Privacy Policy

1. Introduction

OrgBaseHQ is a social enterprise project developed and operated by JCI Mandaue ("we", "our", or "us"), a local chapter of Junior Chamber International (JCI). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our organization management platform. Please read this policy carefully.

2. OrgBaseHQ as a Platform Provider

OrgBaseHQ is a technology platform that provides organizations with tools to manage their members, dues, finances, activities, and governance. It is important to understand the distinction between:

• Platform data — data we collect to provide and improve the Service (your account, usage patterns, technical information)
• Organization-managed data — data that organizations collect from their members through our platform

Organizations using OrgBaseHQ may collect member information through various means, including:

• Direct data entry by organization administrators
• Member self-registration via registration links and QR codes
• CSV imports of existing member lists

For organization-managed data, each organization acts as the data controller and is responsible for their own privacy practices with their members. We act as a data processor on behalf of these organizations. If you are a member of an organization using OrgBaseHQ, please refer to that organization's privacy policy for information about how they handle your data.

3. Information We Collect

We collect information in the following ways:

Information You Provide

• Account information (name, email, password)
• Organization details (name, logo, contact information)
• Member data you upload (names, emails, addresses, phone numbers)
• Financial records (dues, donations, transactions)
• Files and documents you upload

Information Collected Automatically

• Device and browser information
• IP address and location data
• Usage patterns and feature interactions
• Cookies and similar tracking technologies

4. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process transactions and send related notifications
• Send administrative communications (updates, security alerts)
• Respond to your inquiries and provide customer support
• Analyze usage to improve our Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

5. Third-Party Services

We use the following third-party services:

Google Analytics

We use Google Analytics to analyze website traffic and usage patterns. Google Analytics collects information such as how often users visit the site, what pages they visit, and what other sites they used prior to coming to our site. We use this information to improve our Service. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

Polar.sh

Subscription and payment processing is handled by Polar.sh ("Polar"). When you subscribe to a paid plan, your payment information is collected and processed directly by Polar according to their privacy policy. We do not store complete credit card numbers or payment credentials on our servers. Polar may share subscription status and customer identifiers with us to manage your account tier and billing status.

Cloudflare

We use Cloudflare for content delivery, security, and performance optimization. Cloudflare may collect IP addresses and other data as described in their privacy policy.

6. Data Storage and Security

Your data is stored securely using Cloudflare's global infrastructure. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time.

8. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete data
• Request deletion of your data
• Export your data in a portable format
• Opt out of marketing communications
• Withdraw consent where applicable

9. Cookies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

10. Children's Privacy

Our Service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us and we will take steps to remove that information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@orgbasehq.com or reach out to JCI Mandaue, Inc. through jcimandaue.org