Privacy Policy

Welcome to ReportIT ("Company", "we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.

Information You Provide

• Account Information: Name, email address, phone number, and password when you register.
• Profile Data: Username, social media account identifiers (Instagram ID, Facebook ID, YouTube ID).
• Payment Information: Billing details processed securely through Stripe. We do not store full card numbers.
• Communications: Messages you send us via support or feedback forms.

Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, and interactions within the platform.
• Device Data: IP address, browser type, operating system, and device identifiers.
• Cookies and Tracking: We use session cookies for authentication and analytics cookies to improve our service.
• Comment and Content Data: Public comments from connected social media platforms that are processed for toxicity analysis.

We use the information we collect for the following purposes:

• To create and manage your account and provide our moderation services.
• To analyse comment toxicity using AI and protect your community.
• To process payments and manage your subscription.
• To send you OTP verification codes and important service notifications via SMS.
• To improve, personalise, and expand our platform features.
• To detect, prevent, and address technical issues or fraudulent activity.
• To comply with legal obligations.

We do not sell, trade, or rent your personal information to third parties. We may share data with:

• Service Providers: Trusted partners such as Stripe (payments), Twilio (SMS), and Google (authentication) who assist in operating our platform under strict confidentiality.
• Meta Platforms: We access public comment data via Meta's Graph API as authorised by you when you connect your account. We do not share your personal data with Meta beyond what is required for API access.
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred with prior notice.

We retain your personal data for as long as your account is active or as needed to provide you services. Specifically:

• Account data is kept for the duration of your subscription and for 30 days after account deletion.
• Comment and moderation data is retained for up to 12 months for audit and appeals purposes.
• OTP records are deleted immediately after successful verification or upon expiry (10 minutes).
• Payment records are retained for 7 years for legal and tax compliance.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for marketing or profiling purposes.
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@report.it.

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission via HTTPS/TLS.
• Bcrypt password hashing — we never store plain-text passwords.
• JWT-based authentication with short-lived tokens.
• Regular security reviews and access controls.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

ReportIT is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will delete it immediately.

Our platform may contain links to third-party websites (e.g. Meta, Google, Stripe). We are not responsible for the privacy practices of these sites. We encourage you to read their respective privacy policies.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a prominent notice on our platform. The "Last Updated" date at the top of this page will reflect the most recent revision.

If you have any questions or concerns about this Privacy Policy, please contact us: