Volunteeritude

Privacy Policy

Effective Date: December 16, 2025

Version: 1.0

Volunteeritude ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect information about users of our website, mobile application, and related services (collectively, the "Services"). By using our Services, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

Account Registration:

  • Name, email address, username, and password (encrypted)
  • Profile picture or avatar
  • Date of birth (optional, for age verification)
  • Phone number (optional)

Volunteer Profile Information:

  • Bio, skills and interests
  • City, state, and zip code (location data)
  • Volunteer goals and preferences

Organization Profile Information:

  • Organization name, type (nonprofit or institution), and EIN
  • Address, phone, website, and description
  • Logo and branding materials
  • Organization administrator contact details

Volunteer Activity Data:

  • Service logs including date, hours, activity description, and mood/reflection
  • Custom field responses requested by organizations
  • Event registrations and attendance records
  • Organization membership and connection status
  • Awards and recognition data

Payment Information:

  • Billing information for organization subscriptions (processed securely through Stripe; we do not store full credit card numbers)

Communications:

  • Feedback, support requests, and correspondence with our team
  • Feature poll responses and product feedback

1.2 Information We Collect Automatically

Device and Usage Information:

  • IP address, device type, operating system, and browser type
  • Pages viewed, features accessed, and time spent on the Services
  • Referring URLs and exit pages
  • Session duration and interaction patterns

Location Data:

  • Approximate location based on IP address (for event matching and recommendations)
  • Precise location (only if you grant permission through your device settings)

Cookies and Tracking Technologies:

  • Session cookies to maintain your login state
  • Preference cookies to remember your settings
  • Analytics cookies to understand usage patterns (we may use Google Analytics or similar services)

1.3 Information from Third-Party Services

  • OAuth/SSO providers (e.g., Google): name, email, profile picture when you sign in with these services
  • Payment processors (Stripe): transaction information, payment status
  • Email service providers (Postmark): email delivery status
  • Push notification services: device tokens for notifications

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, maintain, and improve our volunteer tracking and management Services
  • Account Management: To create and manage your account, authenticate your identity, and process registrations
  • Hour Tracking & Verification: To facilitate logging volunteer hours, verify service logs submitted by volunteers, and generate reports
  • Event Management: To allow organizations to create events and volunteers to register for opportunities
  • Matching & Recommendations: To connect volunteers with organizations and suggest relevant volunteer opportunities
  • Analytics & Reporting: To generate dashboard metrics, volunteer statistics, and organization reports
  • Communications: To send transactional emails (e.g., verification requests, event confirmations), notifications about your account, and optional promotional updates (with your consent)
  • Payment Processing: To process subscription payments for organizational accounts
  • Customer Support: To respond to inquiries, provide technical assistance, and resolve issues
  • Security & Fraud Prevention: To protect against unauthorized access, abuse, security threats, and fraudulent activity
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes
  • Product Development: To analyze usage patterns, gather feedback, and improve our features and Services

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

With Organizations You Join:

  • When you join an organization or register for an event, we share your volunteer profile information (name, email, service logs, custom field responses) with that organization's administrators
  • Organizations can view your volunteer hours, service log details, event attendance, and any custom information you provide
  • You control which organizations you join and can manage your connections through your account settings

With Service Providers:

  • Cloud hosting providers (e.g., Vercel, AWS, or similar) to host our platform
  • Database providers (e.g., Supabase, Neon) to store and manage data
  • Payment processors (Stripe) to handle billing and subscription management
  • Email service providers (Postmark) to send transactional and notification emails
  • Analytics providers to understand usage patterns and improve Services
  • These providers are contractually obligated to protect your data and use it only for providing services to us

For Legal Reasons:

  • To comply with applicable laws, regulations, subpoenas, court orders, or legal processes
  • To enforce our Terms of Service or protect our legal rights
  • To protect the safety, rights, or property of Volunteeritude, our users, or the public
  • To detect, prevent, or address fraud, security, or technical issues

Business Transfers:

  • In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the successor entity (you will be notified via email or prominent notice on our Services)

With Your Consent:

  • We may share your information with third parties when you explicitly consent to such sharing

Aggregated or De-Identified Data:

  • We may share aggregated or anonymized data that cannot reasonably be used to identify you (e.g., platform-wide statistics)

4. Data Retention

We retain your information for as long as necessary to provide the Services and fulfill the purposes outlined in this Privacy Policy:

  • Account Data: Retained while your account is active and for up to 30 days after account deletion (to allow for recovery)
  • Service Logs: Retained as long as your volunteer profile exists or until you request deletion
  • Audit Logs: Security and compliance logs retained for up to 2 years for legal and security purposes
  • Payment Records: Retained for up to 7 years to comply with tax and accounting regulations
  • Anonymized Analytics: May be retained indefinitely as it cannot be used to identify you

5. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access and Portability:

  • You can access and update your account information at any time through your profile settings
  • You can request a copy of your personal data in a portable format by contacting us at admin@volunteeritude.com

Correction:

  • You can correct inaccurate information directly in your profile settings

Deletion:

  • You can request deletion of your account and associated data through account settings or by emailing admin@volunteeritude.com
  • Note: Some information may be retained in backup systems for up to 30 days and certain records may be kept for legal compliance
  • Service logs verified by organizations may be retained for record-keeping purposes even after account deletion

Communication Preferences:

  • Opt out of promotional emails by clicking "unsubscribe" in any marketing email or through notification settings
  • Transactional emails (e.g., service log verification, password reset) cannot be opted out of while your account is active
  • Manage push notifications through your device or browser settings

Third-Party OAuth:

  • You can disconnect third-party accounts (e.g., Google) through your account settings
  • Review permissions granted to Volunteeritude through your Google Account settings

Do Not Track:

  • We currently do not respond to Do Not Track signals, but you can control cookies through your browser settings

State-Specific Rights (U.S.):

  • California (CCPA/CPRA): Right to know, delete, correct, and opt-out of sales (we do not sell personal information)
  • Other States: Similar rights may apply under Virginia CDPA, Colorado CPA, Connecticut CTDPA, and other state privacy laws
  • To exercise these rights, contact us at admin@volunteeritude.com with "Privacy Rights Request" in the subject line

6. Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit using TLS/SSL protocols
  • Encryption of passwords using bcrypt hashing
  • Secure authentication using NextAuth.js with session-based security
  • Regular security audits and monitoring for vulnerabilities
  • Access controls limiting employee access to personal data on a need-to-know basis
  • Rate limiting and CSRF protection to prevent abuse

However, no system is completely secure. Please use strong, unique passwords and enable any available security features. If you suspect unauthorized access to your account, contact us immediately at admin@volunteeritude.com.

7. Children's Privacy (Ages 13+)

Volunteeritude is available only to users aged 13 and older. We do not knowingly collect personal information from anyone under the age of 13. If you are under 13, please do not use our Services or provide any personal information.

If we learn that we have collected personal information from a user under 13, we will delete that information as quickly as possible. If you believe we may have information from or about someone under 13, please contact us immediately at admin@volunteeritude.com.

For Educational Institutions: Schools and educational institutions using Volunteeritude for students under 18 must obtain appropriate parental consent where required and ensure compliance with FERPA and applicable student privacy laws. We act as a service provider to educational institutions and will handle student data in accordance with your instructions and applicable laws.

8. Geographic Availability

Volunteeritude is currently available only to users located in the United States. All data is collected, processed, and stored within the United States in accordance with U.S. federal and state privacy laws.

By using our Services, you confirm that you are located in the United States and consent to the collection and processing of your information under U.S. law.

9. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services (e.g., organization websites, social media platforms). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information to them.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

  • Posting the updated policy on this page with a new "Effective Date"
  • Sending an email notification to the address associated with your account
  • Displaying a prominent notice on our Services

Your continued use of the Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated policy, you should discontinue use of the Services and may request deletion of your account.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: admin@volunteeritude.com

Subject Line: Privacy Inquiry

We will respond to your inquiry within 30 days of receipt.

Data Collection Summary

For transparency, here's what we collect and why:

Account Info: To create and manage your account

Service Logs: To track and verify volunteer hours

Device Data: To provide and secure our Services

Location: To match you with nearby opportunities

Payment Info: To process organization subscriptions (via Stripe)

Usage Data: To improve our platform and features