5 ms·
You are not required :) *Data is never kept online -》 this is written next to the E2EE chat, not user accounts. E2EE msg data is not kept online I don't emplo
by collaborative 5y ago
You are not required :)
*Data is never kept online
-》 this is written next to the E2EE chat, not user accounts. E2EE msg data is not kept online
I don't employ any 3rd parties, but included that just in case. It is a word-for-word copy of a sentence in ProtonMail's privacy policy
The email address can be masked and the name and surname can be made up or left blank
- lmkg 5y agoCan you guarantee that you are handling data the way that ProtonMail does? Do you know how ProtonMail handles its data? A privacy policy is not just some mumbo-jumbo where you just need to get the words right. The words need to be in correspondence with your actions. Copying someone else's words is not a recipe for success because those words are in accordance with their actions. Even if the privacy policy is compliant for them, the same policy can be non-compliant for you.
- totalZero 5y agoIf you don't employ third parties then presumably you could have chosen not to copy that part of protonmail's privacy policy.
- collaborative 5y agoI am not a lawyer and don't know how wide "3rd parties" can refer to. Is my cloud provider a 3rd party? If there is a lawyer here who can advise that it is safe to do I will remove it
- dsr_ 5y agoDon't take legal advice from Internet lawyers; don't take business advice from your competitors. Hire somebody knowledgeable to review your privacy policy and terms of service.
- dyeje 5y agoHave you ever hired a lawyer to review a privacy policy / ToS? It costs thousands of dollars.
- edoceo 5y agoSo? Lots of things cost money. It almost sounds like you're advocating for a cheap short-cut. It's bad in code, it's bad in legal dealings
- dyeje 5y agoYes, I am 100% advocating for a cheap shortcut when it makes sense. The vast majority of projects will not find success and do not warrant thousands of dollars of investment when a boilerplate ToS / PP will do. OP did the due diligence of at least reading through and trying to understand theirs. I do not think it is appropriate to grill them about it, hence my comment.
- dsr_ 5y agoDo a cost/benefit analysis. Choices: 1. Write good docs and get them reviewed. 2. Write good docs (as far as you know) and skip review. 3. Copy docs off the net from someone else, get them reviewed. 4. Copy docs off the net, no review. 5. Write "Coming Soon!" for each doc and don't do anything about it until you have customers to justify it; then pick another option from 1-4.
- dboreham 5y agoProbably shouldn't be running a public service with a privacy policy and no lawyer.
- LadyCailin 5y agoWhat horribly impractical advice. I mean, in theory, sure, but retaining a lawyer because you run a small public service? Nah.
- deelowe 5y agoI think the point being made is that the company shouldn't be making up legally binding agreements (the privacy policy) without consultation.
- OJFord 5y agoAnd if too small/cheap to have consulted a solicitor, are you really saying none is better than 'made up'? Worst case is what, you miss something you should've included and it bites you? Something you thought covered you turned out not to be binding (because it's otherwise illegal or too narrowly defined or whatever)? Seems to me many small side projects or whatever would do well (and zero harm) to 'make up' user agreements sooner.
- deelowe 5y agoIf you are asking for my opinion, I'd suggest not going anywhere near PII without legal consultation.
- collaborative 5y agoHere in the UK you can create and run a company with no lawyers and no accountants. I am originally from Spain where doing anything requires lawyers, notaries, and loads of cash. That results in a petrified business class. I was lucky to have business oriented parents that taught me concepts related to taxation, employment law etc. But I appreciate the LibDem's move years ago to cut paperwork and am happy for it