1. Security principles

Insociaa is designed around least-privilege access, protection by design, and limiting impact when an issue occurs. No digital system is risk-free, so controls are reviewed and improved as the product evolves.

2. Product controls

Controls are applied in proportion to the feature and its risk.

• status-privacy controls and settings for who may start a conversation
• conversation and attachment access checks based on session and membership
• upload limits, file-type validation, and private attachment storage
• logging of moderation actions and significant activity without broadly exposing private content

3. Your role

Keep your account and devices secure.

• Use a unique password and never share it.
• Enable available account verification methods.
• Do not send passwords, one-time codes, tokens, or other secrets through regular messages.
• choose a status audience carefully before publishing
• respect other people's privacy, copyright, and safety
• not send spam, fraud, hate speech, harassment, or unlawful content

4. Sensitive access and changes

Sensitive changes are checked server-side. Relevant activity may be recorded to support security, abuse prevention, and incident investigation.

5. Incident reporting

If you suspect unauthorized access, change your password, sign out of unrecognized sessions, and contact us. Do not include passwords, one-time codes, or unnecessary private content in a report.

6. Important limit

User-generated content remains the sender's responsibility. Insociaa is not an emergency channel and is not a substitute for professional help or competent authorities.