Privacy Policy

1. Data Controller

Echo of Encouragement ("we," "our," or "us") is the data controller responsible for your personal data. We are committed to protecting your privacy and ensuring GDPR compliance.

2. Information We Collect

3. Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Legitimate Interest (Art. 6(1)(f)): To provide the core service of sharing encouragement messages
• Consent (Art. 6(1)(a)): When you voluntarily submit messages and reactions
• Legal Obligation (Art. 6(1)(c)): To comply with legal requirements regarding content moderation

4. How We Use Your Information

We use your information to:

• Display your submitted messages to other users anonymously
• Track message reactions and engagement
• Moderate content and handle reports
• Improve service functionality and user experience
• Maintain service security and prevent abuse

5. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access (Art. 15): Request copies of your personal data
• Right to Rectification (Art. 16): Request correction of inaccurate data
• Right to Erasure (Art. 17): Request deletion of your personal data
• Right to Restrict Processing (Art. 18): Request restriction of processing
• Right to Data Portability (Art. 20): Request transfer of your data
• Right to Object (Art. 21): Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

6. Data Retention

We retain your messages and interactions for as long as necessary to provide the service. You may request deletion of your data at any time. Reported and moderated content may be retained longer for safety and legal compliance purposes.

7. Data Sharing

We do not sell, trade, or otherwise transfer your personal data to third parties except:

• When required by law or legal process
• To protect our rights, property, or safety
• With service providers who assist in operating our service (under strict data processing agreements)

8. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with GDPR requirements.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

10. Contact & Data Protection Officer

For any privacy-related questions, to exercise your rights, or to contact our Data Protection Officer, please reach out through our support channels. You also have the right to lodge a complaint with your local supervisory authority.

11. Policy Updates

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.