FLAGHIM PRIVACY POLICY

1. WHO WE ARE AND WHAT WE DO

Welcome to Flaghim! We're a provider-only safety platform designed to help Providers share information about potentially dangerous clients and protect one another.

Privacy is fundamental to our mission. We respect and protect the privacy of our users, understanding the unique safety concerns faced by Providers. This Privacy Policy describes how we collect, use, store, and protect your information.

If you have any questions, concerns, or issues with our Privacy Policy, please contact us at hello@flaghim.com. Please note that any explanation we provide cannot be considered legal advice.

By using Flaghim, you agree to our Terms of Service and this Privacy Policy.

2. WHAT INFORMATION DO WE COLLECT?

We collect and process your personal information lawfully, fairly, and transparently. We only collect information where we have a legal basis for doing so.

We collect information that you choose to give us directly.

You have the right to change your mind about how we use your information at any time (though this won't affect processing that has already occurred).

Information You Choose to Give Us

When you create an account and use our services, we collect:

• Account Information: Username (username), email address (encrypted), password (stored as a one-way hash)
• Verification Information: Profile verification data to confirm you're a Provider
• Review Content: Client reviews, ratings, tags, descriptions, photos/screenshots you upload
• Communications: Support messages, feedback, reports

3. HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

• Provide Services: Enable you to use the Platform, search for clients, post reviews, track contacts
• Safety and Security: Verify your identity, prevent fraud, detect abuse, maintain Platform security
• Communication: Send you notifications, respond to support requests, provide updates
• Legal Compliance: Comply with legal obligations, enforce our policies
• Administrative: Maintain records, manage accounts, process complaints

We will not process your personal information in ways incompatible with these purposes.

4. HOW WE PROTECT YOUR INFORMATION

We implement industry-standard security measures to protect your information:

• Encryption: AES-256 encryption for sensitive data at rest
• Hashing: SHA-256 hashing for client identifiers (phone numbers, emails) to enable searching while protecting privacy
• Password Security: Bcrypt hashing for all passwords
• Secure Transmission: HTTPS/TLS 1.3 for all data in transit
• Access Controls: Limited employee/admin access to personal data
• Regular Updates: Security patches and audits

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. DATA SHARING AND DISCLOSURE

We do not sell your personal information. We may share your information with:

Other Platform Users

• Your username and reviews (unless posted anonymously)

Service Providers

We may share information with third-party service providers who help us operate the Platform:

• Hosting and infrastructure providers
• Email service providers
• Security and fraud prevention services

These providers are contractually required to protect your information and may only use it to provide services to us.

Legal Requirements

We may disclose information when legally required:

• In response to valid court orders or subpoenas
• To comply with applicable laws and regulations
• To protect our rights, property, or safety
• To protect users' vital interests

Important: We do not voluntarily cooperate with law enforcement to prosecute Providers. We will resist legal demands when possible and notify affected users when legally permitted.

6. DATA RETENTION

We retain your information only as long as necessary for the purposes described in this policy.

Account Deletion

When you delete your account:

• Your personal information (email, username, profile) is permanently deleted
• Your reviews are anonymized (marked as "[Deleted user]")
• Red flag ratings and tags are retained in aggregate for safety purposes
• The fact that a review existed is preserved to prevent manipulation

Review Deletion

When you delete a review:

• Review text, media are removed and your name becomes anonymous
• Red flag ratings and tags remain in aggregate statistics
• A "This review was deleted by the user." message remains for transparency

This retention policy prevents users from removing safety warnings after potentially dangerous encounters.

Legal Retention

We may retain certain information longer when required by law or to protect rights:

• Legal compliance documentation
• Information needed to investigate violations

7. YOUR PRIVACY RIGHTS

You have the following rights regarding your personal information:

Access

You can request details of the personal information we hold about you. You can access most of your information through your account settings.

Correction

You can update your account information at any time. If you believe any information is inaccurate, contact us athello@flaghim.com.

Deletion

You can delete your account at any time through account settings. See Section 6 for details on what happens when you delete your account.

Data Portability

Self-service export is not currently available. To request information about your account, contact us at hello@flaghim.com and we'll compile it for you.

Restriction

You can restrict how we use your information. Note that this may limit your ability to use certain Platform features.

Objection

You can object to certain uses of your information, particularly for marketing purposes.

Consent Withdrawal

Where we process information based on your consent, you can withdraw consent at any time.

Complaints

If you believe we've violated your privacy rights, contact us at hello@flaghim.com. You also have the right to file a complaint with a data protection authority.

8. COOKIES AND TRACKING

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Improve Platform performance
• Provide security features

You can control cookies through your browser settings. However, disabling cookies may limit some Platform functionality.

Types of Cookies We Use

• Essential Cookies: Required for Platform operation
• Functional Cookies: Remember your preferences
• Security Cookies: Detect fraudulent activity

9. INTERNATIONAL DATA TRANSFERS

Our servers are located in Iceland. If you access the Platform from outside Iceland, your information will be transferred to and processed in Iceland.

We chose Iceland because:

• Strong privacy and data protection laws
• Commitment to operating outside US jurisdiction
• Favorable legal environment for Provider safety

For transfers from the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

10. CHILDREN'S PRIVACY

The Platform is not intended for anyone under 18 years of age. We do not knowingly collect information from anyone under 18.

If we discover we've collected information from someone under 18, we will delete it immediately. If you believe we have information from someone under 18, please contact us athello@flaghim.com.

11. THIRD-PARTY LINKS

The Platform may contain links to third-party websites or services. We have no control over and are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party sites you visit.

12. DATA BREACH NOTIFICATION

In the unlikely event of a data breach that affects your personal information, we will:

• Investigate the breach immediately
• Take steps to mitigate harm
• Notify affected users without undue delay
• Notify relevant authorities as required by law
• Provide information about what data was affected and what we're doing about it

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

When we make changes, we will:

• Update the "Last Updated" date
• Post the new policy on the Platform
• Notify users via email for material changes
• Display a prominent notice on the Platform

Your continued use of the Platform after changes become effective constitutes acceptance of the updated policy.

For significant changes (such as changes to the legal basis for processing your information), we will ask you to re-consent to the amended policy.

14. ADDITIONAL PRIVACY PROTECTIONS FOR PROVIDERS

We recognize the unique privacy needs of Providers and have implemented additional protections:

Anonymous Posting

You can post reviews anonymously so your username isn't visible to other users while still managing your reviews from your account.

Identity Protection

• Client identifiers are hashed, not stored in plain text
• Minimal personal information required
• No requirement to use your real name
• Email addresses are never displayed publicly

Law Enforcement Protection

We will not voluntarily cooperate with law enforcement efforts to prosecute Providers. We will:

• Challenge legal demands when possible
• Notify users when we receive legal requests (when legally permitted)
• Minimize data collection to limit what can be disclosed

No Advertising Data

We do not use your information for advertising purposes or share it with advertising networks.

15. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Email: hello@flaghim.com

We will respond to privacy-related inquiries within 30 days.