Privacy Policy

1. Information we collect

• Account data: email address, display name, authentication provider, verification state, and encrypted authentication credentials or provider tokens where applicable.
• Public profile data: display name, handle, bio, creator signal, follower counts, and public work.
• Creative content: originals, versions, captions, text, images, audio, project metadata, rights confirmations, creator requests, Challenges, evidence links, comments, and creator notes.
• Activity: likes, saves, follows, mentions, blocks, reports, invitations, and the actions needed to deliver an activity inbox.
• Drafts and device state: synced drafts when signed in, plus language, onboarding, and unfinished-draft state stored locally in your browser.
• Security and reliability data: session identifiers, IP address and user agent handled by the authentication system, bounded performance measurements, error categories, and abuse-rate counters.

2. How information is used

• Operate sign-in, profiles, publishing, attribution, feeds, comments, sound playback, sharing, and moderation.
• Preserve the original-to-version connection and prevent versions of versions during the MVP.
• Protect accounts, enforce rate limits, investigate reports, prevent abuse, and maintain service integrity.
• Measure product health and collaboration funnels using closed event categories rather than storing free-text analytics payloads.
• Improve English, Arabic, LTR, RTL, mobile, accessibility, and network-resilience experiences.

3. What is public

Published originals, versions, display names, handles, bios, public counts, comments, mentions, Challenges, evidence links, creator notes, and timestamps can be seen and shared by anyone. A shared link may be opened outside IdeaVolve.

Email addresses, private drafts, saves, blocks, report details, private evidence requests, authentication tokens, and moderator workspaces are not public.

4. Service providers and sharing

We use infrastructure, database, file-storage, authentication, and delivery providers only to run IdeaVolve. Google receives information when you choose Google sign-in. WhatsApp, your device share sheet, or another destination receives what you choose to share under that service’s own privacy terms.

We may disclose information when required by law, to protect people or the service, or in connection with a legitimate organizational transition, subject to applicable safeguards. We do not sell member data.

5. Analytics and invitations

Product analytics use a limited vocabulary such as viewed original, opened contribution, started composer, published, or started a share handoff. A handoff means a share destination was opened or a link was copied; it does not claim that a recipient received the message. Performance analytics store numeric measures and closed error categories. They are not designed to accept post text, emails, contact details, referrers, or full URLs.

“Pass it to one” creates an opaque link. A first name entered to personalize share copy stays on the device and is not sent to IdeaVolve. The service may record that the invitation was opened or produced a version, but not the recipient’s phone number.

6. Retention

We keep information while your account is active and as needed to provide the service. Account deletion revokes account access, hides authored creations and comments, deletes private drafts and social relationships, and anonymizes the remaining public credit record.

Uploaded files, backups, abuse-prevention counters, moderation evidence, and security records may remain for a limited period until safely purged or while reasonably needed for integrity, dispute handling, legal compliance, or protection from abuse. We avoid keeping information longer than its purpose requires.

7. Your controls

• Edit your public profile.
• Download a portable JSON copy of account and creative data.
• Delete your account through Account & safety after a strong confirmation.
• Remove your content where an owner control is available.
• Save or unsave originals, follow or unfollow creators, and unblock creators.
• Report privacy, safety, copyright, or ownership concerns from the affected content.

8. Security and international access

We use access controls, secure cookies, encrypted OAuth tokens, rate limits, origin checks, and restricted moderator tools. No system is perfectly secure, so use a unique password where email sign-in is available and report suspicious access promptly.

The platform is initially focused on Jordan, while infrastructure or members may be in other countries. Information may therefore be processed across borders with the safeguards available through the service’s providers and applicable law.

9. Privacy requests

Use Account & safety for export, deletion, and blocked-account controls. For a privacy concern tied to public content, open that content, choose Report, and select the closest reason with supporting detail. This creates a private, traceable moderation case without exposing personal contact information.