Terms of Service and Privacy Policy

You can find the base agreement here. The service is operated by YATeam of Whimsies Ltd and YATeam will only report breaches to Whimsies Ltd in accordance with the agreement and your data will not be used by Whimsies Ltd to make a profit or for services such as advertising.

Federation

Services using the Matrix protocol rely on Matrix homeservers which share user data with the wider ecosystem over federation.

Bridging

Some rooms are bridged to third-party services, such as IRC networks or email. When a room has been bridged, your messages and media may be copied onto the bridged service.

Integration Services (Bots and Widgets)

Haty provides a range of integrations in the form of Widgets (web applications accessed as part of the Matrix Client webapp) and Bots (automated participants in rooms). Bots and Widgets have access to the messages and files in rooms in which they participate.

Forgetting your Data

You can request that we forget your data if you deactivate your account. Each user in a Matrix conversation receives their own copy of all messages and files in that conversation (similar to email), so we ensure data is forgotten by ensuring that your data is not shared further and is not visible to future users. Once all users’ copies have been forgotten the messages and files will be deleted from the database.

If you remove (redact) a message, the message content will no longer be accessible to users. Redactions only remove message content, your display name and avatar - your username will still be visible. Federated homeservers and some matrix clients may not honour the redaction request.

Legal Basis for Processing

YATeam processes your data under Legitimate Interest. This means that we process your data only as necessary to deliver the Service, and in a manner that you understand and expect.

The Legitimate Interest of our Service is the provision of decentralised, openly-federated and (optionally) end-to-end encrypted communication services. The processing of user data we undertake is necessary to provide the Service. The nature of the Service and its implementation results in some caveats concerning this processing, particularly in terms of GDPR Article 17 Right to Erasure (Right to be Forgotten). We believe these caveats are in line with the broader societal interests served by providing the Service. These caveats are discussed in detail in the full privacy notice, but the most important restriction is that your username will still be publicly associated with rooms in which you have participated even if you deactivate your account and ask us to forget your data.

In situations where the interests of the individual appear to be in conflict with the broader societal interests, we will seek to reconcile those differences in accordance with our policy.

If any of the above are unacceptable to you, please do not use the Service.

Additional Terms

You are responsible for your end-to-end encryption key, and if you lose it, all previous end-to-end encrypted content will not be decrypted.
The Service prohibits the use of disposable email addresses for registration and use.

You must be at least 16 years old to use this Service.