Privacy Policy

1. What we collect

Account information: email address, display name (pseudonym encouraged), password hash. If you sign up via Google OAuth, we receive your name and email from Google.

Content you create: forum posts, replies, comments, reactions, CARE Brief answers (stored in your browser via localStorage — not on our servers unless you explicitly submit).

Usage data: pages visited, features used, timestamps. We use this to improve the platform.

Server logs: IP addresses are recorded in standard server access logs (Netlify hosting) and database logs (Supabase). This is standard for all web services.

2. What we DON’T collect

• We do not sell your personal data to advertisers, data brokers, or any third party
• We do not share your data with advertisers
• We do not use your data for targeted advertising
• We do not collect browsing history outside BringThisIn
• We do not use tracking pixels or third-party analytics that identify you personally

3. How we use your information

• To operate the platform (display your posts, manage your account)
• To moderate the community (review flagged content)
• To improve the platform (aggregate usage patterns)
• To communicate with you (account-related emails, terms updates)
• To comply with legal obligations

4. AI-generated content and your data

Research content on BringThisIn is produced by AI systems using the Concord Method. Your personal data is NOT used to train AI models.

Community discussion, submitted questions, and condition requests may inform our research priorities — we use community input to decide what topics to investigate next. Your individual posts are not used to train AI models, but the topics and questions you raise help shape our research agenda.

For more on how AI-generated content is handled in the community, see our Terms of Service §4.

5. Cookies

We use essential cookies to keep you logged in and remember your preferences. We do not use advertising cookies or third-party tracking cookies. Your CARE Brief answers are stored in your browser’s localStorage (on your device, not our servers).

6. Third-party services

• Supabase: database and authentication (their privacy policy applies to data they process)
• Netlify: hosting (their privacy policy applies to server logs)
• Google OAuth: if you choose to sign in with Google (Google’s privacy policy applies)

We do not use any other third-party services that access your personal data.

7. Your rights and controls

Access: You can view all your account information and posts at any time.

Correction: You can update your display name and email in account settings.

Deletion: You can delete your account through account settings. This anonymizes your posts (author becomes “[deleted]”) and purges your personal data (email, IP logs, metadata). For a complete hard-delete including post content, contact us — we will process within 30 days.

Data export: You can request an export of your data by contacting us at support@bringthisin.com. We will provide your data within 30 days.

Right to erasure (GDPR/CCPA): If you are in the EU/UK or California, you have the right to request complete deletion of all your personal data. Contact us and we will comply within 30 days.

8. IP address logging

We log IP addresses as part of standard server operations (Netlify access logs, Supabase connection logs). We use IP data only for:

• Security (detecting unauthorized access, preventing abuse)
• Legal compliance (responding to valid legal requests)

We do NOT actively use IP addresses for content moderation or user tracking beyond security purposes. We disclose this because transparency matters.

9. Age requirement

You must be at least 18 years old to use BringThisIn. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a minor, we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or an in-platform notification at least 30 days before the changes take effect. The date of the last update and a link to the previous version are displayed at the top of this page.

Mergers, acquisitions, or sale of assets. In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, who will be bound by the same privacy commitments described in this policy.