Privacy Policy

GOODFOLK PRIVACY POLICY This Privacy Policy describes how Goodfolk LLC ("Goodfolk," "we," "us," or "our") collects, uses, shares, retains, and protects personal information when you use our website, mobile application, and related services (collectively, the "Platform"). 1. INFORMATION WE COLLECT 1.1 Information You Provide Directly When you create an account or use the Platform, you may provide us with: - Account information: name, email address, and password credentials handled through our authentication provider - Profile information: profile photo, banner image, bio, activity interests, and other profile details you choose to add - Location information you provide: city, state, country, zip code, and event or meeting-point locations you enter - Phone number (optional) - Emergency contact information: name, phone number, and relationship - Content you create or upload: messages, posts, event details, group details, photos, reports, and other submissions you make through the Platform - Payment and billing information: payment details are processed by Stripe; we store identifiers and transaction metadata such as Stripe customer, subscription, checkout, or payment-intent IDs, but not your full payment card details - Legal acceptance records: your typed signature, acceptance timestamps, waiver or terms version, and IP address when you accept the Terms of Service, liability waiver, or a group-specific waiver - Communication preferences: email, push, SMS, and digest settings 1.2 Information We Collect Automatically When you use the Platform, we may automatically collect: - Device and technical information: device type, operating system, browser type, app version, and similar diagnostics - Usage and log data: pages viewed, features used, access times, IP address, and referring URLs - Error and performance data: crash reports and performance metrics collected through Sentry when enabled - Push notification tokens or similar device identifiers used to deliver push notifications, if you enable them - Location information from your device or browser if you grant permission, including approximate or precise coordinates used for features like discovery, maps, and location-aware UI - Browser and device storage data, such as cookies, local storage, session storage, and similar technologies used to keep you signed in, remember preferences, save drafts, and preserve selected settings 1.3 Information From Third Parties We may receive information from third-party services that support the Platform, including: - AWS Cognito for authentication and account-management workflows - Stripe for payment and subscription processing - Google Maps Platform and geocoding providers for map display and location search - Expo and cloud messaging providers for mobile push delivery 2. HOW WE USE YOUR INFORMATION We use personal information to: - Provide, operate, maintain, and improve the Platform - Create and manage accounts, authenticate users, and keep sessions active - Display your profile and content to other users consistent with the groups, events, and channels you participate in - Match you with relevant events and groups based on location, interests, and activity - Process subscriptions, event payments, refunds, and related billing operations - Send service-related communications, including event updates, group activity, messages, digests, and account notices based on your settings - Support safety features, including trip-safety reports and host and group organizer/owner access to emergency contact information where applicable - Investigate abuse, moderate content, enforce our Terms of Service, waivers, and community rules, and respond to reports - Monitor performance, troubleshoot errors, and protect the security and integrity of the Platform - Comply with legal obligations and defend our legal rights 3. HOW WE SHARE YOUR INFORMATION We do not sell personal information. We also do not use personal information for targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects. We share personal information only as described below. 3.1 With Other Users - Your name, profile photo, bio, interests, and other profile details may be visible to members of groups you join or users who can access the relevant feature - Content you post in group channels, event chats, or similar shared spaces is visible to other users with access to those spaces - Your emergency contact information is visible only to you, to the host who created a current or recent event you are going to, and to organizers and owners of the group hosting that event, where needed for trip-safety features 3.2 With Service Providers We use service providers that process personal information on our behalf, including: - Amazon Web Services (AWS), including infrastructure, storage, and certain email or SMS delivery services - AWS Cognito for authentication and account management - Stripe for payments, subscriptions, refunds, and billing portal services - Sentry for error tracking and monitoring - Google Maps Platform and related geocoding services for maps and location search - Expo for mobile push notification delivery 3.3 For Safety, Support, and Moderation Authorized hosts who created events, group organizers, group owners, moderators, and platform administrators may access information when necessary to operate the Platform, investigate reports, enforce rules, support trip-safety features, or maintain service integrity. For example: - The host who created an event, group organizers, and group owners may view the attendee roster, check-in status, and emergency contact information for trip-safety reporting where the Platform permits it - Platform administrators may access non-direct-message group channels and moderation records to investigate abuse, policy violations, or operational issues 3.4 For Legal Reasons and Business Transfers We may disclose personal information if required by law, subpoena, court order, or other valid legal process; to protect the rights, property, or safety of Goodfolk, our users, or others; to enforce our agreements; or in connection with a merger, acquisition, financing, reorganization, or sale of assets. 4. COOKIES AND SIMILAR TECHNOLOGIES The Platform uses cookies and similar technologies, including browser local storage, session storage, and comparable device-level storage, to support core functionality. We use these technologies for purposes such as: - Authentication and session continuity - Remembering settings and preferences, such as theme or notification choices - Saving temporary form data, drafts, redirects, or setup progress - Remembering certain location or discovery inputs you choose to store on your device You can control cookies and storage through your browser or device settings, but disabling them may cause some features of the Platform to stop working properly. 5. DATA RETENTION We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Platform, comply with law, resolve disputes, and enforce agreements. In general: - Account and profile information is retained until you delete your account or ask us to delete it, subject to legal or operational retention requirements - Waiver, Terms of Service, and related acceptance records may be retained for longer periods, including indefinitely, for legal compliance and risk management - Payment, billing, refund, and tax-related records are retained as required by applicable law and financial reporting obligations - Logs, diagnostics, and error-monitoring data are generally retained for a limited period, which may be up to 90 days depending on the system or provider When you delete your account, we will delete or de-identify personal information associated with the account within a reasonable period, generally within 31 days, except where we must retain data for legal, security, fraud-prevention, billing, tax, or legitimate business purposes. 6. YOUR RIGHTS AND CHOICES 6.1 Access and Correction You may access and update much of your profile information, emergency contact details, and notification settings through the Platform. You may also contact us to request access to or correction of personal information we hold about you. 6.2 Deletion You may request deletion of your account and personal information through the Platform where that functionality is available, or by contacting us at legal@goodfolk.app. We may retain certain records as described in Section 5. 6.3 Portability You may request a copy of certain personal information you have provided to us in a portable format, where required by law. 6.4 Communications Choices You can manage email, push, SMS, and digest preferences through your account settings where available. Some service-related messages may still be sent when necessary for security, billing, legal compliance, or core account and transaction functionality. Digest emails may also include an unsubscribe link. 6.5 Colorado Privacy Act (CPA) Rights If you are a Colorado resident, you have rights under the Colorado Privacy Act, including the right to: - Confirm whether we are processing your personal data - Access your personal data - Correct inaccuracies in your personal data - Delete your personal data - Obtain a portable copy of your personal data - Opt out of targeted advertising, sale of personal data, or certain profiling activities Goodfolk does not sell personal data and does not engage in targeted advertising or the covered profiling described above. To exercise your rights, contact us at legal@goodfolk.app. We will respond within the time required by applicable law, including within 45 days for CPA requests unless an extension is permitted. If we deny a Colorado request, you may appeal by replying to our response or emailing us at the same address with "Privacy Appeal" in the subject line. 7. DATA SECURITY We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and cloud-security measures. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. 8. CHILDREN'S PRIVACY The Platform is intended only for adults age 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information to us, contact us at legal@goodfolk.app and we will take appropriate steps to investigate and delete the information where required. 9. INTERNATIONAL DATA TRANSFERS The Platform is operated from and hosted in the United States. If you access the Platform from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate. 10. THIRD-PARTY LINKS AND SERVICES The Platform may link to or integrate with third-party websites, maps, payment pages, or services that are not controlled by Goodfolk. Their privacy practices are governed by their own policies, and we encourage you to review them. 11. CHANGES TO THIS POLICY We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date and provide notice as required by law, which may include notice on the Platform or by email. 12. CONTACT US If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at: Goodfolk LLC Email: legal@goodfolk.app For privacy-related requests, include "Privacy Request" in your subject line.