Privacy Policy

CommunityConnect ("we", "our", or "the Platform") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and how you can control your data.

This Policy applies to all users of the Platform. By using the Platform, you consent to the data practices described in this Policy.

We collect the minimum data necessary to operate the Platform. The types of data we may collect include:

• Pseudonymous Internet Identity ID: A unique, randomized identifier generated by Internet Identity when you first authenticate. This ID is specific to CommunityConnect and cannot be traced to your identity on other platforms.
• Voluntary Profile Information: Display name or pseudonym you choose to set, profile description, and other information you voluntarily add.
• User-Generated Content: Posts, comments, and replies you create. Directory listings and associated business information you submit as a service provider.
• Usage Data: Pages visited, features used, and device/browser type collected for platform analytics and improvement.
• Directory Listings: If you create a directory listing, any contact or business information you provide is stored securely. We do not collect or store payment details.
• Communications: Messages you send via the Contact form or to our support team.

We do not collect your real name, email address, phone number, or physical location unless you voluntarily provide this information (e.g., in a directory listing or Contact form submission).

We use collected data to:

• Operate and improve the Platform, including moderation and safety features.
• Personalise your experience, such as remembering your settings and showing relevant content.
• Process directory listing subscriptions and manage your subscription status.
• Respond to your support enquiries and feedback.
• Send platform notifications (e.g., replies to your posts, moderation decisions) if you have opted in.
• Analyse usage patterns in aggregate, anonymised form to improve the Platform.
• Comply with legal obligations and enforce our Terms of Use.

We do not sell your personal data. We do not use your data for advertising targeting on behalf of third parties.

We use a limited number of trusted third-party services to operate the Platform:

• Stripe: Payment processing may be used for future premium features. Stripe is a PCI-DSS compliant payment processor. Stripe's Privacy Policy governs its handling of your payment data.
• Internet Identity (DFINITY Foundation): Authentication service. Internet Identity does not share your identity information with CommunityConnect beyond the anonymous, app-specific principal ID.
• Email Service Provider: Used to send transactional emails (e.g., listing approval notifications, support replies). Only your email address (if provided) and relevant message content are shared.

Each third-party service has its own privacy policy governing their data handling. We select partners who meet high data protection standards.

We retain your data only as long as necessary to provide the Platform's services or as required by law:

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Posts and comments: Retained while posted. Permanently removed within 24 hours of deletion.
• Payment records: Retained for 7 years as required by financial regulations.
• Support communications: Retained for 3 years after resolution.
• Usage analytics: Retained in anonymised, aggregated form indefinitely.

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate personal data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Portability: Request your data in a structured, machine-readable format.
• Right to Restriction: Request that we restrict processing of your personal data.
• Right to Object: Object to our processing of your personal data for certain purposes.
• Right to Withdraw Consent: Where processing is based on consent, withdraw consent at any time.

To exercise any of these rights, contact us at communityconnect.forum@pm.me or via our Contact page. We will respond within 30 days.

The Platform uses minimal cookies strictly necessary for functionality — such as authentication session tokens. We do not use tracking cookies or third-party advertising cookies.

You can configure your browser to refuse cookies, though this may affect certain Platform functionality. We do not use cross-site tracking technologies.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit, access controls, and regular security reviews.

In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law, typically within 72 hours of becoming aware of the breach.

The Platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us immediately at communityconnect.forum@pm.me and we will take steps to delete such information.

We may update this Privacy Policy periodically. Material changes will be communicated via a platform notice at least 14 days before taking effect. The 'last updated' date at the top reflects the most recent revision. Continued use after changes indicates acceptance.

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at communityconnect.forum@pm.me with the subject line 'Privacy Enquiry'. You may also use our Contact page.

If you are dissatisfied with our response, you may have the right to lodge a complaint with your local data protection authority.