Privacy Policy

1.1 Information You Provide

When you create an account or use the Platform, you may provide:

• Name and email address
• Phone number (optional, for event notifications)
• City, state, and country (used for location-based event and group discovery)
• Student organization role, affiliation, and academic year
• Profile photo
• Event RSVPs, check-in records, and feedback
• Expense receipts and financial records submitted to your organization's ledger
• Merchandise preorders placed through an organization's catalog
• Announcements and other content you post

1.2 Information Collected Automatically

We automatically collect certain technical information when you use the Platform, including IP address and device type, browser type and operating system, pages visited and features used, and timestamps and session data. We use Vercel Analytics for aggregate, anonymized page-view tracking. We use this information to operate, maintain, and improve the Platform.

1.3 Information from Third-Party Integrations

If you choose to connect your Google Calendar to the meeting availability feature, we request a read-only free/busy token scoped to that session only — no event details are read and no token is stored server-side. We do not support sign-in via Google or university SSO at this time.

3.1 With Other Users

Certain information is visible to other Platform users by design: your name and organization role are visible to other members of your organization; your RSVP status may be visible to organization officers and other attendees depending on the event's privacy settings; content you post publicly is visible to anyone.

3.2 With Institutional Licensees

If your university holds an institutional license — including as part of a founding pilot program — university administrators may access: aggregate engagement analytics (members, events, RSVPs, check-ins) across officially affiliated organizations; roster and contact information for organizations under their oversight; and, at an organization's request or for budget review, that organization's expense and receipt records. Individual-level data shared with institutions is limited to what is necessary for the institution's oversight of officially affiliated organizations.

3.3 With Service Providers

We share information with trusted third-party vendors who help us operate the Platform: Supabase (database, authentication, and file storage), Vercel (hosting, deployment, and anonymized analytics), and Resend (transactional email delivery). These providers are contractually prohibited from using your data for any purpose other than providing services to us.

3.4 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Communily, our users, or the public.

8.1 Account Information

You may update or correct your account information at any time through your account settings.

8.2 Notifications

You can adjust your notification preferences in your account settings, including opting out of event reminders.

8.3 Deletion

You may request deletion of your account and associated personal data by contacting us at communily.support@gmail.com. We will process deletion requests within 30 days, subject to any legal retention obligations.

8.4 Data Portability

Organization officers may export member attendance records and expense ledgers in CSV format from the dashboard. Contact us at communily.support@gmail.com if you need additional assistance accessing your data.