Privacy Policy

Last updated: January 2, 2025

1. Introduction

OrgYouNeed ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Information We Collect

2.1 Information You Provide

We collect information you directly provide to us, including:

  • Account Information: Name, email address, password
  • Organization Data: Organization name, description, member information
  • Event Information: Event details, RSVP data, attendance records
  • Communication Data: Messages, feedback, support requests

2.2 Automatically Collected Information

We automatically collect certain information, including:

  • Usage Data: Pages visited, features used, time spent on platform
  • Device Information: IP address, browser type, operating system
  • Log Data: Access times, error logs, performance metrics
  • Cookies: Session data, preferences, authentication tokens

3. How We Use Your Information

We use your information to:

  • Provide and maintain our services
  • Process registrations and manage accounts
  • Facilitate event management and RSVP tracking
  • Send service-related communications
  • Improve our platform and user experience
  • Prevent fraud and ensure security
  • Comply with legal obligations

4. Information Sharing and Disclosure

4.1 Within Organizations

Information is shared within your organization according to the permissions you set. Organization administrators can access member data and event information as needed for legitimate organizational purposes.

4.2 Service Providers

We may share information with trusted service providers who assist us in operating our platform, including:

  • Cloud hosting providers (Cloudflare, Supabase)
  • Email service providers (ForwardEmail)
  • Analytics and monitoring services
  • Payment processors (for paid features)

4.3 Legal Requirements

We may disclose information if required by law or to protect our rights, users, or the public.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication measures
  • Secure data centers and infrastructure

6. Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations. When you delete your account:

  • Personal data is deleted within 30 days
  • Some data may be retained for legal or operational reasons
  • Anonymized data may be retained for analytics

7. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal information
  • Rectification: Correct inaccurate or incomplete information
  • Erasure: Request deletion of your personal information
  • Portability: Receive your data in a machine-readable format
  • Restriction: Limit how we process your information
  • Objection: Object to certain types of processing

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can control cookie settings through your browser, but this may limit platform functionality.

8.1 Types of Cookies

  • Essential Cookies: Required for basic functionality
  • Performance Cookies: Help us improve the platform
  • Functional Cookies: Remember your preferences

9. International Data Transfers

Your information may be processed in countries other than your own. We ensure adequate protection through appropriate safeguards and legal mechanisms.

10. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover such collection, we will delete the information promptly.

11. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information.

12. European Data Protection

If you are in the European Union, you have rights under the General Data Protection Regulation (GDPR). We process your data based on legitimate interests, contract performance, or consent.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through our platform. Your continued use constitutes acceptance of the updated policy.

14. Contact Information

For privacy-related questions or to exercise your rights, contact us at:

Effective Date: January 2, 2025

Service Version: v2.31.1

Data Controller: OrgYouNeed
Legal Basis for Processing: Legitimate interests, contract performance, consent