Privacy Policy

Welcome to Favrhood. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our platform.

1. Information We Collect

1.1 Information You Provide

Favrhood does not display home addresses publicly. Location information is shown at a neighborhood or community level by default. You control what information appears on your profile and how you engage with other users.

• Account Information: Email address, username, password, profile picture, bio, and location (neighborhood)
• Profile Data: Skills, interests, project information, business details, and club memberships
• Communication Data: Messages, notifications, and other communications within the platform
• User-Generated Content: Posts, projects, clubs, and other content you create or share

1.2 Automatically Collected Information

• Usage Data: How you interact with our platform, pages visited, features used
• Device Information: Browser type, IP address, operating system, device identifiers
• Location Data: Approximate location based on IP address (if you choose to share precise location)
• Cookies and Similar Technologies: We use cookies to maintain your session and improve user experience. Favrhood™ does not currently respond to "Do Not Track" signals.

1.3 Third-Party Authentication

When you sign in using Google OAuth, we receive your email address, name, and profile picture from Google. We only receive basic profile information that you authorize Google to share with us. We do not receive or store your Google password.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Create and manage your account
• Enable you to connect with other users in your neighborhood
• Facilitate project collaborations, clubs, and business discovery
• Send you notifications about messages, clubs, and other platform activities
• Respond to your requests, questions, and feedback
• Detect, prevent, and address technical issues and security threats
• Analyze usage patterns to improve our platform
• Comply with legal obligations

3. Information Sharing and Disclosure

3.1 Public Information

Your profile information, including username, bio, skills, projects, and clubs, is visible to other users in your neighborhood or community. You control what information appears on your profile.

3.2 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3.3 Service Providers

We may share your information with trusted service providers who help us operate our platform, including:

• Supabase: Database and authentication services
• Hosting Providers: To store and serve our application
• Analytics Services: To understand usage patterns and improve our services

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

3.4 Third-Party Services

Favrhood relies on certain third-party infrastructure providers to operate the service. These services may process limited personal data solely on our behalf and under contractual obligations to protect that data. These include:

• Authentication and database services (Supabase)
• Hosting and content delivery (Vercel and related infrastructure providers)
• Email and notification delivery providers
• Google OAuth authentication (when a user chooses to sign in with Google)

We do not allow these providers to use personal data for their own marketing purposes.

3.5 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety, or that of our users or the public.

3.6 Content Moderation and Safety

To help maintain a safe and respectful community, Favrhood may review user-generated content through automated tools and, where necessary, manual review. Content may be reviewed in response to user reports, suspected policy violations, or safety concerns. These reviews are conducted solely to enforce community guidelines, protect users, and comply with legal obligations.

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

• SSL/TLS Encryption: All data in transit is encrypted using SSL/TLS (TLS 1.2+), enforced via Vercel's HTTPS infrastructure and the Strict-Transport-Security header
• Password Security: Passwords are hashed using bcrypt and never stored in plain text, handled by Supabase Auth
• Database Security: Data at rest is stored in Supabase PostgreSQL with Row-Level Security (RLS) policies restricting access
• Access Control: Access to personal data is restricted to authorized personnel only via API authentication and RLS policies
• Regular Security Reviews: We conduct comprehensive security audits quarterly to review API endpoints, authentication mechanisms, and dependencies

For more details about our security practices, including our vulnerability disclosure procedures, audit schedule, and dependency update process, please see our Security Policy.

5. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your profile information at any time
• Deletion: Request deletion of your account and personal data
• Data Portability: Request a copy of your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications (if any)
• Withdraw Consent: Where we rely on consent, you may withdraw it at any time

To exercise any of these rights, please contact us using the information provided below.

6. In-Person Interaction Disclaimer

Favrhood facilitates connections between community members but does not monitor or record in-person interactions. Users are responsible for deciding what personal information to share and for taking appropriate precautions when meeting others offline.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal data within a reasonable timeframe, typically within 30 days, except where we are required to retain it for legal, regulatory, fraud prevention, dispute resolution, or safety-related purposes.

8. Children's Privacy

Favrhood is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly. Parents or guardians who believe their child has provided personal information may contact us for removal.

9. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of Favrhood™ after changes are posted constitutes your acceptance of the updated policy.

11. International Users

Favrhood is operated in the United States. If you are accessing our services from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the U.S. where our servers are located. By using our services, you consent to this transfer. We rely on standard contractual safeguards or other lawful transfer mechanisms where required by applicable law.

12. Account Deletion

Users may request deletion of their account and associated personal data at any time by either:

• using the account deletion option within the application settings (if available), or
• contacting us at support@favrhood.com.

Upon receiving a deletion request, we will permanently delete or anonymize personal data associated with the account within a reasonable timeframe, except where retention is required for legal, safety, fraud prevention, or dispute-resolution purposes.

13. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us at:

Privacy inquiries and data requests: support@favrhood.com

14. Additional Rights for EU and California Residents

If you are a resident of the European Union or California, you may have additional rights under GDPR or the California Privacy Rights Act (CPRA), including:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights
• Right to lodge a complaint with a supervisory authority