Privacy and Data Protection
Guiding Principle
Privacy by design: We collect the minimum necessary, protect what we collect, and give users control.
What We Collect
Necessary Data
| Data | Why | Retention |
|---|---|---|
| Account recovery, notifications | Until account deletion | |
| Username | Identity in community | Until account deletion |
| Password hash | Authentication | Until account deletion |
| Contribution history | SP/RP calculation | Aggregated after 2 years |
| Vote history | Governance transparency | Permanent (public) |
Optional Data
- Profile information (bio, location, skills) — You choose what to share
- Activity preferences — For personalization
- Communication preferences — For notifications
What We Don't Collect
- Browsing history outside TogetherOS
- Location tracking
- Payment information (handled by third parties)
- Personal messages content (end-to-end encrypted where possible)
Transparency Features
Public by Design
Some things are intentionally public:
- How you voted on proposals (accountability)
- Your SP balance (governance legitimacy)
- Your contributions (recognition)
Aggregate vs Individual
Many statistics are shared only in aggregate:
- Total participation (not who participated)
- Voting patterns (not individual votes on private matters)
- Demographics (not individual attributes)
User Controls
You can always:
- Export your data — Get a copy of everything we have
- Delete your account — Remove personal data (votes remain for integrity)
- Modify your profile — Change what you share
- Opt out of optional collection — Reduce data footprint
Data Security
- Encryption at rest — Data encrypted when stored
- Encryption in transit — HTTPS everywhere
- Access controls — Role-based access to sensitive data
- Audit logs — Track who accessed what
The Right to Be Forgotten
If you delete your account:
- Personal data is removed
- Contributions are anonymized (attributed to "deleted user")
- Vote history remains for governance integrity
- You can request additional removal if legally required
Governance of Privacy
Privacy policies are subject to community governance. Changes require proposals and consent-based decision making.
No Selling of Data
We do not sell, rent, or trade personal data. Ever. This is non-negotiable.
Questions?
Contact the community about privacy concerns. Transparency includes explaining how we protect your information.