Privacy Policy
Applicability and Consent
This policy applies to all personal data obtained through your use of any service feature. By engaging with the platform, you consent to the practices described herein. You may withdraw consent to optional processing at any time. Essential processing remains necessary for core functionality.
Data Collection Channels
We collect data through user submissions (e.g., registration, feedback) and automated processes (e.g., logs, cookies). Only non-sensitive identifiers and usage metadata are gathered. Optional data (preferences, surveys) requires clear, affirmative opt-in. All collection points are transparent.
Legitimate Purposes
Processing serves to provide and improve the service, secure user accounts, and prevent abuse. Analytics for performance and usage trends rely exclusively on anonymized data. No personal data is used for advertising without separate consent. Any new purpose is publicly documented before implementation.
Data Minimization
Collection is limited to what is necessary for each stated purpose. Superfluous data fields are purged periodically. Older data beyond retention periods is deleted or anonymized. This minimizes risk and storage costs.
Security Controls
Data in transit uses TLS encryption. Storage employs AES encryption with hardware-based key protection. Access controls enforce least-privilege and multi-factor authentication. Continuous monitoring detects anomalies in real time.
User Rights and Access
You have the right to access, correct, and erase your personal data. Requests are acknowledged within five business days and fulfilled within thirty calendar days. Completed requests are confirmed via email. Certain data may be retained if legally required.
Retention and Deletion
Active data is stored no longer than twenty-four months after the last user interaction. Backup copies are purged within ninety days following the end of retention. Anonymized datasets may be retained indefinitely for analytical purposes. Detailed retention schedules are available upon request.
Incident Management
A dedicated incident response team follows a structured plan for detection, containment, and recovery. Affected users receive notifications within 72 hours of breach confirmation. Regulatory authorities are informed according to local laws. Post-incident reviews drive continuous improvement.
Automated Profiling
Automated systems may generate non-critical recommendations based on anonymized usage patterns. If any automated decision legally or significantly affects you, you will be informed. You may opt out of profiling at any time. Human review is available upon request.
Third-Party Disclosures
Data shared with third parties is limited to what is necessary for them to perform essential services (e.g., hosting, payments). All third parties sign data processing agreements and adhere to equivalent security standards. No data is shared with advertisers or data brokers. All disclosures are logged and auditable.
Policy Revisions
This policy is reviewed annually or upon significant legal or operational changes. Material updates are announced via in-app notifications and email at least fourteen days prior. Continued use after effective date implies acceptance. Prior versions remain accessible for reference.
