WebRoom Data Security

We are a very privacy-friendly company and we take your security concerns seriously.   We don’t sell or mine your data.  We don’t  share user data with any third party except as necessary to ensure the proper functioning of the platform.  Your data is stored securely in the EU and we are GDPR compliant.

Use of the iTeach platform and virtual room does not require the installation of any software or browser extensions on the user’s computer.

Our virtual room uses WebRTC.  Unlike other VoIP and video conferencing technologies, encryption is required by WebRTC.   This means that the voice and audio are encrypted end-to-end and are only visible to those present in the virtual room.  To ensure that groups can use the virtual rooms, we use a dedicated server infrastructure.  Video and audio are encrypted in transit to the servers, and then decrypted and re-encrypted by the media servers.  When users are behind a strict firewall or NAT, video and audio are relayed via a TURN server, but end-to-end encryption is still maintained.

As long as the user uses a browser which they know can trust, then all WebRTC communication can be considered "secure" will follow the standard accepted security architecture of WebRTC technology.  For a more detailed explanation of the security, I refer you to this article: https://www.wowza.com/blog/webrtc-encryption-and-security

To ensure a good experience for users wherever they are located, we utilize a global infrastructure of media servers located around the world.  For each virtual class session, users are automatically routed to the media server that will ensure the best experience.  Typically, for example, this means that users in a European country will be connected to a media server in Europe.  However, if the host of the virtual class session is located outside of Europe, it is possible that European users will be connected to a media server located outside of Europe.   In every case, the end-to-end encryption is maintained and the providers of the server infrastructure adhere to strict security measures. The companies hosting the media servers do not have the ability to access the audio and video streams.

Access to each virtual classroom session is limited to invited person.   Each participant receives a unique invitation which is linked to their email address.   The only exception is when the meeting host creates a “public” meeting.  In that case, anyone with the meeting link can join the meeting.

Chat messages, poll results, and content shared in the Workspaces of the virtual room are saved on our servers. They are available to all meeting participants in the meeting history.   In addition, links for content shared in the Workspaces are included in the virtual session summary email sent to each participant.