Privacy notice

Who is responsible

Node Union Data Solutions (BVI) Ltd, OMC Chambers, Wickhams Cay 1, Road Town, Tortola, British Virgin Islands, operates this website and is responsible for its processing of personal information. Send privacy requests to legal@nodeunion.io. See ownership and company details.

Information we use

• Accounts: email address, chosen public name, password hash, email-confirmation status, and the version and time of accepting the website rules. Authenticator secrets are stored for administrator security.
• Review submissions: text, rating, dates and optional amounts, currency, withdrawal duration and private supporting image. We keep revisions and moderation decisions.
• Technical information: connection addresses and request details needed to deliver and secure the service. Rate-limit counters use keyed, pseudonymous identifiers. Security and operational logs may record errors and connection details.
• Correspondence: information you choose to send to our published contact addresses. Email is handled separately from this website.
• Browser storage: necessary cookies and the display preferences described in the cookie notice.

Why we use it

We use account and review information to provide the publishing service you request, confirm email ownership and manage your submissions. We use security information and moderation history to prevent abuse, protect accounts, investigate disputes and maintain the service. We also process correspondence to answer requests and meet applicable legal obligations.

Where applicable law requires a legal basis, these purposes rely on providing the requested service, legitimate interests in security and responsible moderation, or compliance with a legal obligation, as appropriate. If we introduce processing that requires consent, we will request it separately before it starts. A review-rules checkbox is not marketing or tracking consent.

What becomes public

An approved review can show your chosen name, review, rating, dates and any optional financial details you supplied. Public pages can be copied, indexed or shared by others. Do not include another person's personal information or your account numbers, wallet credentials or identity documents.

Your account email, password hash, authenticator secrets and uploaded evidence are not public. Evidence can be accessed by its author and an authenticated moderator with the required permission. Images are re-encoded and their embedded metadata is removed. An email-confirmed label is not proof of a verified purchase or investment.

Recipients and international processing

Authorised administrators and service providers supporting hosting, domain services, security, backups and email may process information for these purposes. Hosting and domain infrastructure currently use Njalla. Account email delivery is temporarily disabled pending the configuration of an email provider. We do not use advertising or analytics trackers on this site.

The operator is established in the British Virgin Islands. Website, support or provider operations can involve processing outside your country. The applicable transfer requirements and safeguards depend on the countries and providers involved; request details from our privacy contact. We do not claim an adequacy decision, EU representative or certification that has not been established.

Retention

• Account records are kept while the account is maintained. Reviews and their moderation history are kept while needed to publish the review, manage revisions and resolve disputes. Account and review deletion requests are assessed against applicable rights and any specific legal-retention obligation.
• Withdrawing a review removes it from public display; it does not automatically erase its private history or account. Request erasure separately if required.
• Expired sessions and security counters are removed by hourly maintenance. Counters expire within two hours of creation; removal follows at the next maintenance run. Queued service messages are removed after two days, and message bodies and recipients are cleared after successful delivery.
• Automatic server backup archives are removed after 30 days at the next maintenance run. A deleted record may persist in a restricted recovery copy until that copy expires. Separate exports must also be handled under the operator's retention and deletion process. Restoring a backup must not undo an accepted deletion request.
• Operational logs rotate by size. We restrict their access and keep them for security and troubleshooting rather than publishing a fixed calendar period that the logging system does not enforce.
• Correspondence is kept for the time needed to answer the request, document its resolution and meet any applicable legal obligation. We assess that need when handling a deletion request.

Your choices and rights

You can edit or withdraw your review in your account. For access, correction, deletion or other applicable data-protection rights, email our privacy contact with the address associated with your account and enough information to identify the request. We may ask for proportionate identity confirmation; do not send a password, one-time code or identity document in your initial message.

Depending on the law that applies, rights may also include objection, restriction, portability, withdrawal of consent and a complaint to the relevant supervisory authority. We will respond within the applicable statutory period and explain any lawful restriction. We do not make solely automated decisions that determine review publication: a moderator makes the publication decision.

Children and changes

Account submission is intended for adults aged 18 or over. Tell us if you believe a child has supplied personal information. We update this notice when the service or its processing changes and show the revision date above. New optional tracking will require a separate assessment and, where required, prior consent.