Privacy policy
This policy says what we collect, who can see it, how long we keep it and what you can ask us to do with it. It covers the website and the DiasporaHub apps.
What this covers
DiasporaHub is the controller of the personal data described here. That means we decide what is collected and why, and we are the people you hold responsible for it.
It covers the website, the iOS and Android apps, and the emails and notifications we send.
What we collect
We collect what we need to run the platform, and nothing we have no use for.
- Your account: name, email address, password (stored scrambled, never in readable form), the country you live in, and the language and appearance you choose.
- What you post: your profile, jobs, listings, community posts and comments, your messages, and the photographs and files you upload.
- Verification: the identity document you send, and the decision made about it.
- Your subscription: whether it is active, where it was bought, and when it renews or ends. We never see your card.
- How the platform is used: pages opened, actions taken, the device and browser, and the IP address the request came from.
Why we use it
Every use below is either what you asked us for, or something we have to do.
- To run the platform: showing your listings, delivering your messages, keeping you signed in.
- To keep people safe: checking content for the things the terms forbid, handling reports, and stopping scams and abuse.
- To verify identity, when you ask us to.
- To tell you things you need to know: a reply, an application update, a change to these documents.
- To meet legal obligations and to answer lawful requests from authorities.
Payments
Access is bought in the app, and Apple or Google take the payment. Your card details go to them, not to us.
What reaches DiasporaHub is the state of your subscription: active, cancelled, expired, or a payment problem, with the date it changes. That is what opens and closes your access.
Identity documents
An identity document is not stored with the rest of your content. It goes on a private disk that the public internet cannot reach.
Only members of the DiasporaHub team who hold the permission to review documents can open one, they open it through a link that expires within minutes, and every time one is opened it is written into a record with who opened it and when.
The file itself is deleted 30 days after the decision, whether it was accepted or not. We keep the decision and its date, because that is what the badge on your profile rests on.
Reports and moderation
When you report somebody, we see what you reported, the reason you chose and anything you wrote. The person reported is never told who reported them. When you block somebody, the team sees who you blocked, so they can check the account.
When content is checked automatically, the reason it was flagged is visible to the team reviewing it, not to the person who posted it or to anybody else.
How long we keep things
Your account and what you post are kept while your account exists. Delete your account and your personal details are removed and your content comes down, except anything we have to keep, such as a record of a moderation decision or a payment.
Identity documents are deleted 30 days after the decision. Records of staff actions are kept, because they are what makes moderation accountable.
Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to stop a particular use, and ask for it in a form you can take elsewhere. Most of it you can do yourself in your account.
We answer within one month. If we cannot do what you ask, we tell you why.
Children
DiasporaHub is not for children under 16 and we do not knowingly collect their data. If you believe a child has an account, tell us and we will close it.
Changes to this policy
We may change this policy. The date at the top says when it last changed.
If a change affects what we do with data we already hold, we will tell you before it takes effect.
Contact
To ask for your data, to correct it, to have it deleted, or to ask a question about any of this, write to us. You can also complain to the data protection authority in the country you live in.