ORGANIZE4CHANGE PRIVACY POLICY

How Organize4Change collects, uses, discloses, retains and protects personal information across its community-engagement platform.

1. Scope and who we are

1.1 This Privacy Policy explains the privacy practices of Organize4Change LLC (“Organize4Change,” “we,” “us” or “our”) in connection with https://organize4change.com, public Participant profiles, the global public timeline, user Accounts, activity listings, registrations, recommendations, communications, uploads, online payments, subscriptions, support and related services (the “Platform”).

1.2 It applies when we determine why and how personal information is processed. It does not replace the independent privacy notices of Nonprofit Providers, Support Organizations, payment processors or other third parties.

1.3 When an Organization supplies or manages information about a Participant, the Organization may independently determine some purposes and means of processing. In that situation, contact the Organization regarding its own decisions and contact us regarding Organize4Change’s Platform-level processing.

1.4 “Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household, where applicable law uses that or a similar definition.

2. People and Accounts covered

2.1 This Policy covers visitors, Participants, Organization Users, Nonprofit Providers, Support Organizations, people invited or onboarded by an Organization, individuals communicating through the Platform, and people who contact us.

2.2 Participants may include people receiving behavioral-health or community-support services, people in recovery programs, residents of group homes or supportive living, and other community members. We do not infer that a person has a medical condition merely because they use the Platform or participate in an Activity.

2.3 Organizations may provide Participant access through coupon codes or other authorized invitations. Each Participant personally accepts the Terms of Service and Privacy Policy and retains ownership and control of the Account.

3. Categories of information we collect

4. Sensitive and health-related information we do not intentionally collect

4.1 Organize4Change does not intentionally request or collect accessibility or accommodation requirements, disability information, behavioral- or mental-health information, recovery-program participation, group-home or supportive-living status, community-support-service participation, sexual orientation, medical diagnoses, medications, treatment information, case notes, insurance information or emergency-contact information.

4.2 Do not submit the information listed above through a public profile, timeline post, message, group discussion, comment, review, upload or other free-text field. The Platform is not an electronic health record, clinical record, treatment-management system or repository for protected health information.

4.3 If a user voluntarily or incidentally discloses sensitive information in User Content, we may process it only as necessary to host, transmit, moderate, secure or remove that Content, respond to the user, comply with law or protect safety and rights.

4.4 Organizations must not use the Platform to create shadow clinical files, upload medical records or share protected health information. Organize4Change does not advertise the Platform as HIPAA compliant and does not accept protected health information without a written Business Associate Agreement and an expressly approved workflow.

5. How we collect information

5.1 We collect information directly when you register, accept the Terms and Privacy Policy, create or update a public profile, purchase a Subscription, use a coupon code, register for an Activity, use recommendations or location-based search, send a private message, participate in a group discussion, post on the global public timeline, submit a comment or review, upload a file or media, request support, report a concern or otherwise interact with the Platform.

5.2 We may receive information from an Organization that invites, onboards, supports or manages a Participant, and from a Nonprofit Provider that publishes or administers Activities.

5.3 We collect technical and usage information automatically through server logs, cookies, pixels, software development kits and similar technologies, as described in the Cookie Policy.

5.4 We may receive transaction status and limited billing information from payment processors, but we do not need to store full card numbers in ordinary Platform systems.

5.5 For Organization applications and trust or safety reviews, we may review public websites, public nonprofit or business records, professional or regulatory information and other publicly available sources. This review is not certification or endorsement.

6. Why we use personal information

7. Legal grounds and consent

7.1 Depending on the law that applies, we process information to perform a contract, provide requested services, comply with legal obligations, protect vital or safety interests, pursue legitimate business interests, or with consent.

7.2 Where consent is required for marketing, precise location, targeted advertising, non-essential cookies or another use, we will request it through an appropriate notice or control.

7.3 You may withdraw consent where processing is based on consent. Withdrawal does not affect prior lawful processing and may limit features that require the information.

7.4 An Organization providing information about another person represents that it has a lawful basis, authority and any required consent and that it has provided appropriate notices.

8. Organization-managed Accounts and respective responsibilities

8.1 A Support Organization may provide access through a coupon code or another authorized invitation method. The Participant personally accepts the Terms and Privacy Policy and retains ownership and control of the Account.

8.2 An associated Organization may view the Participant’s public profile and email address where authorized. It cannot edit the profile, view the Participant’s Activity history, deactivate the Account or delete it.

8.3 If the Participant leaves the Organization, the Participant retains control of the Account. The Organization must stop using information it no longer has authority to access or retain.

8.4 If you believe an Organization has improperly accessed or used your profile or email address, contact the Organization and Organize4Change. We may restrict organizational access while reviewing the concern.

9. Sensitive information and consumer health data

9.1 Organize4Change does not intentionally collect the sensitive or health-related categories listed in Section 4, and it does not infer a diagnosis, disability, recovery status or support status merely because a person uses the Platform or views an Activity.

9.2 Users must not submit sensitive or consumer health data through profiles, the public timeline, messages, discussions, comments, reviews or uploads. If such information is incidentally disclosed, we may process it only for the limited operational, moderation, safety and legal purposes described in Section 4.3.

9.3 We do not sell consumer health data or use it for targeted advertising, employment, credit, insurance, housing or healthcare eligibility decisions.

9.4 We do not intentionally disclose consumer health data to Providers or Organizations. An independent user may disclose information through Content or communications, and recipients are responsible for their own lawful handling of that information.

9.5 If Organize4Change later introduces a feature that intentionally collects consumer health data, it will update this Policy, provide any separate notice required by law and obtain applicable consent or authorization before activating the feature.

9.6 Requests to access, confirm, delete or withdraw consent for consumer health data may be sent to support@organize4change.com. We may need to verify identity and authority before responding.

10. HIPAA and protected health information

10.1 Organize4Change is not a healthcare provider merely because the Platform is used by people receiving behavioral-health or support services. HIPAA applies only in defined circumstances involving covered entities, business associates and protected health information.

10.2 Unless we enter into a written Business Associate Agreement and expressly approve the relevant workflow, Organize4Change does not undertake to act as a HIPAA business associate and users must not use the Platform to create, receive, maintain or transmit protected health information on behalf of a covered entity.

10.3 If a written Business Associate Agreement applies, it will control over inconsistent provisions of this Policy for the covered processing.

11. How we disclose personal information

11.1 We may disclose personal information to the Nonprofit Provider connected with an Activity when necessary to process an expression of interest, registration, participation, communication, accommodation request or related service.

11.2 We may disclose information to an authorized Support Organization that created, invited, supports or manages the relevant Participant Account, subject to role permissions and applicable law.

11.3 We disclose information to service providers that support hosting, security, authentication, analytics, communications, advertising, customer support, payment processing, data storage and other operations. They may process information under contract or, for some services, under their independent terms.

11.4 We may disclose information to professional advisers, auditors, insurers, financing sources and transaction counterparties where reasonably necessary and subject to appropriate confidentiality obligations.

11.5 We may disclose information where we reasonably believe it is necessary to comply with law, legal process or lawful requests; protect rights, safety or security; investigate fraud or abuse; enforce Policies; or establish, exercise or defend legal claims.

11.6 In a merger, financing, reorganization, bankruptcy, acquisition or sale of all or part of our business, personal information may be reviewed or transferred subject to applicable law and appropriate protections.

11.7 We may disclose information at your direction, with your consent or as otherwise described when the information is collected.

12. Service providers and third-party tools

12.1 Based on current business information, services that may be used include Google Analytics, Google advertising services such as Google AdSense or DoubleClick, Bing Ads, Mailchimp, and payment options or processors associated with PayPal, Stripe, Google Payments or Apple Pay.

12.2 The actual providers enabled on the Platform may change. Some providers act only on our instructions; others independently determine how they process data. Review the provider’s notice where a separate interface, payment wallet, advertisement or link is involved.

12.3 We do not promise that every provider named above is active on every page or at all times. The cookie consent interface, browser tools and the Cookie Policy should reflect the technologies actually deployed.

13. Cookies, analytics and advertising

13.1 We and third parties may use essential, functionality, performance, analytics and advertising cookies or similar technologies. The Cookie Policy explains the categories and available controls.

13.2 Non-essential analytics or advertising technologies should be activated only in accordance with applicable notice, consent and opt-out requirements. Where required, users may manage choices through a consent manager, privacy link or browser-based signal.

13.3 Some state laws treat certain disclosures for cross-context behavioral or targeted advertising as a “sale,” “sharing” or targeted advertising even when no money is exchanged. Where applicable, you may opt out using the methods described in Section 20.

13.4 We will process legally recognized opt-out preference signals, such as Global Privacy Control, where required and technically applicable.

14. Public Content and communications

14.1 Public Participant profiles, global timeline posts, Activity listings, group discussions, comments, reviews and uploaded media may be visible to other users, search engines or the public. Do not publish information that you or another person expects to remain private.

14.2 Private messages are visible to intended recipients and may be accessible to authorized Organize4Change personnel or service providers when reasonably necessary for support, security, moderation, legal compliance or safety. Associated Organization administrators do not receive general access to private messages unless a specific feature clearly states otherwise.

14.3 Recipients may copy, forward, screenshot or misuse information. We cannot control information after another independent user lawfully receives it.

14.4 We may preserve communications and reports for a reasonable period to investigate safety incidents, abuse, fraud, disputes or Policy violations.

15. Payments

15.1 Payment processors collect and process payment details needed to complete purchases. Organize4Change typically receives transaction identifiers, billing contact information, payment status, payment method type and limited fraud or dispute information rather than full payment-card numbers.

15.2 Payment processors may independently use information to provide wallets, comply with financial laws, prevent fraud and manage disputes. Their privacy notices apply to those activities.

16. Data retention

16.1 We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing active Accounts and Subscriptions, supporting Activities, maintaining security, resolving disputes and complying with legal, tax, accounting and reporting obligations.

16.2 Retention depends on the information and context. Account information may be retained while the Account is active; transaction and tax records may be retained for legally required periods; safety and moderation records may be retained to prevent repeat abuse; and backup copies may persist until overwritten on a normal cycle.

16.3 When information is no longer required, we will delete, de-identify or aggregate it, subject to technical limitations, lawful retention, dispute preservation and the rights of other users or Organizations.

16.4 An Account-deletion request may not remove information held independently by a Nonprofit Provider or Support Organization, public Content copied by others, transaction records, or information we must retain by law.

17. Security

17.1 We use administrative, technical and organizational measures designed to protect personal information in light of its nature and risk. Measures may include access controls, authentication, encryption in transit, monitoring, backups, vendor controls and incident-response procedures.

17.2 No internet service is completely secure. We cannot guarantee that unauthorized access, loss, misuse or disruption will never occur.

17.3 Users must protect credentials, use secure devices, avoid public disclosure of sensitive information, promptly remove former staff access and report suspected compromise.

17.4 If a security incident requires notice under applicable law, we will provide notice to affected individuals or authorities as required.

18. Children and minors

18.1 The Platform is not directed to children under 13, and we do not knowingly allow a child under 13 to independently register or provide personal information through ordinary Account creation.

18.2 A minor may participate in a Provider’s specific youth Activity only under the Provider’s rules and the supervision, registration and responsibility of a parent, guardian, school or authorized Organization. The Provider and supervising party are responsible for child-privacy and safeguarding compliance.

18.3 If you believe a child submitted information to us without appropriate authorization, contact support@organize4change.com so we can investigate and take appropriate action.

19. Your privacy choices

19.1 Account settings may allow you to update profile details, communications, visibility, saved Activities or other preferences. Some Organization-managed information may require action by the Organization or support team.

19.2 You may unsubscribe from marketing emails through the link in the message and may opt out of marketing texts by following the stated instructions. We may continue to send necessary service, safety, security and billing messages.

19.3 You can manage cookies through the Platform controls made available, browser settings and device settings. Blocking essential technologies may prevent login or other core features.

19.4 You may request access, correction or deletion by contacting us. We will respond according to the law that applies and may need to verify identity, residency and authority.

20. U.S. state privacy rights

20.1 Residents of certain U.S. states may have rights to confirm processing, access, correct, delete or obtain a portable copy of personal information and to opt out of targeted advertising, sale, sharing or certain profiling. Some states also provide rights concerning sensitive or consumer health data.

20.2 To exercise a right, email support@organize4change.com with the subject “Privacy Rights Request” and describe the request. Where a Platform privacy-choice link is available, use it for advertising or cookie choices.

20.3 We may verify your request by matching information associated with your Account or requesting additional information. We will use verification information only for the request, fraud prevention and legal compliance.

20.4 An authorized agent may submit a request where permitted. We may require proof of authorization and may still verify the consumer directly.

20.5 If we deny a request, residents of states that provide an appeal right may appeal by replying to our decision with “Privacy Appeal” and explaining the basis for appeal.

20.6 We will not unlawfully discriminate against you for exercising privacy rights. A feature or service may differ where the requested information is reasonably necessary to provide it.

20.7 We recognize opt-out preference signals where required. Because laws and technical standards evolve, the Platform’s privacy-choice interface may provide more current instructions than this general Policy.

21. California notice at collection

21.1 During the preceding twelve months, we may have collected the categories described below. The examples and disclosures are based on the Platform’s described functions and do not mean that every item is collected from every person.

21.2 We collect these categories from consumers, Organizations, devices, service providers and public sources; use them for the purposes described in Section 6; and disclose them to the categories of recipients described in Section 11.

21.3 We do not sell personal information for money. Use of advertising and analytics technologies may be treated as “sharing” or a sale under California law. Eligible residents may opt out through an available privacy-choice link, consent manager or Global Privacy Control signal.

21.4 We do not knowingly sell or share the personal information of consumers under 16 without legally sufficient authorization.

21.5 We do not intentionally collect protected classifications, sensitive personal information or consumer health data as structured Platform data. If such information is incidentally disclosed in User Content, we process it only as described in Sections 4 and 9.

22. Consumer health data requests and deletion

22.1 Where a consumer health data law applies, you may have rights to confirm collection or sharing, access a list of affiliates or third parties with whom information was shared, withdraw consent, and delete consumer health data.

22.2 Deletion may require us to notify processors, affiliates or other recipients as required. Information may remain in backups for a limited period and may be retained where an exception applies, such as security, legal compliance or completion of a requested transaction.

22.3 A request concerning information controlled independently by an Organization or Provider may need to be directed to that entity. We will explain this where reasonably possible.

23. International access and processing

23.1 Organize4Change is based in the United States and the client has stated that Platform data is stored or processed in the United States. Users who access the Platform from elsewhere understand that information may be transferred to and processed in the United States and other locations used by service providers.

23.2 Where cross-border transfer requirements apply, we will use legally recognized mechanisms and safeguards appropriate to the transfer.

24. Third-party links and independent privacy practices

24.1 The Platform may link to Nonprofit Providers, venues, payment services, social networks and other websites. We do not control their independent privacy practices.

24.2 Read the privacy notice of the relevant third party before submitting information or leaving the Platform. A link or listing does not make Organize4Change responsible for the third party’s data practices.

25. Changes to this Policy

25.1 We may update this Policy to reflect legal, product, security, operational or business changes. The revised version will display a new effective date.

25.2 We will provide additional notice of material changes where appropriate or required, including through the Platform, email or renewed consent.

25.3 Where consent is required for a materially different use of sensitive or consumer health data, we will request it before the new use.

26. Questions, requests and complaints

26.1 Contact Organize4Change Support at support@organize4change.com for questions, privacy rights requests, consumer health data requests or complaints.

26.2 Please identify the Account or email involved and provide enough detail for us to understand the request. Do not email medical records, passwords, payment-card numbers or unnecessary sensitive information.

26.3 If applicable law gives you the right to complain to a state attorney general or another regulator, that right remains available.

Contact details

Organize4Change LLC

Website: https://organize4change.com

Support, legal and privacy inquiries: support@organize4change.com