Privacy Policy

1. What We Collect

• Account data: email, password (handled by our auth provider), basic profile fields (e.g., first and last name, ZIP code), and role/verification status.
• Content you provide: requests, offers, messages, and related metadata.
• Verification data: images/documents you submit for identity/address verification (e.g., driver’s license), plus review notes/status.
• Technical data: basic logs for security and operations (IP address, user agent, timestamps, error logs). We do not use analytics tools at this time.

2. How We Use Data

• Provide and secure the Service (authentication, authorization, fraud/abuse prevention).
• Enable core features (request board, offer board, messaging, verification, admin review).
• Operate support and safety processes (moderation, audit logs, rate-limiting).
• Communicate with you about the Service (e.g., verification status or important changes).

3. What We Don’t Do

• We do not sell your personal data.
• We do not share your personal data with third parties for their own marketing.
• We do not use analytics tools at this time.

4. When We Share Data

• Service providers used to operate the Service (e.g., Supabase for authentication, database, and storage). These providers process data under our instructions and contracts.
• Legal, safety, and compliance (e.g., responding to valid legal requests or preventing harm).
• Fiscal sponsorship context: If you opt to make or document a tax-deductible donation through our fiscal sponsor, Creative Visions Foundation, we may share necessary information to facilitate required acknowledgments and tax records.

5. Fiscal Sponsor and Tax-Deductible Donations

Tax-deductible donations, if available, are made under a fiscal sponsorship arrangement with Creative Visions Foundation, a registered 501(c)(3) nonprofit. Creative Visions—not Altadena Exchange—provides the tax-exempt status. Information shared for donation acknowledgment is handled under that organization’s policies in addition to this Policy.

6. Data Retention

• Account and content data: retained while your account is active and as needed to operate the Service.
• Verification data: retained for as long as necessary to maintain verification status, prevent abuse, and meet legal or safety obligations.
• Logs and audit records: retained for a limited time for security, troubleshooting, and compliance.
• We may anonymize or aggregate data for safety and product improvement; anonymized data is not personal data.

7. Security

We use industry-standard safeguards, including encrypted transport (HTTPS), role-based access, and Row Level Security at the database layer. No security method is perfect; protect your account credentials.

8. Your Choices

Access, update, or delete your profile information in the app where available, or contact us. You may delete your account; we may retain certain data as required by law, for safety, or to enforce our Terms.

9. Children’s Privacy

The Service is not directed to children under 13. If you believe a child provided personal data, contact us to remove it.

10. International Use

The Service is operated in the United States. If you use it from other regions, you consent to processing in the U.S., where laws may differ from yours.

11. Changes to This Policy

We may update this Policy at any time. If changes are material, we will provide reasonable notice (e.g., in-app notice or email, where available). Continued use after changes means you accept the updated Policy.

12. Contact

Privacy questions or requests: privacy@altadena.exchange (or use the in-app contact form).