Der Connect Privacy Policy

Scope

This Privacy Policy describes how DERSECUR INTERNATIONAL FZE LLC ("DerSecur", "we", "us") collects, uses, stores, and shares information when you use Der Connect.

Der Connect is a private communication client for authorized users of a DerSecur Team server: messaging, voice notes, files, and voice or video calls.

This policy applies to Der Connect on Android (online.dersecur.der.connect) and iOS (online.dersecur.derconnect). The website Privacy Policy at dersecur.com/legal/privacy covers the public DerSecur website. DerOS Mobile has a separate privacy policy.

Information we collect

When you use Der Connect, we may process:

Account and contact information: email address, display name, avatar, user role, and other profile fields on your Team server.
Authentication data: login credentials you enter and session or refresh tokens used to keep you signed in.
Messages and attachments: text you send, voice notes, images, files, and related metadata such as timestamps and reply references.
Call information: call identifiers, participants, start and end times, and signaling needed to set up a voice or video call. We do not use call audio or video to build advertising profiles.
Device and installation identifiers: a per-install identifier, push tokens (FCM on Android, APNs / VoIP on iOS), and technical logs needed to deliver incoming calls and messages.
Device permissions you grant: microphone for voice notes and calls; camera for video calls and photos you attach; notifications; and, on Android, related call and foreground-service permissions. The operating system processes these permissions locally until you use a feature that sends data to your Team server.

We do not use Der Connect for advertising profiles or cross-app tracking.

How we use information

We use information to:

authenticate you and maintain your session;
deliver messages, files, and voice notes to people in your conversations;
set up and maintain voice and video calls;
notify you of incoming messages and calls;
protect the service against unauthorized access and abuse;
comply with legal obligations.

Legal basis (GDPR)

Where GDPR applies, we rely on contract performance and legitimate interest to provide the app, maintain your account relationship, and protect the service. Where required, we rely on your consent for optional device permissions such as microphone, camera, and notifications.

Where data is processed

Server-side processing: Der Connect communicates with your Team server API and realtime channel at https://connect.dersecur.com. Media for live calls is carried through DerSecur-operated LiveKit infrastructure.

On-device storage: recent conversations, message cache, and media you open may be stored locally on your device. That cache is removed when you sign out or uninstall the app, subject to platform behavior.

Sharing

We do not sell your personal information.

We share information only:

with service providers that host and operate Der Connect infrastructure (including push delivery through Google FCM and Apple APNs), under contractual safeguards;
when required by law or to protect rights, safety, and security;
within your organization according to your account role and the conversations you join.

Retention

We retain information for as long as needed to provide the service, maintain your account relationship, and meet legal or audit requirements. Local app data is removed when you sign out or uninstall the app, subject to platform behavior.

Security

We use HTTPS for data in transit and platform storage for on-device data. Access to production systems is restricted to authorized personnel.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information. To delete a Der Connect account, follow the steps at dersecur.com/legal/der-connect-account-deletion or contact company@dersecur.com or your organization administrator.

You can revoke microphone, camera, and notification permissions in your device settings at any time. Some features will not work without the permission they need.

Children

Der Connect is intended for business users and is not directed to children under 13.

Changes

We may update this policy. Material changes will be posted on this page with a revised effective date.

Contact

DERSECUR INTERNATIONAL FZE LLC

Email: company@dersecur.com

Effective date: September 12, 2026.