Privacy policy

Data we process

• Account data such as display name, email, verification state, authentication and security records.
• Review content, experience dates, revisions, replies, reports, and moderation history.
• Optional evidence submitted for verification, subject to restricted access and retention controls.
• Technical records needed for security, rate limiting, abuse prevention, reliability, and auditability.
• Business claim and domain-verification records.

Why we process it

We use data to provide accounts and reviews, verify eligible claims, moderate content, prevent fraud and abuse, communicate service messages, meet legal obligations, and improve reliability. We do not treat private evidence or raw fraud signals as public profile content.

Sharing and service providers

Data may be processed by hosting, database, email, security, and monitoring providers under appropriate agreements. We may disclose information when legally required or necessary to protect users and the service. We do not sell ranking placement or personal information.

Retention and security

Retention should be limited by purpose, legal obligations, dispute needs, and integrity controls. Security measures include access control, encryption where appropriate, secret management, monitoring, and immutable audit records. No system can promise absolute security.

Your choices and rights

Depending on location, you may have rights to access, correct, delete, restrict, object, or receive certain data. Some records may be retained when required for safety, fraud prevention, disputes, or law. Contact [email protected].

Cookies

Essential session and security cookies may be required for authenticated features. Optional analytics or marketing storage should remain disabled until consent and production configuration are implemented.

Account privacy controls

Signed-in account holders can download an allowlisted JSON account export and submit access or erasure requests in Profile → Privacy. The export describes its included and excluded data; larger or additional disclosures require an access review. A request begins correspondence with an administrator and does not automatically erase an account, its histories, private files, or backups.