Privacy Policy

1. Our Commitment to Privacy

Integrate Innovations ("we," "us," or "our") built RSocial on the belief that your personal data belongs to you — not to advertisers, not to data brokers, and not to us. This Privacy Policy explains what information we collect through this website and the RSocial software framework, how we use it, and what data we never access in the first place.

We are based in the Netherlands and process data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch law.

A fundamental design choice: RSocial is a self-hosted software framework — you run it on hardware you own. When you self-host, your data stays on your device. We have no access to it, no copy of it, and no way to retrieve it. This policy covers what we collect through our website and related services; it does not cover data stored on your own RSocial instance, which you control entirely.

2. What This Policy Covers

This Privacy Policy applies to:

• This website (rsocial.cloud and its subpages) — the landing site you are currently visiting.
• The live demo server (demo.rsocial.cloud) — a temporary demonstration environment we operate.
• Communications — emails, contact forms, and other direct correspondence with us.

It does not apply to:

• Self-hosted RSocial instances — instances you install and run on your own hardware are under your control. We have no access to them and are not responsible for how you operate them.
• Future managed hosting services — when available, these will be covered by a separate privacy notice provided at the time of subscription.
• Third-party services — websites or services linked from our site are not covered by this policy.

3. What We Collect on This Website

We collect only the information you choose to provide:

• Contact form submissions: When you use the contact form on this site, we receive your name, email address, and message. This is sent to us via EmailJS, a third-party email service. We use this data solely to respond to your inquiry.
• Anonymous server logs: Our web server may record standard technical information such as the page requested, browser type, and IP address for operational and security purposes. These logs are retained temporarily and are not used for tracking or profiling.

What we do NOT collect on this website: We do not use tracking cookies, analytics scripts, advertising networks, session recorders, or any form of behavioural tracking. There are no third-party scripts beyond EmailJS for the contact form.

4. The Live Demo Server

The demo environment at demo.rsocial.cloud is a temporary, sandboxed instance for evaluation purposes. We may periodically reset or wipe this environment without notice. Any data you enter on the demo server should be considered temporary and non-confidential. We recommend you do not enter sensitive or personal information on the demo.

5. Self-Hosted Instances — Your Data, Your Control

The defining feature of RSocial is that you run it on your own hardware. When you self-host:

• All social data (posts, comments, likes, photos, videos, profiles) stays on your device.
• We have no ability to access, view, copy, or delete your data.
• You are the data controller for your instance. You determine your own privacy practices and are responsible for complying with applicable laws.
• The RSocial software includes built-in privacy protections by default: no telemetry, no phoning home, no analytics, no advertising code.

If you use an instance operated by someone else (a community instance), that operator is the data controller. We encourage you to review their privacy practices before joining.

6. How We Use Your Information

We use the information collected through this website only for these purposes:

• To respond to your inquiries and messages.
• To send you updates if you have explicitly requested them.
• To maintain and secure our website and demo server.
• To comply with legal obligations.

We will never sell, rent, or share your personal data with third parties for their own marketing purposes. We will never use your data for advertising or behavioural profiling.

7. Legal Basis for Processing (GDPR)

Under the GDPR, we process your data on the following legal bases:

• Consent (Article 6(1)(a)): When you submit a contact form, you consent to us processing your name, email, and message to respond to you.
• Legitimate interests (Article 6(1)(f)): Server logs are processed for security, fraud prevention, and service operation, which serve our legitimate interest in maintaining a safe and functional website.

8. Data Retention

Contact form submissions and correspondence are retained only as long as necessary to address your inquiry, after which they are deleted. Server logs are retained for a maximum of 30 days. If you have subscribed to updates, we retain your email until you unsubscribe.

For self-hosted instances, data retention is entirely under your control as the instance operator.

9. Your Rights

Under the GDPR, you have the following rights regarding personal data we hold about you:

• Right of access: Request a copy of the data we hold about you.
• Right to rectification: Correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): Request deletion of your data.
• Right to restrict processing: Limit how we process your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at bbvgacc@gmail.com. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Cookies & Local Storage

This website uses minimal local storage and no tracking cookies:

• Local storage: Used to remember your theme preference (light/dark mode) if you select one. This stays on your browser and is not sent to us.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. The RSocial software itself (when self-hosted) uses a session cookie for authentication — this is under your control on your own instance.

11. Third-Party Services

We use EmailJS to deliver contact form submissions to our email address. EmailJS processes your name, email, and message for the sole purpose of transmitting your message to us. We have selected EmailJS for its data protection commitments; you can review their privacy policy on their website.

We do not use any other third-party analytics, advertising, or tracking services. Links to third-party websites from this site (e.g., Patreon, PayPal, GitHub) are not covered by this Privacy Policy.

12. Data Breach Notification

In the event of a data breach affecting personal data we control, we will notify affected individuals and the relevant supervisory authority within 72 hours, as required by the GDPR.

Note that a breach of a self-hosted RSocial instance is a matter for the instance operator, not for us, as we do not hold that data.

13. Children's Privacy

Our website and services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will delete it immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Material changes will be communicated through this website or via email if we have your contact information. Your continued use of this website after changes take effect constitutes your acceptance of the updated policy.

15. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Integrate Innovations
Attn: Ben van Gorp
The Netherlands
bbvgacc@gmail.com