Privacy Policy

At a glance

IntroShare is a social networking service with profiles, posts, friends, communities and private messages. This policy explains what information we process, why we process it and how you can exercise your rights. Your visibility choices affect which other users can view your content; they do not stop the processing necessary to operate the service.

Who is responsible

Service: IntroShare Social (free beta operation).
Privacy contact: privacy@introshare.com
General support: support@introshare.com

The full legal identification and relevant details of the data controller will be finalised before public availability. This notice concerns the beta operation of IntroShare.

Information we process

• Account details: name, username, email address, hashed password, language and verification status.
• Profile details: photo, biography, education, interests, location and other information you provide optionally.
• Content and connections: posts, photos, reactions, comments, communities, friendship/following relationships, invitations and private messages.
• Settings and safety signals: privacy choices, blocks, reports, moderation actions, timestamps, technical logs and data needed to prevent misuse.
• Technical details: IP address, browser/device information and login/session cookies where needed for security and reliable service.

Purposes and legal bases

We process personal data only where an appropriate legal basis applies:

• Performance of a contract: creating and operating accounts, verifying email, providing chats and posts, and displaying content according to your settings.
• Legitimate interests: preventing attacks, fraud, spam and abuse, subject to an assessment of users’ rights.
• Legal obligations: responding to valid legal requests and applicable duties.
• Consent: for specific optional processing where consent is actually requested. Withdrawal does not affect the lawfulness of earlier processing.

Email and registration details are necessary for an account; much profile information is optional.

Visibility and recipients

People you choose may see your content depending on each post’s audience, profile settings, community participation and blocks. Private messages are intended for conversation participants; authorised staff may access them only where necessary and lawful for operations, safety or valid legal requests.

Infrastructure, email and embedded-service providers such as GIPHY may process data depending on your use. Current providers and any transfers: hosting via WebHostingBuzz, email sent through the hosting infrastructure, and GIPHY when GIF search is used; additional technical providers and any international transfers require verification.

Cookies and embedded content

IntroShare uses technical session cookies and settings needed for login and security. External GIFs, links and previews may load content from third parties and share technical information with them depending on implementation and browser settings. A precise inventory of cookies and providers, and whether a consent mechanism is needed, must be verified before public availability.

Retention and deletion

Account data and content are kept as long as necessary for the account, unless the law provides otherwise or documented retention is required. The application provides for account deactivation, a reactivation period of up to 30 days, and permanent deletion. Exceptions may apply to content lawfully saved by others or data that must be retained.

Backups: The retention periods for backup copies are undergoing technical review before public release. Security logs: The retention periods for security logs are undergoing technical review before public release. Actual periods and deletion/restore measures still need verification.

Your rights

Subject to GDPR conditions, you may request access, correction, erasure, restriction and portability of data, and object to certain processing. You may also withdraw consent where it is used. Contact privacy@introshare.com to exercise these rights. We may require reasonable identity verification before processing a sensitive request.

You may lodge a complaint with the relevant supervisory authority; in Greece, this is the Hellenic Data Protection Authority.

Security, minors and changes

We use access controls, account verification, security event logging and abuse prevention measures. No online system can guarantee absolute security. The policy for minors and associated technical measures must match the application before public registrations begin.

If we make material changes, we will publish an updated policy and give notice where required.