Privacy Policy
Version 1.1 — Last updated: April 9, 2026
Your privacy matters at Tahta.io. This policy explains how we collect, use, and protect your data, following GDPR and KVKK regulations.
1. Information We Collect
Authentication Data: When you sign in with Google, we get your email, name, and profile picture. We use this for account creation and session management only.
Canvas Data: Your drawings, elements, and text in rooms are stored on our secure servers for real-time collaboration.
Usage Data: We collect basic technical data (IP address, browser type, device info) to keep the service stable and secure.
2. Third-Party Sub-Processors
We share limited data with these trusted partners to run our services:
- LemonSqueezy: Secure payment processing and subscriptions (we don't store credit card data on our servers).
- LiveKit: Real-time voice and communication features.
- Google Cloud: Infrastructure and secure authentication.
3. Data Security & Retention
Your data is encrypted in transit (SSL/TLS) and at rest. We keep your information while your account is active. If you delete your account, all canvas data is permanently erased from our databases within 30 days.
4. Your Rights (GDPR/KVKK)
You can:
- Access and export your data.
- Fix inaccurate information.
- Delete your account and data ("Right to be Forgotten").
- Object to data processing or withdraw consent.
To exercise your rights or report a privacy concern, contact us at contact@tahta.io. We respond within 48 hours.