Privacy Policy

This Privacy Policy explains how CommunitiWorks (the "Network") collects, uses, and protects personal information for all users, including clients, providers, businesses, and partners.

We are committed to safeguarding your privacy. Personal information collected through the Network is never sold to third parties and is shared outside the Network only as necessary to provide services or comply with legal obligations.

This policy applies to all users interacting with the Network, whether submitting requests, providing services, or browsing public directories.

We collect information necessary to operate the Network safely, facilitate connections, and maintain trust and transparency.

Information is used exclusively to operate and improve the Network, including:

• Service Fulfillment and Matching: Connecting clients with providers based on requests, location, and availability.
• Managing notifications, referrals, and approvals for scheduling and completing jobs.
• Referral Tracking: Recording referral code usage, including cases where a user applies their own code to their own request, to calculate and process referral earnings accurately.
• Client Email Notifications: By submitting a service request, clients consent to receive automated email notifications when providers express interest. Providers never see personal client contact information until the client accepts the request. Clients may manage or revoke these notifications at any time via their dashboard.
• Provider Promotions: Providers may include promotional messages or offers in client notifications. The Network only delivers these messages; providers may not use them to solicit clients off-platform.
• Retention & Deletion for Notifications: Data related to notifications is retained only as necessary for service tracking, dispute resolution, or legal compliance. Clients and providers may request deletion via their dashboard, subject to operational or legal obligations.
• Support and Account Management: Responding to questions or troubleshooting issues.
• Analytics and Improvement: Monitoring usage patterns to enhance reliability and scalability.
• Marketing and Growth: Sharing updates on new services or features only when users opt in.
• Security, Fraud Prevention, and Legal Compliance: Detecting and preventing misuse, spam, or fraud, and complying with applicable laws or valid legal requests.

We do not sell personal information. All data use is strictly tied to providing and improving Network services.

The Network shares personal information only as necessary to provide services or protect users:

• Third-Party Services: Trusted vendors including Stripe, Supabase, and Vercel receive only the data necessary for their functions and are contractually obligated to maintain security.
• Public Business Details: Information included in public directories or profiles, such as business names, service descriptions, or photos, is visible to others.
• Legal and Safety Requirements: Information may be disclosed if required by law, court order, governmental request, or to protect the rights, safety, or property of users or the Network.

We never sell personal information or share data with advertisers or unrelated third parties.

• Data is stored on secure servers provided by trusted partners, primarily in the United States.
• Security practices include encryption, strong passwords, limited administrative access, and continuous monitoring.
• While we strive for the highest security, no system is completely risk-free.
• Information is retained only as necessary for operations, legal obligations, or dispute resolution.
• When no longer needed, data is securely deleted or anonymized.

• Access & Updates: Users may view and update personal information through their dashboard.
• Deletion: Accounts and associated data may be deleted via the dashboard. Data will be removed or anonymized unless retention is required by law, dispute resolution, or agreements.
• Communications: Users may opt out of marketing or non-essential notifications. Service-related messages such as confirmations and critical updates may still be sent when necessary.
• Global Privacy Requests: We honor reasonable privacy requests, including rights to access, correct, or erase data, regardless of location.

• The Network is intended for users 16 years and older.
• We do not knowingly collect data from users under 16.
• Accounts discovered to belong to minors will be deleted upon notification.
• Users 16 to 18 must ensure compliance with local laws; parents or guardians can request removal of accounts.

• Data is encrypted in transit and at rest.
• Access is limited to authorized personnel and trusted partners.
• Strong passwords and two-factor authentication (2FA) are required for administrative access.
• Regular audits, monitoring, and system updates protect against unauthorized access.
• In the event of a data breach, users will be notified promptly with guidance.

The Network may update this Privacy Policy to reflect changes in practices, technology, or legal requirements.

• Material changes will be communicated via email or clear notices on the Network.
• Continued use of the Network constitutes acceptance of the updated policy.