File size: 12,491 Bytes
61d29fc
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Privacy Policy - Open Navigator</title>
    <style>
        * {
            margin: 0;
            padding: 0;
            box-sizing: border-box;
        }
        
        body {
            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
            line-height: 1.6;
            color: #333;
            background-color: #f9fafb;
        }
        
        .container {
            max-width: 800px;
            margin: 0 auto;
            padding: 40px 20px;
            background-color: white;
            box-shadow: 0 1px 3px rgba(0, 0, 0, 0.1);
        }
        
        header {
            border-bottom: 3px solid #2563eb;
            padding-bottom: 20px;
            margin-bottom: 30px;
        }
        
        h1 {
            color: #1e40af;
            font-size: 2.5rem;
            margin-bottom: 10px;
        }
        
        .last-updated {
            color: #6b7280;
            font-size: 0.9rem;
        }
        
        h2 {
            color: #1e40af;
            font-size: 1.75rem;
            margin-top: 30px;
            margin-bottom: 15px;
        }
        
        h3 {
            color: #374151;
            font-size: 1.25rem;
            margin-top: 20px;
            margin-bottom: 10px;
        }
        
        p {
            margin-bottom: 15px;
            color: #4b5563;
        }
        
        ul {
            margin-left: 20px;
            margin-bottom: 15px;
        }
        
        li {
            margin-bottom: 8px;
            color: #4b5563;
        }
        
        .highlight {
            background-color: #dbeafe;
            padding: 15px;
            border-left: 4px solid #2563eb;
            margin: 20px 0;
        }
        
        footer {
            margin-top: 50px;
            padding-top: 20px;
            border-top: 1px solid #e5e7eb;
            text-align: center;
            color: #6b7280;
            font-size: 0.9rem;
        }
        
        a {
            color: #2563eb;
            text-decoration: none;
        }
        
        a:hover {
            text-decoration: underline;
        }
    </style>
</head>
<body>
    <div class="container">
        <header>
            <h1>🏛️ Privacy Policy</h1>
            <p class="last-updated">Last Updated: April 26, 2026</p>
        </header>

        <section>
            <p><strong>Open Navigator</strong> ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.</p>
        </section>

        <section>
            <h2>1. Information We Collect</h2>
            
            <h3>1.1 Information You Provide</h3>
            <p>When you create an account or use our services, we may collect:</p>
            <ul>
                <li><strong>Account Information:</strong> Email address, name, and profile information</li>
                <li><strong>OAuth Provider Data:</strong> When you log in via Google, Facebook, GitHub, or HuggingFace, we receive your public profile information and email address</li>
                <li><strong>User Preferences:</strong> Settings and preferences you configure within the application</li>
            </ul>

            <h3>1.2 Automatically Collected Information</h3>
            <ul>
                <li><strong>Usage Data:</strong> Pages visited, features used, and interactions with the platform</li>
                <li><strong>Device Information:</strong> Browser type, operating system, IP address</li>
                <li><strong>Cookies:</strong> We use essential cookies for authentication and session management</li>
            </ul>
        </section>

        <section>
            <h2>2. How We Use Your Information</h2>
            <p>We use the collected information to:</p>
            <ul>
                <li>Provide, maintain, and improve our services</li>
                <li>Authenticate your account and maintain security</li>
                <li>Personalize your experience on the platform</li>
                <li>Send important updates about the service</li>
                <li>Analyze usage patterns to improve functionality</li>
                <li>Comply with legal obligations</li>
            </ul>
        </section>

        <section>
            <h2>3. Third-Party Authentication</h2>
            <div class="highlight">
                <p><strong>OAuth Providers:</strong> We support login via Google, Facebook, GitHub, and HuggingFace. When you use these services:</p>
                <ul>
                    <li>We only request access to your email address and basic profile information</li>
                    <li>We do not store your social media passwords</li>
                    <li>We do not post to your social media accounts</li>
                    <li>You can revoke our access at any time through your provider's settings</li>
                </ul>
            </div>
        </section>

        <section>
            <h2>4. Data Storage and Security</h2>
            <p>We implement appropriate technical and organizational measures to protect your information:</p>
            <ul>
                <li><strong>Encryption:</strong> Data is encrypted in transit using HTTPS/TLS</li>
                <li><strong>Access Controls:</strong> Strict access controls limit who can access your data</li>
                <li><strong>Secure Authentication:</strong> JWT tokens with secure secret keys</li>
                <li><strong>Regular Updates:</strong> We keep our systems updated with security patches</li>
            </ul>
            <p>However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.</p>
        </section>

        <section>
            <h2>5. Data Sharing and Disclosure</h2>
            <p>We do not sell your personal information. We may share your information only in the following circumstances:</p>
            <ul>
                <li><strong>With Your Consent:</strong> When you explicitly authorize us to share information</li>
                <li><strong>Service Providers:</strong> With trusted third-party services that help us operate (e.g., hosting providers)</li>
                <li><strong>Legal Requirements:</strong> When required by law, court order, or governmental authority</li>
                <li><strong>Business Transfers:</strong> In connection with a merger, acquisition, or sale of assets</li>
            </ul>
        </section>

        <section>
            <h2>6. Public Data Sources</h2>
            <p>Our platform aggregates publicly available information from:</p>
            <ul>
                <li>City council meeting minutes and transcripts</li>
                <li>Government public records and budgets</li>
                <li>Nonprofit organization databases (IRS Form 990 data)</li>
                <li>Legislative information from state and local governments</li>
            </ul>
            <p>This public information is not considered personal data and is used to provide civic engagement insights.</p>
        </section>

        <section>
            <h2>7. Your Rights and Choices</h2>
            <p>You have the following rights regarding your personal information:</p>
            <ul>
                <li><strong>Access:</strong> Request a copy of the personal information we hold about you</li>
                <li><strong>Correction:</strong> Request correction of inaccurate information</li>
                <li><strong>Deletion:</strong> Request deletion of your account and personal data</li>
                <li><strong>Data Portability:</strong> Request your data in a portable format</li>
                <li><strong>Opt-Out:</strong> Unsubscribe from non-essential communications</li>
            </ul>
            <p>To exercise these rights, contact us at the email address provided below.</p>
        </section>

        <section>
            <h2>8. Children's Privacy</h2>
            <p>Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will delete such information.</p>
        </section>

        <section>
            <h2>9. Data Retention</h2>
            <p>We retain your personal information for as long as necessary to:</p>
            <ul>
                <li>Provide our services to you</li>
                <li>Comply with legal obligations</li>
                <li>Resolve disputes and enforce our agreements</li>
            </ul>
            <p>When you delete your account, we will delete or anonymize your personal information within 30 days, except where required to retain it by law.</p>
        </section>

        <section>
            <h2>10. International Data Transfers</h2>
            <p>Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.</p>
        </section>

        <section>
            <h2>11. Changes to This Privacy Policy</h2>
            <p>We may update this Privacy Policy from time to time. We will notify you of any changes by:</p>
            <ul>
                <li>Posting the new Privacy Policy on this page</li>
                <li>Updating the "Last Updated" date</li>
                <li>Sending you an email notification (for material changes)</li>
            </ul>
            <p>Your continued use of our services after changes constitutes acceptance of the updated policy.</p>
        </section>

        <section>
            <h2>12. Contact Us</h2>
            <p>If you have questions about this Privacy Policy or our privacy practices, please contact us:</p>
            <ul>
                <li><strong>Email:</strong> privacy@communityone.com</li>
                <li><strong>Website:</strong> <a href="https://www.communityone.com">www.communityone.com</a></li>
                <li><strong>GitHub:</strong> <a href="https://github.com/getcommunityone/open-navigator-for-engagement">github.com/getcommunityone/open-navigator-for-engagement</a></li>
            </ul>
        </section>

        <section>
            <h2>13. Additional Information for EU/UK Users (GDPR)</h2>
            <p>If you are located in the European Union or United Kingdom, you have additional rights under GDPR:</p>
            <ul>
                <li><strong>Legal Basis:</strong> We process your data based on consent, contract performance, and legitimate interests</li>
                <li><strong>Data Protection Officer:</strong> You may contact our DPO at privacy@communityone.com</li>
                <li><strong>Supervisory Authority:</strong> You have the right to lodge a complaint with your local data protection authority</li>
                <li><strong>Automated Decision-Making:</strong> We do not use automated decision-making or profiling that produces legal effects</li>
            </ul>
        </section>

        <section>
            <h2>14. California Privacy Rights (CCPA)</h2>
            <p>If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):</p>
            <ul>
                <li><strong>Right to Know:</strong> What personal information we collect, use, and share</li>
                <li><strong>Right to Delete:</strong> Request deletion of your personal information</li>
                <li><strong>Right to Opt-Out:</strong> Opt-out of the sale of personal information (we do not sell your data)</li>
                <li><strong>Non-Discrimination:</strong> We will not discriminate against you for exercising your rights</li>
            </ul>
        </section>

        <footer>
            <p>&copy; 2026 Community One. All rights reserved.</p>
            <p>Open Navigator is an open-source project licensed under the MIT License.</p>
            <p><a href="https://www.communityone.com">Return to Home</a> | <a href="https://github.com/getcommunityone/open-navigator-for-engagement">View on GitHub</a></p>
        </footer>
    </div>
</body>
</html>