Privacy
Privacy principles for realtime infrastructure.
DomVia Realtime is designed around minimal event payloads, scoped access, protected credentials, trusted origins, and operational visibility that avoids exposing private implementation details.
Operating model
Keep realtime fast without making it noisy.
Data minimization
Realtime events should carry only the fields needed for the product moment. Sensitive records should stay in the system that owns them.
Credential separation
Public keys identify apps. Secret keys belong only in trusted server code and should be rotated after suspected exposure.
Protected access
Private and presence channels should be authorized before users can join account, support, billing, tenant, or workspace rooms.
Customer-safe visibility
Status, usage, and security signals should help teams operate without exposing private diagnostics or secrets.
Responsibilities
What the platform controls, and what your app controls.
| Application payloads | Your application controls what is published into events and which users receive it. |
|---|---|
| Channel names | Use clear names for routing, but avoid placing private personal details in channel identifiers. |
| Private authorization | Use signed access for sensitive rooms and validate the signed-in user before joining. |
| Push notifications | Use a push provider when users need lock-screen or background notifications. |
| Retention | Keep long-term records in your product database, not inside transient realtime event payloads. |
Launch checks
Practical privacy checks before production.
01
Review payload shape before production traffic.
02
Keep secret credentials out of browsers and mobile clients.
03
Add trusted origins for browser apps.
04
Use private channels for account-specific data.
05
Rotate credentials after suspected exposure.
06
Keep public status messages customer-safe.
This page describes product privacy principles for the current MVP. It is not a full legal privacy policy or certification claim. Add a formal legal policy before wider commercial launch.