Privacy Policy

Who controls the data

BorrowTalk is the public name of the service operator and acts as the personal information controller for personal data processed through BorrowTalk. Privacy questions and requests can be sent to the public contact email shown on this page.

Data BorrowTalk may process

• Account and authentication data, including the email used for sign-in, session records, and authentication events.
• Profile data, including a public pseudonymous handle and internal account, trust, and moderation states.
• Content you provide, including Discussions, Experiences, Comments, reports, correction requests, and messages sent to BorrowTalk.
• Images you choose to add after the privacy editor creates the saved derivative, together with processing, publication, moderation, and cleanup records.
• Interaction records such as Helpful actions, content ownership, edit or withdrawal events, and moderation audit records.
• Technical and security information such as timestamps, requested routes, browser or device signals, and network or IP-related security data where generated by BorrowTalk or its service providers.

What is public and what stays restricted

Published community content, the selected public author mode, a pseudonymous handle where used, and permitted processed images may be visible to other visitors.

Authentication email, internal user identifiers, ownership fields, Helpful voter identity, reporter or resolver identity, internal account states, storage paths, and moderation audit records are not intended for public display.

Selecting Anonymous member changes the public attribution only. BorrowTalk still keeps the internal account link needed for ownership, safety, abuse prevention, and lawful operation.

Why BorrowTalk processes data

• Provide authentication, account continuity, drafts, publication, comments, Helpful actions, reports, and moderation.
• Keep Philippines and Indonesia data and URLs isolated as designed.
• Protect users, investigate abuse or privacy complaints, enforce the Terms and Community Guidelines, and maintain auditability.
• Operate, secure, debug, measure reliability, and improve the service.
• Respond to requests and comply with applicable legal obligations.

Legal grounds

Depending on the activity and applicable law, processing may be based on your request to use the service, your consent, the steps needed to provide requested features, BorrowTalk’s legitimate need to operate and secure the community, or a legal obligation.

Where processing relies on consent, you may withdraw consent for future processing. Withdrawal does not make earlier lawful processing invalid and may limit features that require the relevant data.

Service providers and cross-border processing

BorrowTalk uses service providers for hosting, application delivery, authentication, database, private file storage, email delivery, security, and operational logging. Current core infrastructure includes Vercel and Supabase.

These providers may process data in locations outside the country where a user is located. BorrowTalk remains responsible for selecting appropriate providers and applying contractual, technical, and organizational safeguards appropriate to the service.

Retention and deletion

• Account and security records are kept while needed to provide and protect the service and for a reasonable period afterward when required for security, dispute, or legal purposes.
• Published community content remains until it is withdrawn, deleted where supported, moderated, or no longer needed. A withdrawn Discussion or Comment may remain as a limited tombstone when needed to preserve replies and thread integrity.
• Temporary image staging objects are intended to be removed after successful finalization or cleanup. Final media objects are removed through the applicable content, owner-delete, or privacy-removal lifecycle.
• Reports and moderation audit records may be retained for safety, accountability, abuse prevention, and legal compliance.

Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection, or information about the processing of your personal data. You may also withdraw consent where consent is the applicable basis and may contact the relevant privacy authority.

BorrowTalk may need to verify a request without asking for your password, sign-in link, one-time code, or unnecessary identity documents.

Security and sensitive screenshots

BorrowTalk uses access controls, private storage, server-side authorization, processing safeguards, and moderation controls. No internet service can guarantee absolute security.

Before confirming an image, use the privacy editor to cover names, phone and account numbers, IDs, addresses, emails, QR codes, barcodes, faces, and other sensitive details. Do not post another person’s personal or financial information without a lawful reason and permission.

Age and policy changes

BorrowTalk is intended for adults aged 18 or older. The service is not directed to children.

BorrowTalk may update this policy when the service, providers, or legal requirements change. The current last-updated date appears on this page.

Anonymous visit measurement

Effective September 7, 2026, BorrowTalk may measure signed-out public visits using a random, tab-scoped session identifier. A session lasts for up to 30 minutes of activity, stays within one BorrowTalk market and one UTC+8 reporting day, and is not linked to a BorrowTalk account.

The measurement may include the public page path and time, a safe entry-source category, referrer host, coarse device/browser/operating-system family, and measured visible foreground time. Vercel edge country and a masked network prefix may also be stored. Until BorrowTalk has verified the Production proxy chain, those network fields are labelled proxy-unverified and are not represented as confirmed borrower location.

• BorrowTalk does not store a raw IP address in Traffic V1.
• Traffic V1 does not store account email, form content, search queries, full referrer URLs, full user-agent strings, fingerprints, or token-bearing URLs.
• Signed-in visitors and known internal QA traffic are excluded from candidate public-visitor totals.
• Masked network prefixes expire after 23 hours 45 minutes and are scheduled for physical cleanup every 15 minutes.
• Detailed visit and page records are retained for up to 14 days; non-identifying Traffic V1 aggregates are retained for up to 90 days.

You can disable this anonymous visit measurement in this browser below. Disabling it does not affect access to BorrowTalk or community features.