This Privacy Policy explains how Intercardinal ("Intercardinal", "we", "us", or "our") collects, uses, shares, and protects information in connection with our websites, mobile applications, and related services (the "Service"). By using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

1. Information We Collect

• Account information: your name, email address, password (stored in hashed form), and, if you choose to verify one, your phone number. If you sign in with Apple or Google, we receive basic profile information from that provider (such as your name and email).
• Profile and organization details: information you add to your profile or to a business/organization you manage, such as a description, website, contact details, address, service areas, tags, and logo or banner images.
• Content you submit: events, announcements, promotions, listings, service requests, forum posts, comments, and images. Content you publish may be visible to other users and shared through associated channels (see Section 5).
• Photos and images: images you upload from your photo library or capture with your camera for your profile, organization, or posts.
• Location information: when you tap the location control to find communities near you, we use your device's precise location at that moment. We do not track your location in the background.
• Payment information: if you make a purchase (for example, a membership, placement, or promotion), payment is processed by our payment processor (Stripe) or the applicable app store. We receive limited transaction details (such as status and the last digits or card type) but we do not collect or store your full card number.
• Notifications: push notification tokens and your notification preferences, managed through OneSignal and our own systems.
• Communications and support: messages you send us or through the Service, and records of your requests.
• Usage and device data: information about how you use the Service, such as device type, operating system, app version, IP address, and log data, collected to operate, secure, and improve the Service.

2. Information From Other Sources

To power community listings, the Service also gathers information from third-party and public sources, such as event listings from organizers' and venues' public websites and publicly available business details. This may include the names and contact details that organizers and businesses have themselves made public. We display this information as a convenience and do not control it (see our Disclaimer). If you are a business and would like your public listing updated or removed, contact us.

3. How We Use Your Information

• To provide, maintain, secure, and improve the Service and its features.
• To create and manage your account and any organization you manage.
• To publish and display content you submit, and to power discovery features such as nearby communities, favourites, and directories.
• To process transactions and manage subscriptions and purchases.
• To send notifications and communications you have chosen or that are necessary to operate the Service (account, security, and transactional messages).
• To respond to your inquiries and provide support.
• To detect, prevent, and address fraud, abuse, security issues, and violations of our Terms.
• To comply with legal obligations and enforce our agreements.

4. Legal Bases

Where applicable law requires a legal basis, we rely on: performance of our contract with you (to provide the Service); your consent (for example, for optional marketing or precise location, which you may withdraw at any time); our legitimate interests (such as securing and improving the Service); and compliance with legal obligations.

5. How We Share Information

We do not sell your personal information. We share information only as described here:

• With other users and the public: content you publish (posts, listings, organization profiles, forum activity, and associated details such as your display name) is visible to others and may be shared through email, SMS, push notifications, and Intercardinal social channels.
• With service providers who process data on our behalf, under confidentiality obligations, including: cloud hosting; database (MongoDB Atlas); payment processing (Stripe); push notifications (OneSignal); image and file storage (Cloudflare Images and Cloudflare R2); email delivery (Amazon SES); SMS delivery (Amazon SNS / Pinpoint); sign-in providers (Apple, Google); and map services.
• For legal and safety reasons: when we believe disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of Intercardinal, our users, or the public.
• In a business transfer: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
• With your consent or at your direction.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, and afterward as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or de-identify your personal data within a reasonable period, except where retention is required or permitted by law. Note that content you published may have been shared or cached elsewhere and may persist outside our control.

7. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

• Access, correction, and deletion: you can review and update much of your information in the app, and you can permanently delete your account and associated personal data from Settings within the app, or by contacting us.
• Content removal: you can remove content you posted, subject to our Terms.
• Marketing and notifications: you can opt out of non-essential marketing and adjust notification preferences at any time.
• Location: you control location access through your device settings.
• Other rights: depending on your jurisdiction, you may have additional rights (such as data portability or the right to object). Contact us to exercise them; we will respond as required by applicable law.

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

10. International Data Transfers

We are based in Canada, and we and our service providers may process and store information in Canada, the United States, and other countries. These countries may have data-protection laws different from those in your location. Where required, we take steps to ensure your information receives an adequate level of protection.

11. Cookies and Similar Technologies

Our websites may use cookies and similar technologies to keep you signed in, remember preferences, and understand usage. You can manage cookies through your browser settings; disabling them may affect some features.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last Updated" date and, if the changes are significant, provide additional notice (for example, by email or an in-app notice).

13. Contact

Questions or requests regarding this Privacy Policy or your information? Contact us at support@intercardinal.app.