Privacy Policy

Effective date: [EFFECTIVE DATE] · Last updated: [LAST UPDATED DATE]

[PLACEHOLDER — REPLACE BEFORE PUBLISHING]

This draft reflects exactly what the SoCal Neighbor Pass website actually collects and does today (no more, no less) — but it still needs your real business name, address, and contact details filled in everywhere you see brackets, and a California-licensed attorney should confirm it before it governs real members, vendors, or payments.

[BUSINESS LEGAL NAME], doing business as SoCal Neighbor Pass ("SoCal Neighbor Pass," "we," "us," or "our"), respects your privacy. This Privacy Policy explains what personal information we collect through our website and member/vendor accounts (together, the "Service"), how we use and share it, and the choices and rights you have — including rights specific to California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the California Online Privacy Protection Act (CalOPPA).

1. Information We Collect

We collect information you give us directly. We don't use tracking pixels, ad networks, or third-party analytics on this site today.

If you join as a member

Identifiers: your name and email address.
Account credentials: your password — we never store your actual password, only a one-way cryptographic hash of it.
Commercial information: your membership tier (free or Premium), and, once you connect billing, information about your subscription status from Stripe (see Section 3) — we do not receive or store your full card number.
Activity information: which community events you've RSVP'd to.

If you join as a vendor

Identifiers: your business name, your name as the account contact, business email, and phone number.
Account credentials: your password (hashed, as above).
Commercial information: your business category, subscription/payment status, and the coupon listings and redemption codes you publish.
Why we collect your phone number: specifically to call and verify your business before your listings go live — this is part of how we keep the directory trustworthy for our members.

Automatically, from everyone

Session cookies:a signed, secure cookie that keeps you logged in. This is the only cookie we set, and it's strictly necessary for the Service to function — we don't use advertising or analytics cookies.
Standard technical logs: our hosting provider may log basic technical information (such as IP address and request timing) for security and performance purposes, in the ordinary course of operating a website.

2. How We Use Your Information

To create and maintain your account, and let you log in;
To provide the Service — show you deals and events, or let vendors manage their listings;
To process payments and manage subscriptions (through Stripe);
To confirm a vendor's business by phone before their listings go live;
To communicate with you about your account, membership, or vendor listings;
To keep the Service secure and prevent misuse;
To comply with legal obligations.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects about you.

3. How We Share Your Information

We do not sell or share your personal information for cross-context behavioral advertising, and we never have. We only share information with:

Stripe, Inc., our payment processor, to process your subscription payment and let you manage your own billing. Stripe has its own privacy policy governing the payment information you give it directly.
Service providers who host our website and store our data on our behalf, under obligations to keep it confidential and use it only to provide services to us.
Law enforcement or other parties when required by law, or to protect the rights, property, or safety of SoCal Neighbor Pass, our members, our vendors, or others.
A successorin the event of a merger, acquisition, or sale of assets — we'd require any successor to honor this Privacy Policy for information collected under it.

4. Cookies and "Do Not Track"

We use one strictly-necessary cookie per account type (member, vendor, or admin) to keep you signed in. We do not use cookies for advertising or cross-site tracking, and we do not currently respond differently to browser "Do Not Track" signals because we don't track you across other sites in the first place.

5. Data Retention

We keep your account information for as long as your account is active, plus a reasonable period afterward in case you return, and as needed to satisfy legal, accounting, or dispute-resolution obligations. You can ask us to delete your information sooner — see Section 7.

6. How We Protect Your Information

We use industry-standard practices to protect your information, including encrypting data in transit, storing passwords only as salted cryptographic hashes (never in plain text), and never handling your full payment card number ourselves — that goes directly to Stripe. No method of storing or transmitting information is 100% secure, and we can't guarantee absolute security.

7. Your Privacy Rights (California Residents)

If you're a California resident, you have the following rights regarding your personal information, which we honor for all our users regardless of where you live:

Right to know what personal information we've collected about you and why;
Right to access a copy of that information;
Right to correct inaccurate personal information;
Right to delete your personal information, subject to a few legal exceptions (like information we need to keep for tax or accounting purposes);
Right to opt out of sale or sharing — not applicable, since we don't sell or share your information;
Right to non-discrimination for exercising any of these rights — we won't deny you service, charge you a different price, or provide a lower quality of service because you exercised a privacy right.

To exercise any of these rights, email us at [PRIVACY REQUEST EMAIL] from the email address on your account, or contact us at [SUPPORT PHONE]. We'll verify your request using the email or login information tied to your account, and respond within the time required by law. You may also designate an authorized agent to make a request on your behalf.

8. Children's Privacy

The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has created an account, contact us at [PRIVACY REQUEST EMAIL]and we'll remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we'll post the updated policy here with a new "Last updated" date and, where required by law, provide additional notice.

10. Contact Us

Questions about this Privacy Policy, or want to exercise a privacy right? Contact us at [PRIVACY REQUEST EMAIL] or [SUPPORT PHONE]. Our mailing address is [BUSINESS ADDRESS, CITY, CALIFORNIA, ZIP].