Privacy policy

Who we are

ÎndrumCuVoi is run by [name of the organisation] ([IDNO, registered address]), the controller of your personal data. Write to us at [email protected] with any question about your data.

What we collect

Account: email address, password (stored only as a cryptographic hash, never in plain text), preferred language, notification settings and the date you accepted the guidelines.

Public profile: the pseudonym you choose and, optionally, a short bio. Your real name is not needed and never shown.

What you publish: discussions, replies, questions to specialists and personal stories, together with the consent you gave for each story (its exact wording and date).

Account activity: discussions you follow, articles you save, notifications and reports you make.

Contact form messages: your name (optional), email address and message. Newsletter: email address, language and the dates you requested and confirmed the subscription.

Technical data: your IP address is used momentarily, in server memory, to protect against abuse (sign-in attempt limits, spam) and is not stored in our database. Technical logs of the server may contain IP addresses for a short time for security. View statistics are only daily totals — no cookies, IP addresses or personal identifiers.

Health information

We never ask for diagnoses, treatments or other medical data. If you choose to write about your experience, this may be sensitive data: we process it only because you chose to publish it (explicit consent) and only to show it in the community. We recommend using a pseudonym and leaving out details that could identify you or others.

Why we use data and on what basis

To provide your account and the community features (performing the service you ask for); to publish what you choose to publish, including stories (consent, which you can withdraw at any time); for moderation and community safety (legitimate interest and, where applicable, legal obligations); to answer your messages; to send news only if you subscribed and confirmed (consent).

We do not sell data, show advertising, build medical interest profiles or use third-party trackers.

Who else can access data

The platform team, strictly by role: moderators see what moderation needs, editors work with submitted stories, and only administrators can see the email address linked to an account. Other members only see your pseudonym and what you publish.

Data is stored on our own server, hosted in [country where the server is located, e.g. the Republic of Moldova] by [name of the hosting provider]. Emails are sent through our own mail server. We do not use outside analytics, advertising or content-delivery services that would receive your data.

We do not transfer personal data to other countries. Personal stories, discussions, messages and account data are never sent to any translation or artificial-intelligence service. Only the platform’s editorial texts (articles, pages, episode descriptions), which contain no data about users, may be translated with the help of a machine-translation tool, and they are checked by the editorial team before publication.

How long we keep data

Account: until you delete it. On deletion, your email, password, follows, saves and notifications are permanently deleted; your public posts are either removed or kept under “Member who deleted their account”, as you choose; your stories are withdrawn and erased.

Stories: until you withdraw them (their text and translations are then erased). Consent records are kept as evidence, no longer linked to the account once it is deleted.

Unconfirmed subscriptions are deleted after 7 days; read notifications after 180 days; contact messages [period, e.g. up to 12 months after they are resolved]. Database backups are kept encrypted for at most [14] days.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw consent at any time. Much of this is built into your account: “Download my data” (a file with everything we keep about you), profile editing and “Delete account”. For anything else, write to [email protected]; we reply within 30 days.

If you are not satisfied with our answer, you can contact the National Center for Personal Data Protection of the Republic of Moldova or the data protection authority of your country.

Cookies

We only use strictly necessary cookies: the session cookie that keeps you signed in and your language preference. There are no analytics or advertising cookies, so we do not ask for consent to them.

Security

Encrypted connections (HTTPS), safely stored passwords, role-based access, a log of privileged actions, encrypted and tested backups. No system is perfect: if you find a security problem, please write to [email protected].

Age

The community is intended for people aged 18 and over.

Changes

Any change to this policy is published on this page with its date; important changes are also announced to members.