nikobojs / manuscrape_electron

ManuScrape desktop app for Windows 11
5 stars 2 forks source link

Suggestion: Overview of invites sent and ability to cancel invite #45

Open Pedrotheplant opened 9 months ago

nikobojs commented 9 months ago

This is actually a feature for GDPR compliance, and to protect the server hosters.

In my understanding, you cannot enter people's emails in third party systems without obtaining legally valid consent. And these consents has to be stored in a safe/legal way.

To avoid this complexity for project managers, for now, the invitations are not shown, and the invited emails are not even obtainable from the database (so even the people running the server, cannot see who's invited). They are "hashed" (one way encryption). So right now, you don't need consent, as far as I know.

If we show the emails, third party hosters (like Code Collective), will need to update their DPA with all the project managers on their manuscrape server. And if a project collaborator gets an invitation without providing consent, they could take the third party to court.

Not totally sure it works like this, but that is my impression. Please correct me if I'm wrong!

Just reflecting here, not sure how to fix this issue yet. Any GDPR folks out there? :smiley_cat: