Privacy Policy

• Account data: name, email address, and password (hash-only, never stored in plaintext) when you register or join a membership tier.
• Profile data: the bio, ZIP code, and optional full address you voluntarily enter on your member dossier. Location is used only to power your maps and monitors.
• Member content: forum posts, comments, direct messages, resource pins, and images you upload.
• Readiness data: your assessment responses and computed readiness score.
• Billing data: membership tier and subscription status, processed through Base44 Payments (Wix). Card numbers never touch our servers — they are entered on the secure checkout page only.
• Usage data: anonymized analytics events (e.g. page views) to improve the Service. No cross-site tracking.

• To create and authenticate your account and deliver the membership tier you selected.
• To render your profile, forum activity, maps, and off-grid intelligence monitors.
• To route direct messages between members you explicitly choose to contact.
• To process payments and fulfill or revoke subscription access via the payment webhook.
• To send transactional emails (enlistment confirmations, support replies, password resets).
• To maintain platform security, enforce tier-based access, and prevent abuse.

We never use your data to build advertising profiles or train third-party models.

We do not sell, rent, or share your personal data with third parties for their own marketing or commercial use.

• Service providers (processors only): we rely on trusted infrastructure to run the Service — our hosting and database platform (Base44), our payment processor (Base44 Payments, powered by Wix), and optional live-data feeds (e.g. NWS, EPA AirNow, USGS, PurpleAir, TomTom traffic). Each receives only the minimum data needed to perform its function and is bound by its own privacy and security obligations.
• Other members: the name, forum posts, and resource pins you create are visible to the community by design. Direct messages are visible only to you and the recipient (and platform administrators for abuse moderation), not to other members.
• Legal compliance: only if compelled by a valid legal request, and only the specific data required.

We do not share data with data brokers, ad networks, or social platforms.

• Encryption in transit: all traffic to and from the Service uses HTTPS/TLS.
• Row-Level Security: your profile, messages, and readiness data are gated so only you and authorized roles can access them — one member cannot read another's private records.
• Least-privilege access: backend functions run with the narrowest permissions needed; privileged operations require an admin role.
• Hashed credentials: passwords are never stored in plaintext or readable by us.
• Payment isolation: card data is handled entirely by our PCI-compliant payment provider; we never receive or store full card numbers.
• Continuous monitoring: access logs and a security scan surface anomalies for review.

No method of transmission or storage is 100% secure, but we apply strong, industry-standard safeguards and continuously review them.

• Access & update: edit your bio, location, and address anytime from your profile dossier.
• Direct messages: you control whom you contact; you may delete your own messages.
• Cancellation: cancel your membership at any time — see the Need Help page for instructions.
• Opt-out of analytics: analytics can be disabled in your session.
• Account removal: contact support to request deletion of your account and associated data.

We retain your data for as long as your account is active. After cancellation or account deletion request, we remove personal data except where retention is required for billing records, fraud prevention, or legal compliance.

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a minor has registered, contact us and we will remove the data.

We may update this policy as the Service evolves. Material changes will be posted here with a new "last updated" date. Continued use after a change constitutes acceptance.

Questions about this policy or your data? Reach the Company through the Need Help page. We aim to reply within 24 hours.