Subsocial is committed to protecting and respecting your privacy.
Personal data is any information relating to you and that alone or in combination with other pieces of information gives the opportunity to the person that collects and processes such information to identify you as an individual. This can be your name, email, identification number, location data, or any other information that may identify you.
Processing of the data means any action performed with your personal data, for example, collection, recording, organization, structuring, storage, use, disclosure by any means, etc.
What personal information do we collect and process?
We know you care about how your personal data is used and we take your privacy seriously. That is why, in general, we don’t collect and process any of your personal data.
However, until Subsocial network is under active development and testing, we may run our own IPFS nodes. It’s necessary for enabling you to upload and post any text, visual or audiovisual content (User Generated Content) to Subsocial network. This means, if we run our own IPFS nodes we may collect and process any User Generated Content or other details that you upload to the space or profile.
Please note that we don’t guarantee the running of our own IPFS nodes permanently. We may do so only if we consider it necessary to provide data availability on Subsocial network.
Use of personal information
Please note that any User Generated Content you upload and post to the space or profile, including your personal information, will be publicly available forever. It means that others will have read access to your personal information that you unload to the Subsocial network, and we can not control how others may use your personal information.
The fact is that with IPFS the small parts of User Generated Content are stored on nodes spread across the globe. A cryptographic hash is computed from User Generated Content then gets stored on Subsocial blockchain. When someone wants to view this content, its hash is used to load the actual data from IPFS. At this point, the small parts are retrieved simultaneously from numerous nearby IPFS nodes. As your User Generated Content is stored in parts on nodes it means it can be publicly available forever.
In order to provide you with high-quality services, we use the following third-party tools & services. Please note that with these tools & services you share your data without us.
Polkadot.js extension is a simple browser extension for managing blockchain accounts in a browser and allowing the signing of extrinsics (public transactions) using these accounts. We use this third-party software for enabling you to use any services on our Website with the pair of cryptographic public and private keys generated.
We do not collect your private key or other details and do not transfer any of your data to anyone. Instead, Polkadot extension may collect and use these data for running accounts. Please, refer to their privacy policies to be familiar with how they process and protect your data.
InterPlanetary File System is a peer-to-peer network for storing and sharing data. We use this third-party network for enabling you to upload and post any text, visual or audiovisual content (User Generated Content) to Subsocial.
As above-mentioned, any User Generated Content you upload or post to the space or profile using Subsocial is then publicly available and accessible to everyone participating in IPFS Network. This User-Generated Content will be stored on your local IPFS node. Also, this content will be distributed and co-hosted on other users’ local IPFS nodes. If you want to remove some User Generated Content, you can do it only from your local IPFS node. IPFS protocol does not guarantee that User Generated Content removed from your local node will be removed from IPFS Network completely. It may remain stored on other users’ local IPFS nodes.
Thus, all content shared with the IPFS Network is public by default. This means your User Generated Content that you have uploaded or posted will be accessible to everyone who queries the data on the IPFS Network. If you want to share certain User Generated Content privately, you must encrypt such content before uploading or posting it to the IPFS Network.
Links to third-party websites
In no event shall any reference to any third-party product or service be construed as an approval or endorsement by Subsocial of that third party or of any product or service provided by a third party. A recommendation to use any third-party product or service does not imply that we endorse or accept any responsibility for the content or use of such product or service as well as will not be a party to or in any way monitor any transaction involving any third-party providers of products or services.
European Economic Area (EEA) residents
If you are an EEA resident, you have the following rights in relation to your personal data under the EU General Data Protection Regulation:
Right to withdraw consent. If we run our own IPFS nodes and process your personal data, you have the right to withdraw your consent to the processing of your personal information at any time. Your withdrawal will not affect the lawfulness of our processing based on consent before your withdrawal.
Right of access to your personal information. If we run our own IPFS nodes and process your personal data, you have a right to request that we provide you a copy of your personal information held by us. You may also ask for the clarifications on the personal information, i.e. purpose of collecting and processing, third parties that have access to information.
Right to rectify your personal information. If we run our own IPFS nodes and process your personal data, you may request us to rectify or update any of your personal information that is inaccurate. You can also complete the personal information if you feel there is a need to do so.
Right to erasure. If we run our own IPFS nodes and process your personal data, you may request us to erase your personal information if its processing is no longer necessary to achieve purposes for which it was collected or otherwise processed, as well as if there are no legal grounds for the processing. We are committed to erasing your personal information from our local IPFS nodes.
If your personal information is publicly available and stored on other users’ local IPFS nodes, we will, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other parties that are processing your personal information (if any) that you have requested the erasure of any links to, or copy or replication of your personal information. However, we can not guarantee that your personal information will be erased from all third-party IPFS nodes.
Right to data portability. If we run our own IPFS nodes and process your personal data, you may request to receive your personal information in a structured, commonly used and machine-readable format. You may also ask us to transfer your personal information directly to another controller, where technically feasible, unless exercise of this right adversely affects the rights and freedoms of others.
Right to restriction of the processing. If we run our own IPFS nodes and process your personal data, you have the right to restrict the processing of your personal information. It means that in some cases, prescribed by law, you may restrict the way of processing your personal information. For example, if you contest the accuracy of your personal data being processed or in case Subsocial is not interested in the processing of your personal data any longer, but you want Subsocial to do this on different reasons (to exercise or defense of legal claims) and, instead of the erasure of information, its processing will be just restricted.
Right to object to the processing. Where the processing of your personal information is based on consent, contract or legitimate interests you may object, at any time, to the processing of your personal information as permitted by applicable law. We can continue to process your personal information if it is necessary for the defense of legal claims, or for any other exceptions permitted by applicable law.
How to exercise your rights? To exercise any of your rights, or if you have any other questions about our use of your personal data, please contact us at [email protected]. We are committed to responding to any user within a reasonable time. Please note that we may take steps to verify your identity before complying with the request, to protect your privacy and security.
Our contact information
Last updated on August 8, 2020