Privacy Policy

This Privacy Policy explains what personal data Vent It collects, why we collect it, how we use and protect it, and the rights you have over it. We wrote this policy with two commitments in mind: we collect only what the Service needs to function safely, and we do not use your personal data for any purpose beyond operating, securing, and improving Vent It, except where the law requires otherwise.

1. Data We Collect

Account information. When you sign in (for example, with Google), we receive your name, email address, and profile picture as shared by the sign-in provider.

Content you provide. Posts, comments, reactions, votes, and reports you submit, including anonymous posts.

Usage and visit data. Because Vent It requires sign-in to use the Service, we log which signed-in account visited which pages and when, along with basic technical data such as device/browser type and referring page. We use this to keep the Service secure, to understand feature usage in aggregate, and to investigate abuse reports — not to build public-facing profiles of individual users' browsing habits.

Device and log data. Standard technical data such as IP address, browser type, and timestamps, collected automatically for security and diagnostic purposes.

2. How We Use Your Data

• To create and secure your account, and authenticate you when you sign in;
• To operate core features — showing you the feed, storing and displaying your posts and comments, and processing reactions and votes;
• To detect, investigate, and act on spam, abuse, and violations of our Terms of Service, including reviewing reports and, where an anonymous post is reported, identifying its author internally for moderation purposes only;
• To send you notifications about activity relevant to you (for example, a comment on your post), where the Service offers this feature;
• To understand, in aggregate, how the Service is used, so we can improve it;
• To comply with legal obligations, respond to lawful requests from authorities, and enforce our Terms of Service.

3. What We Do Not Do

We do not sell your personal data. We do not share your personal data with third parties for their own marketing or advertising purposes. We do not use the content of your private account data, or your visit/usage logs, for any purpose beyond operating, securing, and improving Vent It as described in this Policy, except where required by law or to protect the rights, safety, or property of Vent It, our users, or the public.

4. Anonymous Posting and Your Identity

When you post anonymously, other users cannot see your identity. Vent It retains an internal, access-restricted link between the post and your account so we can moderate the Service and meet legal obligations. Access to that link is limited to authorized moderators investigating a specific report, and such access is itself logged for accountability. We do not expose this link through any public feature or API.

5. Sharing With Third Parties

We share data only in the following limited circumstances: with service providers who host or process data on our behalf under contractual confidentiality obligations (for example, our cloud hosting and authentication providers, such as Google for sign-in and our backend/cloud infrastructure provider); when required by law, regulation, legal process, or a valid request from a public authority; or to protect the rights, property, or safety of Vent It, our users, or others, including enforcing our Terms of Service.

6. Data Retention

We retain account and content data for as long as your account is active. Usage/visit logs are retained only as long as reasonably needed for security and abuse-investigation purposes, after which they are deleted or aggregated in a form that no longer identifies you. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are permitted or required to retain it (for example, an open moderation investigation, or a legal retention obligation).

7. Your Rights

Consistent with Rwanda's Law N° 058/2021 on the Protection of Personal Data and Privacy, you have the right to: know what personal data we hold about you and how it is used; access a copy of it; correct inaccurate data; request erasure of your data in certain circumstances; object to certain processing; request portability of data you provided; and not be subject to a decision based solely on automated processing that significantly affects you. To exercise any of these rights, contact us at the email below.

8. Security

We use reasonable technical and organizational measures (such as access controls and encryption in transit) to protect your data. No online service can guarantee absolute security, and we encourage you to use a strong, unique password and to safeguard access to your sign-in method.

9. International Data Transfers

Our hosting and infrastructure providers may process or store data outside Rwanda. Where this occurs, we take steps intended to ensure your data continues to receive an appropriate level of protection, consistent with applicable law.

10. Data Breach Notification

If a breach occurs that puts your personal data at risk, we will notify Rwanda's National Cyber Security Authority and affected users without undue delay, consistent with our obligations under Rwandan law.

11. Children's Privacy

Vent It is not directed at children under 16. If we learn that we have collected personal data from a child under this age without appropriate consent, we will delete it.

12. Changes to This Policy

If we make material changes to this Policy, we will ask you to review and accept the updated version before you continue using the Service.

13. Contact

For privacy questions, access/correction/deletion requests, or to report a concern, contact us at udahemukafreeman70@gmail.com.