GDPR & Data Protection

Together.md is committed to protecting personal data and respecting the privacy rights of individuals.

This page explains how we comply with the General Data Protection Regulation (GDPR) and how users can exercise their data protection rights.

This page should be read together with:

• /legal/privacy
• /legal/cookies
• /legal/terms

The General Data Protection Regulation (GDPR) is a European Union regulation designed to protect personal data and privacy rights.

GDPR provides individuals with greater transparency and control over how their personal information is collected, used, stored, and shared.

Together.md aims to follow GDPR principles regardless of where users are located.

Together.md follows the following principles:

Depending on your use of the Platform, we may process:

We process personal data under one or more of the following legal bases:

Users located in the European Economic Area (EEA) have the following rights.

To submit a GDPR request, contact together.moldova@gmail.com.

Please include:

• Your name
• Account email
• Type of request
• Relevant details

We may request identity verification before processing certain requests.

Together.md aims to respond to GDPR requests within:

30 calendar days

Complex requests may require additional time as permitted by law.

If additional time is required, we will inform you.

If you are signed in, you can download a copy of your data as JSON straight away from your export settings. The download is built at the moment you ask for it, contains only data connected to your own account, and is not stored as an archive anywhere afterwards.

The file reports its own coverage. Each category is marked available, partial, or unavailable, so a category we could not read is never presented to you as one that holds nothing. A category may be marked partial where ownership of older records was not recorded and cannot now be attributed.

Two categories are deliberately withheld from the instant download:

• Event registrations, because they are matched only by email address and we have not independently verified that confirmed-email enforcement is in place. Releasing them automatically could disclose another person's registration.
• Collaboration reviews written about you by other people, together with the identity of their authors, because they are third-party material.

You can request either of those, or anything else marked unavailable, through the manual privacy channel described in section 7. A person prepares it by hand.

The instant download is offered in JSON only. There is currently no CSV export, no ZIP archive, and no automated email delivery.

This describes what the export produces today. It is not a representation that it contains every record Together.md may hold about you.

You can start a deletion request from your account deletion settings. The workflow is:

1. Your authenticated request is recorded.
2. Your profile visibility changes to private immediately.
3. A seven-day cooling-off period begins, during which you can cancel the request.
4. After that period, the Founder or authorized privacy operator verifies the request and manually carries out the appropriate actions.
5. Together.md responds within 30 calendar days through the contact channel you verified when signing in.

There is no automated deletion or anonymization engine behind this. Every request is reviewed and executed by a person.

Submitting a request does not guarantee that every record will be erased. What actually happens to a given record — deletion, unlinking, restriction, retention, or anonymization — depends on that record and on the requirements that apply to it, including shared collaboration records involving other people and records we are required to keep.

Information may be retained where required by:

• Legal obligations
• Security requirements
• Fraud prevention
• Legitimate business records

A request is recorded as completed only after the actions have actually been carried out and evidence of that execution has been recorded. We do not promise an automated email at any stage.

Together.md does not use AI or automated decision-making to produce legal effects concerning you, or effects that are similarly significant.

No AI system on Together.md currently performs:

• Lunch matching or lunch recommendations
• Builder discovery or builder matching
• Collaboration qualification or collaboration recommendations
• Opportunity recommendations

AI assistance is currently limited to one thing: helping authorized event organizers and administrators draft event copy. The information sent to that assistant may include an event title, a draft event description, an agenda or programme outline, and audience or context notes provided by the organizer.

A person reads every suggestion and decides whether to use it, edit it, or discard it. Nothing an AI system drafts is published automatically.

This describes how the Platform works today. If AI is used for anything further, this section and section 6 of our Privacy Policy will be updated before that happens.

Personal data may be processed outside the European Economic Area.

Where international transfers occur, Together.md will implement appropriate safeguards consistent with GDPR requirements.

Together.md implements security measures including:

• Encrypted communications
• Authentication controls
• Infrastructure monitoring
• Access controls
• Security reviews

No system can guarantee absolute security.

However, we continuously work to improve protection mechanisms.

Personal data is retained only for as long as necessary to:

• Provide services
• Improve platform functionality
• Resolve disputes
• Meet legal obligations

Retention periods vary depending on the nature of the information.

What is available to you today:

• On-demand JSON download of your own data, for signed-in users, from your export settings
• Account deletion requests, which enter the manual workflow described in section 10
• Consent and privacy settings, where those settings are implemented

Manual contact remains the route for categories withheld from the instant download, for anything marked unavailable in an export, and for data that is not connected to an account.

For GDPR and privacy-related requests:

Related legal pages: Terms of Use, Privacy Policy, and Cookie Policy.

By using Together.md, you acknowledge that you have read and understood this GDPR & Data Protection Notice.