Data Processing
A plain record of what Medalock processes, why, where, and for how long.
Placeholder — pending legal review
This page sets out the structure and intent of the final document. It is not yet a binding legal text. Replace the sections below with counsel-approved wording before launch.
What this page will document
- Each category of data processed, the purpose, and the legal basis
- Retention period per category, and the deletion trigger
- Sub-processors: name, function, and processing location
- International transfer mechanisms, where applicable
- Security measures applied to each processing activity
- How to request a copy, correction or deletion of your data
Principles we are designing to
- Collect the minimum needed to assess and protect an account — nothing gathered “just in case”
- Keep it only as long as that purpose requires
- Restrict access to the people actively working a case, and log that access
- Never sell personal data, and never use it to build ad profiles
- Never require a social media password in order to deliver the service
Requests
Data requests: support@medalock.app.