections are excluded. No private contact email or account identifier is shown. Choose Invisible in Controls → Friends to stop appearing; leaving VR removes your VR status after the next connection update.

Public rooms and their uploaded content can be seen by visitors, who may meet others in the same space. Unlisted links can be shared by anyone who has them. Live visits temporarily exchange names, avatar appearance, profile photos, approximate in-room movement, head and controller poses and connection signals. Voice uses peer-to-peer browser connections when enabled; network connection information can be visible to peers. Roamzi does not intentionally store voice recordings on its server. Guests’ profile images may remain in uploaded storage after a visit. Device photos and video captures save through the browser; other people can make their own recordings.

Community, drafts and activity

Private account drafts and up to eight saved account versions per room are accessible only to the owning signed-in account; these are separate from published snapshots. Local device versions remain in browser storage. We store event listings, account RSVPs, followed creators, optional in-app notification preferences and saved account blocks. Room activity uses a random browser-session identifier rather than your name or email to count visits, item interactions and website/booking clicks. Counts are approximate and visible to the room owner in aggregate. Activity records currently remain in service storage until cleanup; there is no automatic retention schedule yet. Blocking is mutual for signed-in accounts in live visits; local hiding and muting of guests apply to the current visit. Captions are supplied by room owners and are not automatic live transcription.

Payments and emails

Stripe handles payment information when enabled. Roamzi may store Stripe account/customer/subscription identifiers, order details and payment status; it does not store full card numbers. Seller fulfillment can require details collected through checkout. Optional account-concern emails may be sent through a configured email delivery provider (Resend) or composed by the owner in their own email app. Email delivery is not currently guaranteed. Roamzi does not sell your personal information or use the agreement form for promotional email consent.

Providers and reasons for processing

The hosting platform provides authentication, website hosting, database and uploaded-file storage. We process information to provide requested features, fulfill purchases where applicable, enforce rules, secure the service, investigate reports, maintain legal or financial records and comply with lawful requests. Only the authorized Roamzi owner can access the administrative member directory. We may disclose relevant information to service providers needed for these purposes, or when required by law or necessary to address a safety concern. External sites and linked media have their own privacy practices.

Retention, removal and your choices

Saved account work remains until you delete it or the account is removed, subject to necessary retention. Unlisting removes a Directory listing but does not revoke its room link. Account removal deletes cloud collection and avatar-profile entries, blocks existing room links and removes listings. Stored uploads, payment records, reports and minimal anti-abuse/account-removal records may remain pending cleanup or when required for legal, safety, financial or backup purposes; deletion is not instantaneous erasure of all storage. Roamzi currently has no automated backup-retention schedule. Guest acceptance tokens expire after 30 days. Request access, correction, deletion, an account review or details about retention using the account-review form or by replying to an account notice. Rights available under your local law are not limited by this notice.

Children

Accounts, uploads and social participation are currently for ages 13 and older, with guardian agreement for users under 18. We do not currently provide verified parental consent for children under 13. Do not submit information about an under-13 child. Report suspected collection of a child’s personal information through the concern form so the owner can review and remove it as appropriate. Family-oriented graphics or room themes do not themselves establish a compliant children’s service.

Security and changes

Roamzi uses HTTPS, server-side account authorization, limited upload validation and access restrictions. No online service can guarantee absolute security. Avoid placing sensitive information in public or shared rooms. We will update this notice when practices materially change. Operator legal entity, business address and jurisdiction-specific privacy contacts should be finalized before commercial launch.