Company

Privacy

Draft for legal review. Do not publish as written. We are EU-based and process personal data belonging to people making sensitive allegations. Lawful basis, retention periods, international transfers, DSA obligations and data controller details all need professional review before this goes live.

The short version

We collect the minimum we need to run the platform and prevent abuse. We never publish anything that identifies a reviewer. We do not sell personal data. We do not tell employers who wrote a review.

What we collect

Account data: email address and password credentials, used to authenticate you and to contact you about your submissions.

Review content: the ratings and text you submit, plus the general employment context you provide such as role family, tenure band and region.

Technical data: IP address, device and browser information, and timestamps, collected for security, fraud detection and abuse prevention.

Usage data: pages viewed and searches performed, used to improve the product.

How we protect reviewer identity

Your name and email are never displayed. We separate identifying account data from published review content. We generalise job titles when a title is rare enough to identify someone, and we may generalise location or tenure for the same reason. Technical data such as IP addresses is used only for abuse prevention and is never shown to employers or disclosed alongside a review.

When we would disclose information

Only where required by law, a valid court order, or other legally binding process, and only after assessing whether the request is valid and proportionate. We may challenge, narrow or reject requests that are overbroad or invalid. Where we are legally permitted to do so, we will notify the affected user before disclosing anything, so they have the opportunity to respond or seek advice.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, request deletion, object to or restrict processing, and receive a copy in portable form. Note that deleting your account does not automatically remove reviews you have published, since those form part of a public record other people rely on. You can request removal of your reviews separately.

Retention

We retain account data while your account is active. We retain technical data for a limited period for security purposes. Published reviews are retained while they remain live, and moderation records are retained where needed for legal or safety reasons.

Contact

Privacy questions and rights requests: privacy@igamingtruth.org