Privacy Policy
Last updated: January 2024
Introduction
At Sarahah, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our anonymous messaging platform.
By using Sarahah, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Username
- Profile information (optional)
- Password (encrypted)
Usage Information
We automatically collect certain information about how you use our service:
- IP address and device information
- Browser type and version
- Pages visited and time spent
- Interaction patterns
Message Data
While messages are anonymous to recipients, we store message content temporarily for moderation purposes and to ensure platform safety. Message metadata (timestamps, recipient) is retained for service functionality.
How We Use Your Information
We use the collected information for the following purposes:
- Providing and maintaining our service
- User authentication and account management
- Content moderation and safety enforcement
- Improving our service and user experience
- Preventing fraud and abuse
- Complying with legal obligations
- Sending important service notifications
Anonymity and Privacy Protection
Our Commitment to Anonymity
Messages sent through Sarahah are anonymous to recipients. We do not reveal the identity of message senders to recipients under normal circumstances.
However, we may need to identify users in cases of:
- Legal requirements or court orders
- Serious safety threats or illegal activity
- Terms of service violations
Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- With your explicit consent
- To comply with legal obligations
- To protect our rights and safety
- With trusted service providers (under strict confidentiality agreements)
- In case of business transfer or merger
Data Security
We implement industry-standard security measures to protect your information:
Encryption
All data is encrypted in transit and at rest
Access Controls
Strict access controls and authentication
Monitoring
Continuous security monitoring and threat detection
Regular Updates
Regular security updates and patches
Data Retention
We retain your information for different periods depending on the type of data:
- Account data: Until you delete your account
- Message content: 30 days for moderation, then permanently deleted
- Usage logs: 90 days for security and analytics
- Legal holds: As required by law or legal proceedings
Your Privacy Rights
You have the following rights regarding your personal information:
Access
Request access to your personal data
Correction
Update or correct your information
Deletion
Request deletion of your account and data
Portability
Export your data in a portable format
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact our support team through the platform or visit our FAQ section.