Privacy policy

[Company name], [address], Switzerland, is responsible for the processing of personal data on turquoisechat.com and in the Turquoise app. Contact: [contact@turquoisechat.com].

Account data: email address, first and last name, the initials derived from them, and your password as a one-way hash.

Community data: the communities and groups you belong to, your role and the date you joined.

Content: messages, replies, reactions and the read status of your groups.

Technical data: a session cookie, the browser type of your sessions, and — for notifications you enable — your browser's push subscription. IP addresses are used to protect against abuse and are stored with moderation and security events.

Other members only see your initials and a colour. The moderators of a community see the names and email addresses of that community's members. The operator's tools show communities, members and groups, but no message content; technical access to the database is limited to operation, maintenance and legal obligations.

We process data to provide the service you or your community requested (contract), to keep it secure (legitimate interest) and to meet legal obligations.

The service is hosted by [Infomaniak Network SA, Geneva], in Switzerland. Emails are sent through [email provider]. Push notifications are delivered through the push service of your browser's vendor; they contain only the group name, end-to-end encrypted for your device.

We only use cookies that are strictly necessary: the sign-in session and, for moderators, the community currently selected. No advertising or analytics cookies.

Messages stay until they are deleted by their author or a moderator, or until the community is closed [retention after closing: to be defined]. Inactive sessions expire after 7 days; email links after their validity; unconfirmed sign-ups are deleted after 7 days.

You can request access to, correction or deletion of your data, and object to its processing, by writing to [contact@turquoisechat.com]. You may also lodge a complaint with the competent data protection authority.