Privacy Policy
Last updated: January 2, 2025
1. Introduction
OrgYouNeed ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
2. Information We Collect
2.1 Information You Provide
We collect information you directly provide to us, including:
- Account Information: Name, email address, password
- Organization Data: Organization name, description, member information
- Event Information: Event details, RSVP data, attendance records
- Communication Data: Messages, feedback, support requests
2.2 Automatically Collected Information
We automatically collect certain information, including:
- Usage Data: Pages visited, features used, time spent on platform
- Device Information: IP address, browser type, operating system
- Log Data: Access times, error logs, performance metrics
- Cookies: Session data, preferences, authentication tokens
3. How We Use Your Information
We use your information to:
- Provide and maintain our services
- Process registrations and manage accounts
- Facilitate event management and RSVP tracking
- Send service-related communications
- Improve our platform and user experience
- Prevent fraud and ensure security
- Comply with legal obligations
4. Information Sharing and Disclosure
4.1 Within Organizations
Information is shared within your organization according to the permissions you set. Organization administrators can access member data and event information as needed for legitimate organizational purposes.
4.2 Service Providers
We may share information with trusted service providers who assist us in operating our platform, including:
- Cloud hosting providers (Cloudflare, Supabase)
- Email service providers (ForwardEmail)
- Analytics and monitoring services
- Payment processors (for paid features)
4.3 Legal Requirements
We may disclose information if required by law or to protect our rights, users, or the public.
5. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Secure data centers and infrastructure
6. Data Retention
We retain your information for as long as necessary to provide services and comply with legal obligations. When you delete your account:
- Personal data is deleted within 30 days
- Some data may be retained for legal or operational reasons
- Anonymized data may be retained for analytics
7. Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal information
- Rectification: Correct inaccurate or incomplete information
- Erasure: Request deletion of your personal information
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your information
- Objection: Object to certain types of processing
8. Cookies and Tracking
We use cookies and similar technologies to enhance your experience. You can control cookie settings through your browser, but this may limit platform functionality.
8.1 Types of Cookies
- Essential Cookies: Required for basic functionality
- Performance Cookies: Help us improve the platform
- Functional Cookies: Remember your preferences
9. International Data Transfers
Your information may be processed in countries other than your own. We ensure adequate protection through appropriate safeguards and legal mechanisms.
10. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover such collection, we will delete the information promptly.
11. California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information.
12. European Data Protection
If you are in the European Union, you have rights under the General Data Protection Regulation (GDPR). We process your data based on legitimate interests, contract performance, or consent.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or through our platform. Your continued use constitutes acceptance of the updated policy.
14. Contact Information
For privacy-related questions or to exercise your rights, contact us at:
- Email: [email protected]
- Data Protection Officer: [email protected]
Effective Date: January 2, 2025
Service Version: v2.31.1
Data Controller: OrgYouNeed
Legal Basis for Processing: Legitimate interests, contract performance, consent