How we handle your data.

v0.1 draft. This policy is placeholder copy pending legal review before launch. The shape is right but every clause needs to be validated against current US + Canadian privacy law (CCPA, PIPEDA, GDPR for any EU users). Email [email protected] with questions.

Effective: TBD before launch · Last updated: 2026-05-18

1. What we collect

When you sign up for GetNeighbor as a board admin, we collect your name, email address, the name of your community organization, and basic billing info (handled by Stripe — we never see your full card number).

When residents of your community join, we collect their name, email, mailing address (for per-household billing), and any community-specific fields your board configures (e.g., owner vs. renter, household member names).

We collect usage data — which pages get clicked, which features are used, error logs — to improve the product. This is anonymized at the org level.

2. What we never collect or store

Full credit card numbers (Stripe handles this directly)
Social Security Numbers or other government IDs
Banking credentials (Stripe Connect handles bank linking)
Resident demographic data we don't need (race, religion, sexual orientation, etc.)

3. Who can see what

Within your community organization: board admins see the full member roster. Members see their own profile and the public community page. Non-members never see member data.

Across GetNeighbor: we (the operator team) can see your data when required to provide support or investigate abuse. We don't share it with anyone else.

4. Data export and deletion

You can export your entire community's data as CSV at any time from the admin panel. Member data, transaction history, event RSVPs, board decisions — all exportable, no platform lock-in.

To delete your account: from your admin panel, choose “Delete community.” This permanently removes all data within 30 days. Some records (financial transaction logs) we're legally required to retain longer per US/Canadian tax law.

5. Where data lives

Database: Supabase Postgres (US-East and Canada-East regions). Application: Google Cloud Run. Email delivery: Resend. Payment: Stripe (PCI Level 1 certified).

6. Cookies and tracking

We use only essential cookies (auth session, your selected community when you log in). We don't use third-party advertising trackers. We don't sell or share data with advertisers.

7. Changes to this policy

When we make material changes to this policy, we notify board admins via email at least 30 days before the change takes effect. Continuing to use the platform after that date constitutes acceptance.

8. Contact

Questions, deletion requests, or data-rights claims: email [email protected]. We respond within 7 business days.