Privacy
A placeholder, and an honest shape for one. Replace it with a policy your lawyer has read — but keep the headings, because they are the questions people actually ask.
What is stored
The account you create, the organization it belongs to, and whatever you put into the product. Every write is recorded in an audit trail you can read at any time.
People who view a room
A viewer gives a room their email address to receive a sign-in code. While they are in the room, the pages, documents and videos they open are recorded and shown to the room's owner — and the gate says so before they enter.
Who can see it
Members of your own organization, according to the role you give them. Tenants are separated by row-level security in the database as well as by the application.
Getting it back
Everything is reachable through the public API with a key you create and revoke yourself. There is no export queue and nothing to request.
Deletion
Deleting an organization deletes what belongs to it. Backups age out on their own schedule — say what yours is here rather than implying it is instant.
Third parties
Name them: the payment processor, the mail provider, the model provider if an assistant is switched on, and anything else that sees a customer's data.