Privacy Policy

What we collect

• Directory profile: your name, email, phone, website, title, company, area served, social links, birthday (month and day) and headshot, as provided when you joined or edited by an admin at your request.
• Account: your email and a securely hashed password. We never store your password in readable form.
• What you post: posts, photos and documents you attach, comments, likes, saved posts, reports you send, and members you block.
• Technical: a login cookie that keeps you signed in, the date you last used the community, and, if you allow notifications in the iPhone app, a notification token for your device. We don't use advertising trackers, we don't track you across other apps or sites, and we don't sell data.

How it's used

To run the community: showing your profile to other logged-in members, displaying what you post, sending event information you ask for, and keeping the space safe. Admins can see member records, change history, and reports.

Who can see it

Only logged-in members and admins. Nothing in the community is public or indexed by search engines. We use service providers to host the app and store its data (Vercel and Sanity), to sync membership status from our membership platform (Kajabi via Zapier), to deliver notifications to the iPhone app (Apple Push Notification service) and to send account emails such as password resets (Resend). They process data on our behalf and only for those purposes.

Your choices

• Edit your directory profile yourself from the Account page, hide your email from other members, or hide your whole listing from the directory while staying a member.
• Turn notifications off at any time in your iPhone's Settings. The app works the same without them.
• Delete your account from the Account page. This permanently removes your login, profile, posts, comments and saves.
• Block other members so you no longer see what they post.

Retention

We keep your information while you are a member. When you delete your account or your membership ends and an admin removes you, your profile and content are deleted. A minimal change log (for example, that an account was deleted and when) is kept for administrative records.

Contact

Privacy questions or requests: rafi@stoyc.com.