Privacy Policy (draft)

What we collect

• Account data: email, one-way hashed password, username, display name.
• Content you post, your votes and private decision workspaces.
• Security data: signed-in devices and a keyed hash of your IP for vote-manipulation review (hashes deleted after 30 days).
• Usage statistics not tied to accounts, kept 180 days. No third-party trackers.

Data sent to AI providers

• When you request analysis, the question text is sent to the AI provider named on that page, after best-effort removal of detected personal data (e.g. emails, phone numbers).

Your rights

• Download your data as JSON and request account closure in settings.
• Thread aliases hide your identity from other members; moderators can check it when content is reported, and every check is logged.

Points for legal review: PDPA lawful basis per data type, retention periods, cross-border transfer (AI providers), data protection contact, computer traffic data retention duties.