Privacy Policy

1. Overview

Social Exchange (“we,” “our,” or “us”) respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using socialexchange.co, you agree to this policy.

2. Information We Collect

Information you provide:

• Account information: name, email address, and profile data you enter during sign-up.
• Onboarding preferences: causes, availability, skills, location, organizational details, or sponsorship goals you share when creating your profile.
• Event data: event listings, volunteer sign-ups, shift records, and communications created through the Platform.
• Payment information: processed by third-party providers (Stripe); we do not store card numbers.
• Assistant usage: anonymous conversation identifiers, page paths, message and error counts, and thumbs-up/down ratings.
• Shared assistant exchanges: a rated question and response only when you explicitly choose to share that exchange with our team.

Information collected automatically:

• Usage data: pages visited, features used, timestamps.
• Device information: browser type, operating system, IP address.
• Cookies and similar technologies: used for authentication and session management.

3. How We Use Your Information

• To provide and operate the Platform (event management, volunteer coordination, Karma tracking).
• To match volunteers with relevant events based on stated interests and availability.
• To process payments and sponsorship transactions.
• To send transactional emails (magic links, event confirmations, shift reminders).
• To improve the Platform through aggregate usage analytics.
• To communicate with you about your account or our services.
• To answer questions submitted through the automated website assistant.

4. Information Sharing

We do not sell your personal information. We share information only in these circumstances:

• With organizations: when you sign up for their event, they receive your name, email, and relevant profile information.
• With sponsors: aggregate anonymized impact data (total volunteer hours, reach) — not individual personal data.
• With service providers: Supabase (database and authentication), Stripe (payments), and similar infrastructure providers who are contractually bound to protect your data.
• With Anthropic: when you use the automated website assistant, your messages are sent to Anthropic to generate a response. Do not submit passwords, payment-card details, government identification, or other sensitive information in the assistant.
• As required by law: in response to valid legal requests.

5. Karma and Activity Data

Your Karma record and volunteer activity history are associated with your account and may be visible to organizations when you sign up for their events. Aggregate community impact statistics (total hours volunteered, total Karma recognized) may be published publicly. Your individual activity is not published without your consent.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where we are required to retain it for legal or compliance purposes.

Social Exchange records anonymous website-assistant usage and rating metrics without saving the text of ordinary conversations. If you explicitly choose to share a rated exchange, we retain that question and response for up to 90 days for quality review, then automatically remove the text while retaining aggregate rating statistics. Assistant messages are processed by Anthropic and may be retained by that provider according to our service configuration and its applicable terms. Limited request metadata may also be processed for security, reliability, and rate limiting.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate information.
• Request deletion of your account and personal data.
• Object to or restrict certain processing.
• Data portability — receive your data in a machine-readable format.

To exercise any of these rights, email privacy@socialexchange.co.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), Supabase Row Level Security (RLS), and server-side API keys for sensitive operations. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security but take reasonable precautions.

9. Cookies

We use cookies and browser storage for authentication sessions and user preferences. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling them may affect authentication functionality.

10. Children's Privacy

The Platform is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us at privacy@socialexchange.co.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email. The “Effective date” at the top of this page reflects the date of the most recent revision.

12. Contact

Privacy questions or requests: privacy@socialexchange.co
Social Exchange · socialexchange.co