PRIVACY POLICY

Last Updated: 18 January 2025

This Privacy Policy describes how Brogchat (the “Service”) collects, uses, stores, and protects personal data. By using the Service you agree to the practices described below.

1) WHO WE ARE

- The Service is operated by an individual based in the United Kingdom (the “Provider”).
- For data protection purposes, the Provider is the data controller of personal data processed through the Service.

2) DATA WE COLLECT

We collect only the data reasonably necessary to operate the Service, maintain safety, and enforce our Terms.

2.1) Data you provide

Examples of data you may provide:
- Account information: username, email address, authentication details
- Profile content: posts, images, videos, uploaded media
- Private messages sent through the Service
- Reports or communications you submit to us

2.2) Automatically collected data

Automatically collected information may include:
- IP address
- Device and browser information
- Connection timestamps
- Technical logs related to video chat sessions, messaging, and moderation events

Purpose: This data is used for security, abuse prevention, and to operate the Service.

3) HOW WE USE YOUR DATA

We process personal data for the following purposes:
- To provide and operate the Service
- To enable user interaction (video chat, messaging)
- To enforce our Terms of Service and investigate reports
- To maintain platform safety and prevent repeat abuse
- To comply with legal obligations and lawful requests

We do not sell personal data or use it for targeted advertising.

4) CONTENT MODERATION & PRIVATE MESSAGES

- The Service does not proactively monitor all user communications.
- Content (including private messages) may be reviewed if reported, flagged for abuse, or required by law.
- Moderation actions are taken to enforce rules and protect users.

5) LEGAL BASIS FOR PROCESSING

Under UK GDPR we rely on one or more of the following:
- Performance of a contract: to provide the Service you request
- Legitimate interests: to prevent abuse, ensure safety, and protect the Service
- Legal obligations: to comply with applicable laws or lawful requests

6) DATA RETENTION

We retain personal data only as long as reasonably necessary for the purposes above.
- Active accounts: data is retained while your account remains active
- Account deletion: publicly visible posts and uploaded content are removed immediately
- Log retention: technical logs and moderation records may be retained for up to 30 days after deletion
- Permanent bans: logs/identifiers may be retained longer to prevent repeat abuse and meet legal obligations

7) DATA SHARING

We do not share personal data except in limited circumstances:
- Service providers necessary to operate the platform (hosting, payment processors)
- Where required by law, court order, or lawful request by authorities
- To protect the rights, safety, or integrity of the Service or its users

Third parties are required to process data in accordance with applicable law.

8) DATA SECURITY

- We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, or disclosure.
- No online service can guarantee absolute security; users acknowledge this risk.

9) YOUR RIGHTS

Under UK data protection law you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of your data (subject to lawful retention)
- Object to or restrict certain processing
- Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise these rights, contact the Provider using the contact details on the Service.

10) INTERNATIONAL DATA TRANSFERS

- Service providers may process data outside the UK. Where this occurs appropriate safeguards are used.

11) CHILDREN'S DATA

- The Service is for users aged 18 and over. We do not knowingly collect data from minors. Accounts found to belong to underage users will be terminated.

12) CHANGES TO THIS POLICY

- We may update this Privacy Policy from time to time. Changes take effect when posted; continued use constitutes acceptance.

13) CONTACT

- For questions about this Privacy Policy or your data, contact the Provider via the contact method provided on the Service.