Privacy Policy

1. Overview

This policy explains what personal data Time for Impact ("TFI", "we", "us") collects, why we collect it, who we share it with, and the choices you have. By using TFI you agree to this policy.

On TFI, people who offer their time, services, or gifts are "Volunteers," and people who make a charitable donation in exchange for an offering are "Donors." Most accounts can act as either, and this policy applies to your data in both roles.

2. Data we collect

• Account details: your name, email address, and password (stored hashed by our authentication provider).
• Profile content: your bio, profile image, and the charities you select.
• Booking & donation records: bookings you make (as a Donor) or receive (as a Volunteer), and the status and amount of associated donations.
• Scheduling connection: if you connect a scheduling provider (Cal.com, or Calendly where offered), we store access and refresh tokens and your scheduling URL so we can show availability and create bookings.
• Contact form submissions: if you use our contact form, we store the name, email address, and message you submit, along with your IP address, which we use to prevent abuse and rate-limit submissions.
• Technical data: standard log and device data (including IP addresses) generated when you use the platform.

3. How we use your data

• to create and manage your account;
• to operate the platform (display profiles, enable browsing, scheduling, and donations);
• to send transactional emails such as verification and booking confirmations;
• to protect the platform against fraud and abuse;
• to comply with legal obligations.

4. Who we share data with

We share data with service providers that help us run TFI, including:

• Supabase — database, authentication, and file storage;
• Every.org — to process charitable donations. When you start a donation we pass your name and email address to Every.org to pre-fill the donation form;
• Cal.com — to display availability and create bookings, when you connect it;
• Resend — to send transactional emails such as booking confirmations and contact-form notifications.

Some profile information (such as your name, bio, and selected charities) is publicly visible to other users so that browsing and booking can work. We do not sell your personal data.

5. Cookies

We use essential cookies to keep you signed in and maintain your session. These are required for the platform to function and cannot be switched off while you are logged in. We do not use cookies for advertising or cross-site tracking.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights by contacting us at the address below. If you are in the EEA/UK or California, additional rights under the GDPR or CCPA/CPRA may apply.

7. Data retention

We keep your data for as long as your account is active and as needed to provide the platform, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account by contacting us at the address below; we will then delete or anonymize your personal data, except where we are required to retain it.

8. Security

We use reasonable technical and organizational measures to protect your data, including access controls and encryption in transit. No system is perfectly secure, and we cannot guarantee absolute security.

9. Children

TFI is not directed to children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, please contact us so we can remove it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes we will take reasonable steps to notify you.

11. Contact

Questions or requests about your data? Contact us at support@timeforimpact.co.