Sunshine

Table of Contents

Privacy Policy

Your privacy is important to us. It is David Hérault & Astrid Vavasseur's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://sunshineteams.com, and other sites we own and operate.

Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and email), your devices, payment details, and information about how you interact with our real-time collaborative workspace environment.

In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information. This Privacy Policy does not apply to any of your activities after you leave our site.

This policy is effective as of 16 May 2026. Last updated: 16 May 2026.

Information We Collect

Information we collect falls into one of two categories: “voluntarily provided” information and “automatically collected” information.

Real-Time Telemetry & Presence Data

To provide a functional virtual office environment, our platform processes real-time presence indicators. This includes transient, ephemeral operational metrics such as current connection state, temporary spatial metadata (e.g., cursor positioning and active user coordinates), and active WebSocket signaling tokens.

Unless explicitly stated or captured by native features chosen by your workspace administrator (such as persistent text chat logs), live peer-to-peer audio, video, and screen-sharing data streams pass through our infrastructure ephemerally and are not persistently recorded or stored on our servers.

Log Data & Diagnostics

When you visit our website or connect to our platform servers, our systems may automatically log standard transmission parameters provided by your web browser or application client. This includes your device's Internet Protocol (IP) address, browser type and version, platform pages or virtual spaces accessed, the timestamp of your connection lifecycle, and diagnostic telemetry.

If client errors or unexpected WebSocket disconnections occur during platform use, we automatically capture debug snapshots. This can include client-side state parameters, structural application settings, and error stack details required to stabilize connection pipelines.

Device Data

When you access our collaborative ecosystem, we may gather configuration data sent by your device:

  • Device Type and Operating System version
  • Unique hardware or software application identifiers
  • Browser client and rendering engine parameters
  • Coarse network-derived geolocation data (used strictly for region routing and localized server selection)

Personal Profile & Workspace Information

We collect foundational details required to build and maintain user accounts and team workspaces. This includes:

  • Name, email address, and user personalization settings
  • Associated company, team name, or corporate billing identity
  • Social single sign-on (SSO) integration profiles if enabled by your workspace

User-Generated Content & Core Workspace Assets

We define “user-generated content” as persistent materials uploaded, saved, or actively posted within a virtual workspace by platform users. This encompasses text chat interactions, workspace structural design files, integrated map assets, pinned documents, and custom profile details.

Please note that content added to a shared corporate workspace will be visible to other authenticated members of that specific workspace according to user access control configurations managed by your tenant administrator.

Transaction & Operational Records

Transaction data incorporates records that accrue natively over the operational lifespan of your subscription. This includes seat allotment metrics, workspace activity volumes, recurring subscription histories, configuration changes, and structural metadata compiled to manage account quotas.

Data Relationship: Processor vs. Controller (GDPR)

For individual account configuration and global platform operations, David Hérault & Astrid Vavasseur acts as the Data Controller. However, for all corporate workspace assets, employee directory mapping, text logs, and spatial content generated inside a customer-created tenant environment, the Customer (the business organization hosting the workspace) is the Data Controller, and David Hérault & Astrid Vavasseur operates strictly as the Data Processor. A dedicated Data Processing Agreement (DPA) can be provided upon request.

Collection and Use of Information

We utilize, store, and share collected data under clear legal frameworks to achieve the following operational mandates:

  • To spin up, support, and scale our core real-time collaborative platform features
  • To manage subscription billing tiers, account seating limits, and transaction confirmations
  • To maintain performance optimizations, balancing server resources across active WebSockets
  • To provide ongoing developer support, issue bug remediations, and address platform stability concerns
  • To enforce security protocols, block system exploits, and investigate structural violations of our Acceptable Use Policy
  • To meet legislative compliance thresholds or resolve active contractual disputes

Security & Data Retention Protocols

We safeguard collected data using industry-standard engineering practices to mitigate risks of theft, loss, or unauthorized breach. However, no data transport over web protocols or cloud processing architecture can promise complete invulnerability; you remain responsible for generating secure account credentials and managing individual workspace invitation codes.

We preserve personal profiles for the lifetime of your active platform registration. Workspace data is deleted or rendered entirely anonymous upon tenant termination, unless extended storage periods are dictated by binding regulatory, fiscal, or legal mandates.

Children's Privacy

Our workspace systems are enterprise-focused productivity products not intended for children under 13. We do not deliberately acquire information from individuals under this threshold.

Disclosure of Personal Information to Third Parties

We route components of operational metadata to approved classes of third-party platforms to execute infrastructure tasks:

  • Cloud compute infrastructure, database cluster providers, and distributed server engines
  • Transactional payment gateways and seat-management subscription networks
  • Platform performance instrumentation and diagnostic tracing frameworks
  • Legal counsel, accounting frameworks, or emergency regulatory enforcement bodies if required by law

Third parties we currently integrate include:

  • Google Cloud Platform / Firebase (Core Architecture and Data Storage)
  • Google Analytics (Product Insights)
  • Stripe (Payment Execution)

International Transfers of Personal Information

Our core database systems and operational infrastructure components are managed primarily within facilities located in France. If customer data crosses global administrative boundaries via external sub-processors, we commit to using valid legal conduits, such as standard contractual clauses, to maintain parity with local privacy thresholds.

Your Rights and Controlling Your Personal Information

You preserve core privileges regarding data management, including the right to restrict processing, request full data extracts, amend system errors, verify details, revoke consent flags, or initiate deletion. Please submit formal structural inquiries to our administration using the technical contact markers established at the close of this statement.

Contact Us

David Hérault
Email: david@sunshineteams.com

Additional Rights for EEA/UK Users (GDPR)

If your platform use originates from the European Economic Area or the United Kingdom, you enjoy expanded structural authority over personal data, comprising the Right of Erasure, Data Portability access, the Right to Object to tracking frameworks, and the freedom to submit compliance complaints to local supervisory data protection boards.

Terms of Service

These Terms of Service govern your use of the website located at https://sunshineteams.com and any related collaboration features, workspace software, and virtual office services provided by David Hérault & Astrid Vavasseur.

By creating a tenant space, initiating user invitations, or authenticating into an active environment, you declare complete compliance with these conditions. If you diverge from these parameters, your access rights to the platform are immediately voided.

Commercial Subscriptions & Seat-Based Allocation

Corporate workspaces are offered under recurring, tiered subscription options. Your workspace parameters are determined strictly by paid seat allowances. The customer organization assumes sole fiscal responsibility for unexpected mid-cycle member onboarding costs or structural scaling steps initiated by their tenant admins. Unless explicitly required by your local statutory consumer protections, all transaction milestones, platform allocations, and seat reservations operate under strict non-refundable terms.

Free Trials & Evaluation Lifecycle

We may offer newly registered corporate workspaces a complimentary trial tier lasting precisely fourteen (14) days. Unless otherwise explicitly integrated into your checkout flow, access to the evaluation environment terminates or undergoes absolute feature lockdown upon trial expiration until a valid payment token is linked and seat quotas are funded. David Hérault & Astrid Vavasseur reserves the right to entirely purge structural customizations, uploaded map configurations, and dormant evaluation tenants thirty (30) days following trial expiration without liability.

Limitations of Use

By interacting with this environment, you affirm that neither you nor your delegated team additions will:

  1. Decompile, duplicate, scrape, or reverse engineer platform codebases, layout engines, or state sync pipelines;
  2. Strip out native attribution flags, copyright indicators, or proprietary system labels;
  3. Inject network monitoring processes, automate interaction vectors, or scale malicious calls against our WebSocket networks;
  4. Deploy spatial features or file transmittals to compromise individual workspace confidentiality or violate local regulatory parameters;
  5. Utilize integrated tracking mechanisms to scrape client telemetry data without clear explicit alignment.

Intellectual Property & Spatial Licensing

All interface visual layers, underlying rendering architecture, proprietary map tiles, virtual assets, user templates, and system structures belong exclusively to David Hérault & Astrid Vavasseur. We provide your team with a limited, temporary, revocable, and non-exclusive operating entitlement to access this environment under active subscription structures.

You retain native copyright and property ownership rights over structural documents, chat texts, branding marks, and custom assets uploaded inside your virtual space. You grant David Hérault & Astrid Vavasseur a global, non-exclusive, royalty-free operating license to securely capture, route, transmit, format, and display your assets solely to maintain the platform's active operations.

Avatar Customization & Virtual Desk Assets

Any digital components provided by the platform to complete workspace aesthetic decorations, avatar layout choices, clothing designs, or cosmetic character variables constitute structural property belonging strictly to David Hérault & Astrid Vavasseur. These components hold zero monetary worth, lack real-world fiat exchange value, and cannot be bartered, exported, or transferred outside the application ecosystem. Your operational permit to showcase or utilize these decorative variables dissolves instantly if your workspace license faces non-payment termination or system deletion.

Open Worlds & Public Spaces Limitation of Liability

The platform provides portal interactions allowing individual characters to cross out of isolated corporate offices and explore interconnected public spaces or external organizational environments (“Open Worlds”).

By initiating traversal into an Open World framework, you understand and affirm that you are interacting with third-party platform users completely separated from your primary employer or corporate host. David Hérault & Astrid Vavasseur operates purely as an infrastructure venue provider and explicitly disclaims all liability, civil responsibility, or behavioral alignment for statements, media projections, actions, or structural disruption introduced by unknown third parties traversing public spatial domains.

Furthermore, when entering an Open World, you waive standard organizational privacy expectations: your spatial location coordinates, character visual parameters, and transient proximity audio/video streams naturally become visible and accessible to unvetted external participants occupying that zone.

Liability & Operational Disclaimers

Our digital space framework is delivered strictly on an “as-is” and “as-available” basis. David Hérault & Astrid Vavasseur offers no performance assurances, structural warranties, or service level promises concerning technical network latency, periodic connection dropouts, firewall blocking, or communication interruptions caused by third-party infrastructure elements.

To the maximum extent permitted by applicable law, in no event shall David Hérault & Astrid Vavasseur or its global architectural suppliers be liable for any indirect, real, punitive, incidental, special, or consequential damages, including loss of workspace utility, network down-time costs, operational revenue disruption, data degradation, or corruption occurrences arising from platform use.

Governing Law & Legal Venue

These contractual guidelines are validated, read, and executed in strict alignment with the laws and legal structures of France. Any arising structural conflicts fall under the absolute domain and jurisdiction of the courts operating in that country.

AI Modeling Restrictions

The utilization of any content, asset layers, user text structures, or communication logs extracted from this platform to compile, train, align, or optimize machine learning, deep learning, or artificial intelligence algorithms is strictly prohibited without explicit written licensing.

Dispute Resolution & Arbitration

Any disputes arising from your interaction parameters will be addressed via binding individual arbitration frameworks rather than civil litigation routes. Class action participation and structural consolidations are waived by both parties. Arbitration steps will occur within France, handled in the English or French language.

Cookie Policy

We utilize browser cookies and active storage mechanisms to enrich your collaborative navigation experience. This statement constitutes a subset of our root Privacy Policy, dealing with interactions between your terminal systems and our interface environment.

If you select system flags to reject standard platform tracking states, certain spatial features, dynamic access authorizations, or workspace configuration settings may fail to execute as intended.

Cookies We Utilize

  • Essential Session State: Required to handle workspace authentication vectors, prevent CSRF exploits, and maintain active secure login lifecycles.
  • Performance Telemetry: Aggregates unidentifiable operational parameters to analyze connection distribution across our server matrix.
  • Functional Memory: Secures localized options like workspace audio toggles, client UI themes, and preferred layout zoom profiles.

Acceptable Use Policy

This document defines operational constraints dictating appropriate utilization profiles for the systems, collaboration utilities, and real-time workspaces hosted under David Hérault & Astrid Vavasseur. Violation of these conditions can cause rapid account deactivation or workspace termination.

Workspace Conduct & Proximity Guardrails

Because our system relies on persistent presence features, dynamic user interactions, and real-time media streams, a high standard of professional workplace behavior is strictly required.

Proximity Streaming Consent

The unique structural design of the platform triggers a live peer-to-peer audio and video link seamlessly whenever avatars cross within established virtual proximity coordinates. By authenticating into an active world layer and adjusting your workspace character status indicator to “Available,” you extend clear, active legal consent to automatically stream your client video and audio data pipelines to nearby system participants, and acknowledge that other approaching users are streaming under identical mutual alignment rules.

The following operational tracking, streaming, and interaction behaviors are strictly banned inside any workspace context or Open World public environment:

  • Abusing proximity communication features or audio/video feeds to stalk, track, map-follow, or systematically intimidate other members across private offices or public worlds.
  • Impersonating company leadership, human resource managers, platform administrators, or external ecosystem partners.
  • Broadcasting, streaming, or displaying any form of nudity, explicit attire, or sexually suggestive visual content via live camera feeds, screen shares, or custom user profiles.
  • Using profane, derogatory, discriminatory, or abusive language across public workspace chat channels, spatial audio streams, or broadcasted audio feeds.
  • Deploying malicious screen captures or streaming unapproved, graphic, violent, or abusive external media.
  • Intentionally disrupting the workplace environment through continuous ambient noise injection, voice stream hijacking, or spamming spatial interaction components.
  • Harvesting coworker movement metrics, connection histories, or interaction habits without explicit workspace alignment.

Fair Resource Allocation

We maintain underlying connection systems on the assumption of normal corporate collaboration volume levels. If your technical data footprints, automated media pipelines, or concurrent WebSocket loads place a disproportionate strain on our regional server clusters, we reserve the right to limit structural quotas or request a migration to appropriate enterprise operational categories.

Prohibited System Misuse

You may not use our collaboration products to broadcast unrequested commercial messaging pipelines, run bulk scraper sweeps, distribute copyrighted digital files without clean authorizations, or launch network disruption efforts against external target platforms. Any verified intrusion attempt, credential exploration sweep, or malicious payload distribution instantly breaks this covenant.