Privacy Policy

1. Introduction

Step Up ("we," "our," or "us") operates the Step Up platform and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

We may collect the following types of information:

• Account information: When you create an account, we collect your email address, name, and any profile information you provide (such as city).
• Organization and opportunity data: If you create or manage organizations or volunteer opportunities, we collect organization names, descriptions, contact details (name, email, phone), addresses, and related content you submit.
• Community help content: If you post community requests or offers, we collect the content you submit, including titles, descriptions, help types, and location-related information.
• Volunteer applications: When you apply to volunteer opportunities, we collect your application messages and track application status and hours logged.
• Technical and usage data: We may collect device information, IP address, browser type, and usage data (e.g., pages visited, actions taken) to operate and improve the Service.
• Communications: We retain records of communications you have with us (e.g., support or feedback emails).

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Create and manage your account and authenticate you.
• Display volunteer opportunities, community requests/offers, and organization information to other users as intended by the Service.
• Send you transactional emails (e.g., confirmations, password reset, opportunity submission confirmations).
• Respond to your requests and support needs.
• Monitor and analyze usage and trends to improve the Service.
• Comply with applicable laws and protect our rights and the safety of users.

4. Sharing of Information

We may share your information in the following circumstances:

• With other users: Information you choose to publish (e.g., opportunity listings, community posts, organization details) is visible as designed by the Service.
• Service providers: We use third-party providers to operate the Service, including hosting (e.g., Vercel), database and authentication (e.g., Supabase), and email delivery (e.g., SendGrid). These providers process data on our behalf under contractual obligations to protect your information.
• Legal requirements: We may disclose information if required by law, court order, or government request, or to protect our rights, safety, or property.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

5. Cookies and Similar Technologies

We and our service providers may use cookies, session storage, and similar technologies to maintain your session, remember preferences, and analyze how the Service is used. You can control cookies through your browser settings; disabling them may limit some functionality.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data as described below.

7. Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access and receive a copy of the personal information we hold about you.
• Correct or update inaccurate information.
• Request deletion of your personal information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority (e.g., in the EU/UK).

To exercise these rights or to delete your account, contact us at the email below. We will respond in accordance with applicable law.

9. Children's Privacy

The Service is not directed to individuals under 13 (or higher age where required). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us so we can delete it.

10. International Transfers

Your information may be processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfer. Where required by law, we implement appropriate safeguards (e.g., standard contractual clauses) for international transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Continued use of the Service after changes constitutes acceptance. We encourage you to review this policy periodically.

12. Contact Us

For questions about this Privacy Policy or our privacy practices, or to exercise your rights, contact us at: hello@stepupforgood.com.