BROARchat is self-hosted software. Your users' chat messages, files, voice calls, and community data live entirely on your server — not ours. We never see that data. What we do collect is limited to what's needed to manage your account and license: your email address, purchase information, and license key metadata.
BROARchat provides self-hosted community platform software and license management services through broarchat.com. When this policy says "we," "us," or "our," it refers to BROARchat. When it says "you," it refers to the person or organization holding a BROARchat account or license.
Account information: When you create an account on broarchat.com, we collect your email address and a password hash. We do not collect your name, phone number, or any other personal identifier unless you voluntarily provide it.
Purchase information: When you purchase a license, your payment is processed by PayPal. We receive a transaction ID, the amount paid, and your email address. We do not store your credit card or bank account details — those stay with PayPal.
License activation data: When your BROARchat server activates its license, our license API receives the license key, a machine identifier derived from your server's hostname, your server's hostname string, and the BROARchat version number. We use this to verify your license and enforce tier limits.
Usage of broarchat.com: We may collect standard server logs (IP addresses, page requests, timestamps) for security and debugging purposes. These logs are not shared with third parties and are retained for a maximum of 90 days.
Because BROARchat is self-hosted, the following data never leaves your server and is never accessible to us:
PayPal: Payment processing is handled by PayPal. When you make a purchase, you are subject to PayPal's privacy policy in addition to ours. PayPal may retain your payment information according to their own policies.
Amazon Web Services (AWS): Our license validation API runs on AWS Lambda and stores license data in Amazon DynamoDB, hosted in the US East region. Data is encrypted at rest and in transit.
We do not sell, rent, or share your personal data with any other third parties for their own marketing or commercial purposes.
We retain your account information for as long as your account is active. If you close your account, we will delete your personal data within 90 days, except where we are required to retain it for legal or compliance purposes (such as payment records, which we retain for 7 years per standard accounting requirements).
License activation records (machine identifiers, hostnames, activation timestamps) are retained for the life of the license and for 12 months after termination to handle disputes.
We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, and access controls on our databases. However, no system is perfectly secure. If you become aware of a security issue affecting your account, contact us immediately at [email protected].
Depending on your jurisdiction, you may have the right to access, correct, export, or delete the personal data we hold about you. To exercise any of these rights, email us at [email protected]. We will respond within 30 days. Note that deleting your account data may require cancelling your license subscription first.
broarchat.com uses minimal cookies — a session token to keep you logged in and no tracking cookies. We do not use third-party advertising trackers or analytics on our marketing pages beyond standard server logs.
BROARchat accounts are intended for individuals 16 years of age and older. We do not knowingly collect personal information from children under 16. If you believe a minor has provided us personal data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated via email to your registered address at least 14 days before taking effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.
For privacy-related questions or requests, contact us at [email protected].