Privacy Policy

1. Introduction

merg.ro ("we", "us", or "our") operates the content moderation platform accessible to authorized staff members. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our platform.

2. Information We Collect

We collect the following categories of personal information from platform staff:

• Account credentials: Work email address, username, and hashed password (Argon2).
• Session data: Authentication tokens, session identifiers, and login timestamps.
• Moderation activity: Video review decisions, timestamps, and audit trails for accountability.
• Technical data: IP addresses, browser type, and device information collected through server logs.

3. How We Use Your Information

Your information is used exclusively to:

• Authenticate and authorize access to the moderation platform.
• Record moderation decisions for audit and compliance purposes.
• Monitor platform security and detect unauthorized access attempts.
• Generate aggregated analytics about moderation activity (no personally identifiable data in reports).

4. Data Retention

Account data is retained for the duration of your employment or contract with the organization. Audit logs of moderation decisions are retained for a minimum of 12 months after the decision date to meet regulatory and compliance requirements. Session data expires automatically based on token lifetimes (access tokens: 10 minutes, refresh tokens: 7 days).

5. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), secure password hashing (Argon2), OAuth 2.0 with PKCE for authentication, and role-based access controls. Access to personal data is restricted to authorized personnel on a need-to-know basis.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or request deletion of your personal data. For data-related requests, contact your platform administrator or the data protection officer at the email address provided during onboarding.

7. Contact

For questions about this Privacy Policy or our data practices, please contact your organization's data protection officer or platform administrator.