Terms of service

We need to come up with a ToS, some things I think it should mention (non-exaustive list)
  * users should know how do we run the service, and what to expect from us

* how long do we retain logs
* what do we use the logs for
* which loglevel do we run the service on
* under which circumstances we will read user data

Check out other services to get an idea, e.g.
https://account.conversations.im/privacy/
("What we store", "What we don't store", "How we handle your data")
https://mailbox.org/en/data-protection-privacy-policy
("Type: XMPP (Jabber) service", "Relates to: mailbox.org")



Also of interest (long):
https://wiki.xmpp.org/web/GDPR

Other Debian services:
https://www.debian.org/legal/privacy


contact GDPR team:
https://lists.debian.org/debian-devel-announce/2018/06/msg00000.html