Controller: YChat Social LLC (New Mexico, USA). Contact: privacy@ychatsocial.com.
Scope: Applies to ychatsocial.com, web.ychatsocial.com, and related apps.
Data We Collect.
Account Data: email, username, display name, date of birth (where needed), phone (optional/for payments), profile info, identity/KYC (only for paid features where required), country/region.
Usage Data: device identifiers, IP address, app/web logs, session and event telemetry, crash diagnostics, preferences, cookie and SDK IDs, referral info.
Payments & Purchases: order IDs, coin bundles/subscriptions purchased, tokenized payment method references and risk signals from processors; we do not store full card numbers.
Content & Social Graph: posts, messages (stored per product design; end-to-end encryption is not guaranteed), follows, likes, reports, creator page settings.
Support & Communications: emails, tickets, attachments, and metadata.
Purposes of Processing. Provide and secure the Services; enable purchases and subscriptions; fraud, abuse, and sanctions screening; personalization and recommendations; analytics and product improvement; compliance with law and legal process; communications and customer support.
Legal Bases (EEA/UK where applicable). Contract performance; legitimate interests (security, fraud prevention, product improvement); consent (cookies/marketing where required); legal obligations (tax, AML/sanctions, accounting).
Sharing & Recipients.
Processors: hosting/CDN, analytics/telemetry, payments, KYC/AML, email & messaging, customer support, content moderation. Processors act under contract and instructions.
Partners/Creators: when you interact with creator pages or purchase their items, we may share necessary info to fulfill the transaction (e.g., username, interaction details, tax-relevant data).
Authorities/Compliance: law enforcement or regulators per valid legal process; emergency disclosures for imminent harm; sanctions/export control screenings.
Corporate Transactions: merger, acquisition, financing, or sale; data transfers under appropriate safeguards.
International Transfers. We use appropriate safeguards for cross-border transfers (e.g., Standard Contractual Clauses or their equivalents). By using the Services, you understand data may be processed in the US and other countries.
Retention. We retain data as long as needed for the purposes above: account data for the life of the account; purchase records for 7 years (or longer if law requires); security logs typically 12–24 months; backups up to 90 days.
Your Rights. Subject to law: access, correction, deletion, portability, restriction, objection, and consent withdrawal. Submit requests to privacy@ychatsocial.com. You may also delete your account in-app—see Data Deletion.
Children. The Services are not for under-13s. Where local laws require higher age, we apply those thresholds. We remove accounts reasonably believed to be underage and report CSAM.
Security. We apply technical/organizational measures: encryption in transit (TLS), credential hashing, access controls, logging/monitoring, vulnerability management. See Security/Disclosure.
Marketing & Preferences. You can opt in/out from email settings. Push notifications can be controlled in app/OS settings.
Cookies & Similar Tech. See our Cookie Policy.
Do Not Track. We do not respond to DNT signals; use in-product controls instead.
Changes. We will update this policy as needed and post the new effective date.
Contact & Complaints. privacy@ychatsocial.com. You may have the right to lodge a complaint with your local data protection authority.
===== Our Other Policies ======
