Privacy Policy

Last updated: 01-12-2025

1. Introduction

This Privacy Policy explains how Echora ("we", "us", "our") collects, uses, stores, and protects personal data when you use Echora (the "Service"). We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR).

2. Data Controller

The data controller for personal data collected by the Service is: Echora, Aachen 52064, Germany, Germany. Contact: support@echora.me.

3. Categories of Personal Data Collected

We collect the following categories of personal data:

• Account data: email address and login credentials.
• Profile data: emotional layers, preferences, interests (user-provided).
• Messages: content of one-on-one messages and topic room participation.
• Technical data: device information, IP address, browser, and usage logs.
• Communications: support requests and correspondence.

4. Lawful Bases for Processing

We process personal data under the following lawful bases:

• Consent (where applicable).
• Contractual necessity to provide the Service.
• Legitimate interests, for safety, fraud prevention, and service improvement.
• Legal obligation, when required by law.

5. How We Use Personal Data

We use personal data to:

• Provide and operate the Service, including messaging, topic rooms, and account management.
• Deliver transactional and marketing communications (with consent where required).
• Conduct analytics and improve the Service.
• Maintain security and prevent abuse.
• Comply with legal obligations and respond to lawful requests.

6. Sharing and Disclosure

We do not sell personal data. We may share data with:

• Service providers (hosting, email, analytics) under data processing agreements.
• Law enforcement or regulators where required by law.
• Third parties in connection with a corporate transaction (sale, merger) subject to appropriate protections.

7. International Transfers

If personal data is transferred outside the EU, we ensure adequate safeguards such as Standard Contractual Clauses or reliance on adequacy decisions where available.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described:

• Account data: retained until account deletion, except as required by law.
• Messages: retained until deleted by the user or account removal.
• Logs and analytics: retained for operational needs (typically 30–180 days).

9. Data Subject Rights (EU GDPR)

Under the GDPR you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Request erasure ("right to be forgotten").
• Restrict or object to processing.
• Request data portability.
• Withdraw consent where processing is based on consent.

To exercise any right, contact us at support@echora.me. We will handle requests in accordance with applicable law.

10. Security Measures

We use reasonable technical and organizational measures to protect personal data, including encryption in transit (HTTPS), access controls, and regular security reviews. No system is completely secure; we cannot guarantee absolute security.

11. Cookies and Tracking

We use cookies and similar technologies for essential functionality and analytics. You can control cookies through your browser settings. For more detail, contact us.

12. Children

We do not knowingly collect personal data from children under 16 without parental consent. If we become aware that we have collected data from a child without consent, we will take steps to delete it.

13. Changes to this Policy

We may update this Privacy Policy occasionally. Substantial changes will be notified by email or in-app notice where feasible.

14. Complaints

If you are located in the EU and wish to lodge a complaint about our data processing, you may contact your local data protection authority. You may also contact us at support@echora.me.

15. Contact

Data controller: Echora
Address: Aachen 52064, Germany
Country: Germany
Email: support@echora.me