Privacy Policy

1. Overview

Rappor provides software and website tools for networking groups, chambers, referral groups, business organizations, and similar communities. The Service may allow users to manage group information, track referrals, closed business, one-to-one meetings, attendance, meeting speakers, member activity, group performance, public group websites, business profile pages, and related information.

Some information entered into the Service may remain private within a member portal or workspace. Other information may be displayed publicly on generated group websites, member listings, business profile pages, event pages, or other public-facing pages, depending on the applicable subscription plan, user role, workspace settings, and the information submitted or approved for publication.

This Privacy Policy is intended to explain the difference between private workspace data and public website data.

2. Information We Collect

We collect information directly from you, automatically through your use of the Service, from workspace administrators or other users, and from third-party service providers.

2.1 Account Information

When you create an account, accept an invitation, or use the member portal, we may collect:

• Name
• Email address
• Phone number
• Password or authentication credentials
• Profile photo or avatar
• Job title or role
• Account status
• Login activity
• User preferences
• Workspace memberships
• User role and permissions
• Other information you provide when creating or updating your account

2.2 Group and Organization Information

When a group or organization is created or managed through the Service, we may collect:

• Group or organization name
• Group or organization description
• Meeting day, time, and location
• Contact information
• Logo or brand assets
• Website settings
• Custom domain information
• Subscription plan and billing status
• Public listing preferences
• Workspace settings
• Administrator information
• Member roster information
• Other information submitted by workspace administrators or members

2.3 Business and Member Profile Information

Depending on the subscription plan and workspace settings, users may submit information for public or private business/member profiles, including:

• Member name
• Business name
• Job title
• Business category
• Business description
• Services offered
• Business phone number
• Business email address
• Website URL
• Social media links
• Scheduling or meeting links
• Business address
• Hours of operation
• Logo
• Profile image
• Project showcase images
• Project descriptions
• Other content submitted for a business or member profile

Some of this information may be displayed publicly on generated group websites, member listings, and business profile pages.

3. Referral, Prospect, and Activity Data

The Service may allow users to submit and manage referral information, prospect information, business activity, and related records. This may include:

• Referring member
• Receiving member
• Prospect name
• Prospect email address
• Prospect phone number
• Referral notes
• Referral temperature or status
• Closed business amount
• One-to-one meeting records
• Attendance records
• Speaker schedule information
• Group performance metrics
• Member performance metrics
• Administrative notes
• Other activity submitted through the Service

Users are responsible for ensuring they have an appropriate and lawful reason to submit referral, prospect, customer, or third-party contact information into the Service.

The Service is not intended for storing highly sensitive personal information, including Social Security numbers, financial account numbers, medical information, protected health information, government identification numbers, or other sensitive data that is not necessary for the intended use of the Service.

4. Public Information

Certain information may be displayed publicly through the Service. Public information may include:

• Group name
• Group description
• Meeting day, time, and location
• Group logo
• Group metrics or aggregate statistics
• Member names
• Business names
• Business profile pages
• Business contact information
• Business descriptions
• Service lists
• Business websites and links
• Social media links
• Scheduling links
• Business hours
• Project showcase photos
• Public event or speaker information
• Other information submitted or approved for public display

Public information may be accessible to website visitors, indexed by search engines, displayed in search results, cached by third parties, shared by users, or archived by external services. If public information is removed from Rappor, it may not be immediately removed from search engines, third-party services, browser caches, or external archives.

Users and workspace administrators are responsible for ensuring that public-facing information submitted to the Service is accurate, lawful, non-confidential, and appropriate for public display.

5. Information Collected Automatically

When you access or use the Service, we may automatically collect certain information, including:

• IP address
• Browser type
• Device type
• Operating system
• Referring URLs
• Pages viewed
• Links clicked
• Date and time of access
• Session activity
• Approximate location derived from IP address
• Error logs
• Performance data
• Security logs
• Authentication events
• API request information
• Cookie and similar tracking data

We use this information to operate, secure, improve, troubleshoot, and analyze the Service.

6. Cookies and Similar Technologies

We may use cookies, pixels, local storage, session storage, analytics tools, and similar technologies to:

• Keep users logged in
• Remember preferences
• Secure the Service
• Understand website traffic
• Measure performance
• Improve user experience
• Analyze feature usage
• Support marketing or advertising efforts
• Track conversions from ads or campaigns

Some cookies are necessary for the Service to function. Other cookies may be used for analytics, performance, or marketing.

You can control cookies through your browser settings. If we use non-essential marketing or advertising cookies, we may provide additional cookie controls or opt-out options where required by law.

Additional details may be provided in our Cookie Policy.

7. How We Use Information

We may use personal information to:

• Provide, operate, and maintain the Service
• Create and manage user accounts
• Authenticate users
• Manage group and organization workspaces
• Enable workspace switching
• Track referrals, closed business, one-to-one meetings, attendance, and member activity
• Generate group websites and business profile pages
• Display public information selected or approved for publication
• Process subscriptions and payments
• Send service-related communications
• Send referral notifications and workspace alerts
• Provide support
• Respond to inquiries
• Improve features and user experience
• Monitor performance and troubleshoot issues
• Protect the security and integrity of the Service
• Detect, prevent, and investigate fraud, abuse, and unauthorized activity
• Enforce our Terms of Service and policies
• Comply with legal obligations
• Send marketing communications where permitted by law
• Analyze usage trends and business performance
• Develop new features and services

8. Email Communications

We may send transactional, administrative, and service-related communications, including:

• Account verification messages
• Password reset emails
• Workspace invitations
• Referral notifications
• Member activity notifications
• Billing notices
• Subscription updates
• Security alerts
• Support responses
• Product and feature updates
• Policy update notices

These messages are part of the Service and may not always include an unsubscribe option.

We may also send marketing communications where permitted by law. You may opt out of marketing emails by using the unsubscribe link in the email or by contacting us at [email protected]. Opting out of marketing communications does not opt you out of transactional or service-related communications.

9. How We Share Information

We do not sell personal information for money.

We may share personal information in the following circumstances:

9.1 With Workspace Members and Administrators

Information submitted within a group or organization workspace may be visible to other members, group administrators, organization administrators, or authorized users depending on workspace settings, user role, permissions, and feature configuration.

Workspace administrators may be able to view, edit, export, manage, or delete certain workspace data.

9.2 Publicly

Information submitted or approved for public display may be published on generated group websites, business profile pages, member listings, event sections, or other public-facing pages.

9.3 With Service Providers

We may share information with trusted third-party service providers who help us operate the Service, such as:

• Hosting providers
• Database providers
• Email service providers
• Payment processors
• Analytics providers
• Security tools
• Error logging tools
• Customer support tools
• Domain, DNS, or website infrastructure providers
• File storage providers
• Professional advisors

These providers may process information only as necessary to provide services to us or as otherwise permitted by law.

9.4 With Payment Processors

If you subscribe to a paid plan, payment information may be processed by third-party payment processors such as Stripe. We do not store full credit card numbers on our own servers.

Payment processors may collect and process payment information according to their own terms and privacy policies.

9.5 For Legal Reasons

We may disclose information if we believe it is necessary to:

• Comply with applicable law
• Respond to subpoenas, court orders, or legal requests
• Protect the rights, property, or safety of Rappor, users, visitors, or others
• Enforce our Terms of Service or policies
• Investigate fraud, abuse, security incidents, or unauthorized activity
• Prevent harm or illegal activity

9.6 Business Transfers

If Rappor is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

10. Analytics and Advertising

We may use analytics tools to understand how visitors and users interact with the Service. These tools may collect information such as pages viewed, device type, browser type, approximate location, referral source, and usage activity.

We may also use advertising or conversion tracking tools to measure the effectiveness of marketing campaigns.

If we use technologies that may be considered “sharing” personal information for cross-context behavioral advertising under applicable state privacy laws, we will provide required notices and opt-out mechanisms where required.

11. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, operate workspaces, maintain records, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business purposes.

Retention periods may vary depending on the type of information and the context in which it is collected.

For example:

• Account information may be retained while an account remains active.
• Workspace data may be retained while a workspace remains active.
• Billing records may be retained as required for accounting, tax, and legal purposes.
• Security logs may be retained for a limited period to detect and investigate unauthorized activity.
• Backup copies may persist for a limited period before being overwritten or deleted.
• Public website content may remain visible until removed, disabled, unpublished, or deleted according to workspace settings or support processes.

After a workspace is canceled, we may retain data for a limited period to allow reactivation, export, legal compliance, dispute resolution, backup recovery, or internal recordkeeping. We may delete or anonymize data after the applicable retention period.

12. Data Security

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

These safeguards may include access controls, password hashing, encryption in transit, server security measures, logging, monitoring, backups, and internal access restrictions.

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials, using strong passwords, limiting administrative access, and promptly notifying us if you suspect unauthorized access to your account or workspace.

13. Your Choices and Controls

Depending on your account, role, workspace settings, and applicable law, you may have options to:

• Access your account information
• Update your profile information
• Edit business profile information
• Manage public business profile content
• Change notification preferences
• Request deletion of certain information
• Request export of certain information
• Cancel a subscription
• Remove or disable certain public content
• Opt out of marketing emails
• Control cookies through browser settings

Some requests may require verification. Some information may not be deleted immediately if we need to retain it for legal, security, billing, backup, dispute resolution, or legitimate business purposes.

Workspace data may also be subject to the rights and permissions of workspace owners, group administrators, organization administrators, and other users.

14. Privacy Requests

You may contact us at [email protected] to request access, correction, deletion, export, or other privacy-related assistance.

We may need to verify your identity before responding to a request. If your request relates to information controlled by a group or organization workspace, we may refer your request to the applicable workspace administrator or coordinate with them as appropriate.

We will respond to privacy requests as required by applicable law.

15. State Privacy Rights

Depending on where you live and whether applicable legal thresholds are met, you may have certain privacy rights under state privacy laws. These rights may include the right to:

• Know or confirm whether we process your personal information
• Access personal information
• Correct inaccurate personal information
• Delete personal information
• Obtain a portable copy of personal information
• Opt out of certain targeted advertising
• Opt out of the sale of personal information
• Opt out of certain profiling activities
• Limit certain uses of sensitive personal information
• Appeal a denied privacy request

We do not discriminate against users for exercising applicable privacy rights.

To exercise privacy rights, contact us at [email protected].

California Residents

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, if those laws apply to us and your information.

California residents may have rights to know, access, correct, delete, opt out of sale or sharing, limit use of sensitive personal information, and not be discriminated against for exercising privacy rights.

As of the Effective Date of this Privacy Policy, we do not sell personal information for money. If we use advertising, analytics, or tracking technologies that are considered “sharing” under California law, we will provide required opt-out mechanisms.

16. Sensitive Personal Information

The Service is not intended for storing highly sensitive personal information unless expressly necessary for the intended use of the Service and permitted by us.

You should not submit Social Security numbers, government identification numbers, financial account numbers, medical information, protected health information, biometric data, precise geolocation, children’s information, or other highly sensitive information into the Service unless we have expressly agreed in writing that the Service is designed to process that type of information.

17. Children’s Privacy

The Service is intended for adults and business users. The Service is not directed to children under 13 years old, and we do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take reasonable steps to delete that information.

If you believe a child under 13 has provided personal information to us, please contact us at [email protected].

18. International Users

Rappor is currently intended for use in the United States.

If you access the Service from outside the United States, you understand that your information may be collected, processed, stored, and transferred in the United States or other jurisdictions where we or our service providers operate.

Privacy laws in those jurisdictions may differ from the laws where you live.

If Rappor expands support internationally, we may update this Privacy Policy and our privacy practices to address additional legal requirements.

19. Third-Party Links and Services

The Service may contain links to third-party websites, tools, profiles, social media platforms, scheduling tools, map services, video platforms, payment processors, or other services.

We are not responsible for the privacy practices, content, security, or policies of third-party services. Your use of third-party services is governed by their own terms and privacy policies.

20. Customer and Workspace Responsibilities

Groups, organizations, administrators, and users are responsible for using the Service lawfully and appropriately.

Workspace administrators are responsible for:

• Inviting authorized users only
• Managing user roles and permissions
• Removing users who should no longer have access
• Ensuring public-facing content is accurate and appropriate
• Ensuring they have authority to submit member, business, referral, and prospect information
• Responding to member or prospect privacy questions where appropriate
• Complying with applicable laws and obligations related to their own use of the Service

Users are responsible for ensuring that any personal information they submit, including referral or prospect information, is submitted for a legitimate and appropriate business purpose.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by updating the “Last Updated” date, posting the updated Privacy Policy, sending an email, displaying an in-app notice, or using another reasonable method.

Your continued use of the Service after the updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.

22. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: