Privacy Policy

1. Information We Collect

When you use Glysmork, we collect the following types of information:

• Account Information: Email address, password (hashed), username, and authentication tokens from third-party providers (Google, Facebook).
• Profile Data: Answers to the onboarding questionnaire, bio, interests, expertise areas, and location data (country/state/geohash).
• Usage Data: Timestamps of your logins, session durations, search queries, and match history.
• Communications: Chat transcripts, audio/video call metadata (duration, connection quality, but NOT the audio/video content itself), and support requests.
• Device Information: Device fingerprints, IP addresses, and Firebase Cloud Messaging tokens for push notifications.

2. How We Use Your Information

Your data is primarily used to facilitate the core matching functionality of Glysmork:

• To create your AI psychological profile, calculate connection compatibility, and generate mathematical vector embeddings of your interests.
• To dynamically adjust your Trust Score based on platform engagement, age of account, and negative feedback (Blocks/Reports).
• To connect you with other users via text chat and WebRTC-based audio/video calls.
• To enforce our Terms of Service, prevent fraud, and maintain a safe community through moderation.

3. Data Sharing and Third-Party Services

Glysmork does not sell your personal data. However, we integrate with third-party services to provide our core features:

• AI Inference (Groq/Gemini): Your onboarding answers and search intents may be sent to third-party Language Models for summarization and matching. This data is anonymized where possible.
• Payment Processing (Razorpay): Subscription billing is handled securely by Razorpay. Glysmork does not store your credit card information.
• Law Enforcement: We may disclose information if legally required to do so by a valid subpoena or court order.

4. Data Security & Limitations

• We implement industry-standard security measures, including SSL encryption, secure WebSocket connections, API rate limiting, and protection against common vulnerabilities.
• No Absolute Security: While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security against all malicious attacks, unauthorized access, or hardware failures.
• In the event of a severe data breach or server compromise, Glysmork shall not be held legally or financially liable for any resulting damages, loss of privacy, or exposure of conversational data.

5. Data Retention and Deletion

You have the right to control your data:

• You can request account deletion at any time. Upon deletion, your profile, embeddings, and credentials are permanently removed from our active database.
• Chat transcripts involving you may be retained if the other participant retains them, or if the conversation is subject to an active Trust & Safety investigation (e.g., a pending Report).

6. Your Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the right to access, correct, or request the deletion of your personal data. Contact us at privacy@glysmork.com to exercise these rights.

7. Changes to this Policy

We may periodically update this Privacy Policy to reflect changes in our practices. We will notify users of significant changes via email or an in-app notification.