Privacy Policy
What's collected: your email address (for login and account recovery), and whatever you choose to enter while using an organization's workflows -- board posts and comments, event RSVPs and attendance, catalog listings and claims, journal entries, and course submissions. If an organization enables a background-check status field for its members, that status is visible to that org's admins only.
What it's used for: running the app you signed up to use. Your content is shown to the organizations you're a member of, according to each org's own public/private setting -- nothing more. There's no ad targeting, and your data is never sold.
Where it lives: a Postgres database (via Supabase) with row-level security enforced at the database layer -- an organization's data is only readable by that organization's own members, or by no one, if the org is private. The app itself is hosted on Vercel. Those are the only two infrastructure providers involved.
Your control over it: you can leave any organization yourself, at any time, from that org's settings. You can request an export of an organization's data if you're that org's admin. You can delete your own account, which deactivates your memberships and removes your personal information from your profile -- see your account settings for both.
Not intended for children under 13. If you believe a child's information has been collected, contact whoever administers the relevant organization so it can be removed.
This is a first pass, written to be honest rather than exhaustive -- it will get more detailed as the service does. Questions can be directed to whoever administers your organization, or through this project's public repository.
Last updated: July 2026.