Adding missing details of data procession to the privacy policy

[AgniKai95]

The privacy policy is missing some details or remains vague in certain sections. To approve the usage of hubs in business environments the following details should be added/clarified in the privacy policy:

• Procession of user ip address during the use of Mozilla.hubs (presumably not stored and only processed temporarily during the use of the service - this is not stated explicitly in the privacy policy)
• Details on data encryption for each data type
• details on data storage of e-mail adress ("we store a hashed version of your email adress") -> storage location
• Clarifying data deletion periods for email adress (presumably account deletion), and data mentioned in the abstract "other information we receive"
• adding aws server location for mozilla hubs (presumably us-east-1)
• Clarifying of the abstract "other information we receive"
  • specifying the vague expression "and other data needed" with the exact data types processed
  • Stating if any of this data is tied to a user and if not, specifying the exact method of anonymization
  • adding the location of this data procession (other mozilla infrastructure? in the same aws environment?...)

see also: https://github.com/mozilla/hubs/discussions/5631

[emclaren]

Thank you for flagging this. We will look into adding more information into our privacy policy in the future.