Privacy Policy

Türkmen biz is an invite-only network for the Türkmen diaspora, run by a very small team rather than a company with a privacy department. When this policy says "we", it means the people who operate the service and who can be reached at allamyrat@turkmen.biz.

This policy describes what actually happens to your data in the software, not what would be convenient to claim. Where the current behaviour is imperfect, it is written down here plainly rather than left out.

This is the most important section. Please read it before you fill in your profile.

New profiles start hidden. Nothing about you is shown to the public until you choose to make your profile visible, in Settings.

Once you do, it is visible to anyone on the internet. It does not require an account to view, it is listed in our sitemap, and it is submitted to search engines with structured data describing you. That includes your name, photo, headline, biography, location, languages, skills, work history, education, and any links you add.

In practice this means your profile can appear in search results for your name. You can hide it again at any time, and the setting is all-or-nothing: your profile is either reachable by the public or not shown at all.

• Your public profile also shows who invited you, by name. On an invite-only network this is a link between two real people, and it is visible to anyone.
• Your public email address, if you add one, is rendered as a clickable link and can be collected automatically by anyone scraping the page.
• Other members can see when you were last active, shown roughly as today, this week, or this month.

We would rather tell you this in advance than have you discover it later.

Files you upload, including your profile photo, cover image, portfolio items and any audio, are stored in public buckets. Anyone who has the link can open the file directly, without an account and without being a member.

The link is long and effectively unguessable, so files are not browsable or listed anywhere. But the protection is the secrecy of the URL, not a permission check. Two consequences follow, and both are true today:

• If a link leaks, whoever has it can open the file.
• If you later hide your profile, files you already uploaded remain reachable by their existing links.

Delete a file from your profile if you need it gone. We are working to put real access control behind uploads; until that ships, this section describes the honest position.

Only two things are required to have a profile: a display name and a profile address. Everything else is optional and is there because you chose to add it.

• Account: your email address, and if you sign in with Google, the name and profile picture Google gives us. There is no password; you sign in with a one-time link or with Google.
• Profile: whatever you fill in. Headline, biography, location, languages, skills, work history, education, certifications, portfolio, links, and your page layout.
• Contact details: a public email, a phone number, and social links, if you add them.
• Activity: your posts, articles, comments, reactions, club memberships, event responses, endorsements you give and receive, and your connections.
• Messages: direct messages you send to other members.
• Invitations: the email address and any note you write when you invite someone.
• Technical: a session so you stay signed in, and a timestamp of when you were last active.

We do not ask for and do not want data about your health, beliefs, politics, or anything similar. Please do not put it in your profile.

Direct messages are private between you and the other member. They are not published and are not used for advertising.

Two things about them you should know. When someone sends you a message, we email you a notification that includes the first part of the message text, so the message content passes through our email provider. And retracting a message currently hides it from view rather than erasing it, so the original text remains in our database.

Do not send anything through direct messages that would put you at risk if it were disclosed.

We use a small number of providers to run the service. We do not sell your data, and we do not share it for advertising.

• Supabase, for the database, sign-in and file storage.
• Netlify, which serves the website.
• Resend, which delivers our email, including sign-in links and notifications.
• Anthropic, only when you use the import or translation features. The text you paste is sent to be structured or translated. We keep a count of how many characters were processed, never the text itself.
• Google, only if you choose to sign in with Google.

If you paste a page from another site into the import feature, anything on it goes with it, including any other people's names it happens to contain. Review what you paste.

We set a cookie so you stay signed in. That is what it is for, and it is the only reason we set one.

There is no analytics, no advertising, no tracking pixels, no session recording, and nothing that follows you to other websites. That is also why you are not being asked to accept a cookie banner: there is nothing to consent to beyond keeping you signed in.

Your data is stored and processed in Germany, in the European Union, and is therefore covered by European data protection law. That is the strictest regime in the world for this, and it is the reason you have the rights set out below and can enforce them.

If you are in Türkmenistan, we want to say this plainly rather than bury it: your information is not held inside the country. It is in Germany. We think that is to your benefit, because European rules give you enforceable rights over your own data that few other places match. But it is a fact you should decide with rather than discover later, and by using the service you agree to your data being kept and processed there.

You can delete your account from Settings. Deletion is real, and it has consequences worth understanding before you use it.

• Your profile, and the personal details in it, are removed.
• Your forum posts and articles are deleted along with your account, and so are other members' comments and reactions on them.
• Endorsements you wrote for other people are removed, which means those members lose them from their profiles.
• Messages you sent are removed from the other person's inbox, though a short preview of a recent message can remain on the conversation itself.
• The invitation that brought you here belongs to the person who invited you. It keeps the email address they typed, and we do not remove it when you leave.

If you would rather keep your writing on the site, hide your profile instead of deleting it, or delete individual posts before closing your account.

Some records are kept because we have to: our administrators' log of moderation decisions, and a short-lived record of security events such as repeated sign-in attempts.

You can see, correct, export and delete your data. Most of it you can do yourself, right now, without asking us.

• See and correct: your profile editor holds nearly everything we have about you.
• Export: Settings has a data export that gives you your account in a machine-readable file.
• Delete: Settings has account deletion.
• Object or restrict: write to us and tell us what you object to, and we will deal with it rather than argue.

If you are in the European Union or the United Kingdom you also have the right to complain to your national data protection authority. We would much rather you wrote to us first, but that right is yours and we will not make it difficult.

This service is for adults and for older teenagers who can meaningfully agree to a public profile. It is not designed or intended for children.

We do not currently verify anyone's age. If you are a parent or guardian and believe a child has created a profile, write to us and we will remove it.

When we change something that matters, we will change the date at the top and, for anything significant, tell members directly rather than quietly editing the page.

This policy describes the service as it is on the effective date above. Several of the rough edges named here are things we intend to fix; when we do, this text will change to match, not the other way round.