Privacy Policy

• Account details — your name, email address, and password (stored hashed by our authentication provider; we never see it).
• Check-in activity — which campaign you checked in at, when, and at which business.
• Donations — the amount, date, and recipient of any direct or monthly donation you make.
• Business and organization details — name, address, logo, description, team members, and, for organizations, the EIN.
• Payment details — handled by Stripe. We keep Stripe's reference IDs and, for a business's card on file, the card brand and last four digits. We never receive or store full card numbers.

We don't collect your device's location. Searching by city or zip code uses only the text you type.

• to run the service: verify check-ins, track campaign budgets, process payments, and show your impact;
• to send emails you need — receipts, account and team invitations, password resets, and summaries of activity on your account;
• to prevent fraud and abuse, such as duplicate or fake check-ins;
• to meet legal, tax, and accounting obligations.

• Public: approved business and organization profiles, and campaigns with their progress. Supporters are never listed publicly.
• The business you check in with sees your name at the register when the check-in goes through.
• An organization you donate to directly sees your name and the amount, because it's the recipient of your gift.
• CommunityLoop administrators can access account data to review applications, provide support, and investigate problems. Administrator access to an account is logged.

We don't sell or rent personal information. We share it only with the providers that run the service for us:

• Stripe — payment processing, and identity verification for organizations receiving funds;
• Supabase — database and account authentication;
• Vercel — website hosting;
• Resend — email delivery.

We may also disclose information if the law requires it, or to protect the safety of our users or the integrity of the service.

We use cookies only to keep you signed in. We don't use advertising cookies or third-party analytics trackers.

We keep account information while your account is open. Check-in and payment records are kept longer, because businesses, organizations, and tax authorities rely on them; when you delete your account, we remove or anonymize your personal details but may keep those financial records as required by law.

To correct your details, get a copy of your data, or delete your account, email support@community-loop.com and we'll respond within 30 days.

Data is encrypted in transit, access is restricted by role at the database level, and check-in codes are generated on our servers so they can't be copied from your phone. No system is perfectly secure, but we take protecting your information seriously.

CommunityLoop isn't intended for anyone under 18, and we don't knowingly collect information from children.

If we make significant changes, we'll let you know by email or in the app before they take effect.