Privacy · draft 2026-08-23-v1

Privacy through separation and minimisation.

This staging text describes technical processing and requires DPIA, retention and legal approval before public launch.

01

Data and purpose

Accounts

Email, password hash, locale, roles and security status for access.

Reviews and evidence

Text, score, source, versions and limited evidence for integrity.

Operations

Audit, mail, webhook and security events for reliability.

02

Rights and safeguards

Encryption and hashing

Sensitive content, tokens and blind indexes reduce plaintext linkage.

Requests

Access, rectification, restriction, erasure, portability and objection receive deadlines.

Retention and legal hold

Data is removed when allowed unless a reasoned hold applies.

Request your data through the portal.

Machine-readable export is immediate; other requests follow the controlled workflow.