Principle: the minimum necessary

We collect the bare minimum needed for the service to work. We do not track you across the web or build profiles for advertising.

What data we process

• Account: your DID, handle and the profile data you choose (name, bio, avatar, banner).
• Content: the posts, replies, reactions and lists you create — which are, by nature, public on the AT Protocol.
• iiinova's native direct messages (the "iiiChat"), stored on our server so you can read them.
• Preferences: theme and language, stored in cookies in your browser.
• Session: a signed session cookie, to keep you authenticated securely.

Cookies

We use only essential cookies: the session cookie (authentication) and preference cookies (theme, language). We do not use advertising or third-party tracking cookies.

View counts

We show how many times each post has been seen. So that the same person is not counted again and again, we compute a code from your account — or, if you are not signed in, from your IP address — using a secret key that changes every day and exists only in the server’s memory. On its own, the code does not identify you and cannot link one day to the next; it is stored alongside the post for at most a quarter of an hour and then deleted, leaving only the total. We do not use cookies for this. We do this on the basis of our legitimate interest in showing reliable numbers.

Public nature and federation

Whatever you post publicly is distributed across the AT Protocol network and may be accessed and indexed by other services. If you enable mirroring to Bluesky, that content is also published on that network. Keep this in mind before you post.

Local artificial intelligence

The AI features (Alter Ego, assisted moderation and the @elle/@ella entities) run locally on our own server, through a local model. Your content is not sent to external AI APIs to train third-party models.

Sharing with third parties

We do not sell your data. We only share information where legally required, or to the extent inherent to the open workings of the AT Protocol (your public content).

Retention and deletion

You can delete posts at any time; removal propagates across the network. You can also delete your account. Because the AT Protocol is portable, you can migrate your identity and repository to another provider.

Your rights (GDPR)

You have the right to access, rectify, erase, restrict and port your data, as well as to object to certain processing. Many of these rights you can exercise directly in the app; for the rest, contact us.

Security

We protect data with reasonable technical measures, including OAuth authentication and signed session cookies. No system is perfect, but we treat security as a priority.

Contact

For privacy questions or to exercise your rights, write to privacidade@iiinova.com. You also have the right to lodge a complaint with the supervisory authority (in Portugal, the CNPD).