1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, password, profile picture, and job title
• Workspace Information: Organization name, industry, size, and billing details
• Payment Information: Credit card details (processed by secure payment providers)
• Profile Data: Your timezone, language preference, and notification settings

1.2 Information Collected Automatically

• Meeting Data: Meeting participants, duration, start/end times, and meeting IDs
• Usage Data: Features used, frequency of use, device information, IP address, and browser type
• Technical Data: Audio/video quality metrics, connection information, and error logs

1.3 Content You Create

• Recordings: Video and audio recordings (only if you enable recording)
• Transcripts: Meeting transcriptions (only if you enable AI transcription)
• Chat Messages: In-meeting chat messages and shared files
• Whiteboard Content: Drawings and annotations created during meetings

2. How We Use Your Information

We use your information for the following purposes:

• Provide the Service: Enable video meetings, cloud recording, transcription, and other features
• Account Management: Create and maintain your account, process payments, and manage subscriptions
• Improve the Service: Analyze usage patterns, fix bugs, and develop new features
• Customer Support: Respond to your inquiries and provide technical assistance
• Security: Detect fraud, prevent abuse, and protect against security threats
• Communications: Send service updates, security alerts, and account notifications
• Marketing: Send promotional emails (you can opt-out anytime)
• Legal Compliance: Comply with legal obligations and enforce our Terms of Service

3. Data Sharing and Disclosure

We may share your information in the following limited circumstances:

• With Your Workspace: If you join a workspace, your workspace admin can see your name, email, and meeting activity
• Service Providers: Cloud hosting (AWS, Google Cloud), payment processors (Stripe, PayPal), and email services
• AI Services: OpenAI Whisper for transcription (if you enable this feature)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In case of merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: AES-256 encryption at rest, TLS 1.3 in transit
• End-to-End Encryption: Available for video/audio streams using DTLS/SRTP
• Access Controls: Role-based access with strict authentication
• Regular Audits: Security assessments and penetration testing
• Secure Data Centers: SOC 2 certified hosting providers
• Employee Training: All staff trained on data protection

While we implement strong security measures, no system is 100% secure. You are responsible for maintaining the security of your password.

5. Your Privacy Rights

You have the following rights regarding your personal data:

How to Exercise Your Rights:

• Email us at: privacy@taro.com
• Or use the privacy controls in your Account Settings
• We will respond within 30 days

6. Cookies and Tracking Technologies

We use cookies and similar technologies:

You can control cookies through your browser settings. Note that disabling essential cookies may affect site functionality.

7. Data Retention

We retain your data for the following periods:

• Account Data: Until you delete your account, then 90 days for backup recovery
• Meeting Metadata: 12 months after the meeting ends
• Recordings: Until you delete them, or based on your workspace retention policy
• Transcripts: Until you delete them, or based on your workspace retention policy
• Chat Messages: 90 days after the meeting ends
• Billing Records: 7 years for tax and legal compliance

You can delete your recordings and transcripts at any time from your dashboard.

8. Children's Privacy

Taro is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

For educational use (K-12 schools):

• Schools must obtain parental consent as required by COPPA
• Teachers should create accounts on behalf of students
• Parents can request deletion of student data by contacting the school

9. International Data Transfers

Taro operates globally and stores data in multiple regions:

• Data Centers: Africa, Europe, North America, and Asia
• Data Residency: Workspace owners can choose their data storage location
• GDPR Compliance: Standard Contractual Clauses for EU data transfers
• Adequacy Decisions: We comply with applicable data protection frameworks

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page with an updated "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a notice in your dashboard

Your continued use of Taro after changes become effective constitutes acceptance of the updated policy.