This Privacy Policy describes how we collect, use, and protect the personal information of everyone (the "User") who uses the random video chat service "CROSS TALK" (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect the following types of information:
- Account information: your name, email address, and profile photo, obtained when you sign in with Google.
- Profile information: country of residence, English level, and gender, which you provide when setting up your profile.
- Call and usage data: call duration, timestamps, connection quality, and the country of the people you talk with, used to operate matching, Friend Passport, badges, and similar features.
- Ratings and reports: feedback, ratings, and reports you submit about other Users, and reports submitted about you.
- Call recordings: calls may be recorded for trust-and-safety review (e.g. to investigate a report). Recordings are deleted automatically once no longer needed, except where preserved for an active report or investigation.
- Payment information: if you register a payment method, your card details are collected and stored directly by our payment processor (Stripe) — we do not store your full card number ourselves.
- Analytics data: page views and feature-usage events (e.g. which features you open), used to improve the Service. Analytics data is tied to your account or an anonymous device identifier and does not include the content of your conversations.
2. How We Use Your Information
- To operate core features of the Service, including matching you with other Users and running video calls
- To provide Friend Passport, badges, daily missions, and events, and to track your progress in them
- To maintain trust and safety, including reviewing reports, issuing warnings, and suspending accounts that violate our Terms of Service
- To process payments for optional paid features (Premium subscription and call extensions)
- To display advertisements and partner recommendations to users on the free plan
- To send you service-related emails (e.g. a warning notice) and, if you contact us, to respond to your inquiry
- To understand how the Service is used so we can improve it
3. Sharing With Third Parties
We use the following third-party services to operate CROSS TALK. Each processes a limited set of data on our behalf and under their own privacy terms:
- Supabase — authentication and database hosting
- Daily.co — video call infrastructure and, when applicable, call recording
- Stripe — payment processing for optional paid features
- Resend — sending account-related emails
- Google — sign-in with Google, and the advertising service Google AdSense (see "Advertising" below)
- Vercel — application hosting
We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.
4. Advertising
Users on the free plan may be shown advertisements served by Google AdSense and recommendations of partner services that include affiliate links (via A8.net and similar affiliate networks). Google and other third-party vendors use cookies to serve ads based on a user's prior visits to this and other websites. You can opt out of personalized advertising through Google's Ads Settings (adssettings.google.com). When you click an affiliate link, the partner service and affiliate network may record that the click came from CROSS TALK. We do not share the content of your calls or your profile with advertisers. Premium subscribers are not shown advertisements.
5. Cookies
The Service uses cookies to keep you signed in and to remember basic preferences. You can control cookies through your browser settings, but disabling them may prevent parts of the Service from working correctly.
6. Data Retention
We retain your account and profile information for as long as your account is active. Call recordings are deleted automatically once they are no longer needed for trust-and-safety purposes. If you delete your account, your personal information is removed or anonymized, except where we are required to retain it (e.g. an open report or a legal obligation).
7. Your Rights
You may request access to, correction of, or deletion of your personal information (including account deletion) at any time by contacting us through the contact form below; you can also edit your profile information from your account page. Users in the EU/EEA have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, and port your data, and to object to or restrict certain processing.
8. Children's Privacy
The Service is not directed at children, and we do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected such information, we will delete it promptly.
9. International Data Transfers
Because the Service is used worldwide and hosted using international infrastructure providers, your information may be transferred to and processed in countries other than your own, including Japan. We take reasonable steps to ensure your information is protected wherever it is processed.
10. Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of Japan. Any dispute arising from or related to this policy shall be subject to the exclusive jurisdiction of the district court having jurisdiction over the location of our head office.
11. Changes to This Policy
We may revise this Privacy Policy as necessary. Continued use of the Service after such changes constitutes agreement to the revised policy.
12. Contact
For questions about this Privacy Policy or to exercise your data rights, please contact us via the contact form.