Profiles
Your profile starts members-only. Optional fields start private. The narrowest of your profile audience and a field audience determines visibility. Search only uses fields you are authorized to read. Public indexing stays off.
Messages & blocking
Messages are server-readable; we do not provide end-to-end encryption. Staff investigation requires MFA, a recorded purpose, and a specific report. Blocking closes contact and keeps participant history for evidence. Signed-out users can still view deliberately public fields.
Export & deletion
Requests are manual during the pilot. Export and deletion fulfillment is not yet staffed or automated. Do not launch with real members until an operator and secure export delivery are configured. Intended response target: 30 days. Export includes your profile, connections, authored content and participant message history, excluding confidential third-party reports.
Retention decisions
Proposed pilot policy: active account content until deletion; abuse report evidence up to 180 days after case closure; operational audit records 365 days; encrypted backups age out within 30 days. Legal holds may extend evidence retention. These schedules require operator jobs and backup configuration and are not currently automatic.
Infrastructure
Storage uploads and PDFs are disabled. Private responses use no-store. Hosting, database encryption, backup aging, email delivery, edge abuse protection, and external append-only audit retention must be configured and verified before launch.