Privacy Policy

1. Information We Collect

When you use Spatial Mailbox (our VR application and related services), we collect the following types of information. The examples below are illustrative and not exhaustive:

• Account Information: such as your email address, username, and Meta (Oculus) user ID
• Authentication & Platform Data: information received from the Meta Platform SDK when you sign in through your Meta Quest device, such as your Meta user ID, authentication tokens, and app entitlement (whether you own the app or add-on packs)
• Letters & Content: the content of letters, drawings, images, and other items you create, send, and receive in the experience
• Social Data: your connections list, connection requests, and friend relationships within the app
• Purchase Data: records of add-on packs and other in-app purchases you make, which are processed through the Meta platform
• Preferences: your notification, email, and marketing settings
• Usage & Analytics Data: information about how you use the service, such as timestamps, the delivery, open, and read status of letters and announcements we send you, feature usage, and interaction events, collected to operate, secure, and improve the service
• Device & Technical Information: such as device type, platform, device identifiers, and connection information (for example, device ID or IP address) needed to deliver and secure the experience
• Other Information You Provide: such as messages you send to our support channels, and other information reasonably necessary to operate, secure, and improve the service

2. How We Use Your Information

We use your information to:

• Provide, operate, and deliver the service, including delivering letters and content between users
• Send you notifications about activity such as new letters (subject to your settings)
• Send you service messages and in-app announcements, such as new features, content, and pack releases, and, where you have opted in, marketing updates by email
• Measure engagement and analyze usage, including whether letters and announcements are delivered, opened, and read, to operate, maintain, secure, and improve the service and develop new features
• Process purchases of add-on packs and other in-app items
• Protect the service and our users, prevent abuse, and enforce our Terms of Service
• Comply with applicable law and respond to lawful requests

When you use Spatial Mailbox on Meta Quest, we process data made available through Meta Platform Technologies (such as your Meta user ID and app entitlement) only as described in this policy and in accordance with Meta's Developer Data Use Policy.

3. Data Sharing

We do not sell your personal information. We may share data with:

• Service Providers: vendors who process data on our behalf to run the service, such as Firebase (Google) for authentication, data storage, and analytics, SendGrid for email delivery, Meta for platform authentication and purchases, and similar infrastructure and analytics providers
• Legal Requirements: when required by law, regulation, or legal process, or to protect the rights, safety, and security of our users, the public, or Studio Syro

4. Your Rights

You have the right to:

• Access: Request a copy of your data
• Correction: Update your information
• Deletion: Delete your account and all associated personal data directly from your account page, or by contacting us at hello@studiosyro.com
• Opt-Out: Unsubscribe from email notifications at any time

5. Data Security

We use industry-standard security measures including:

• Encrypted connections (HTTPS/TLS)
• Firebase Authentication and Security Rules
• Regular security audits and backups

Letter access: The body of a letter is private between the sender and the recipient. Letter content is never visible to the public web, search engines, or other Spatial Mailbox users. Cloud Functions operating on the database (for example, to deliver email or Discord notifications) run under our service account, not on behalf of any user.

Staff access: Authorized Studio Syro staff may access account information and letter content only when necessary to investigate a report submitted by you or another user, enforce our Terms of Service, comply with a legal obligation, or help you with a support request you make. Such access is limited to authorized staff and is not used for any other purpose.

6. Data Retention

We retain your data as long as your account is active. You can delete your account and all associated personal data at any time from your account page. Some anonymized or aggregated data that cannot be used to identify you may be retained for service improvement purposes.

7. Children's Privacy

Spatial Mailbox is not intended for users under 13 years old. We do not knowingly collect information from children.

8. Changes to This Policy

As the service evolves and we add features, we may process additional data within the categories, and for the purposes, described above. We may update this policy from time to time to reflect changes to the service, our practices, or legal requirements. We will post the updated policy here with a new "Last Updated" date and, where required, notify you of material changes by email or in-app notification, which may include asking you to review and accept the updated policy before you continue using the service.

9. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at:

Email: hello@studiosyro.com

10. GDPR Compliance

For users in the European Union, we comply with GDPR requirements:

• Legal basis for processing: Consent and legitimate interest
• Data controller: Studio Syro
• Right to lodge a complaint with your local data protection authority