PRIVACY POLICY Last updated: [EFFECTIVE DATE]. Beta Bulletin is a service operated by Cascade Venture Labs LLC. This Privacy Policy explains how Cascade Venture Labs LLC ("we," "us," "our") collects, uses, and shares information when you use the Beta Bulletin website and services (the "Platform"). By using the Platform, you agree to this Policy. 1. INFORMATION WE COLLECT. (a) Information you provide: - Account: your email address, and — if you sign in with Google — your name and profile photo; or just your email address if you use an emailed sign-in link. - Profile: display name, bio, home area, and your activities and self-rated skill levels. - Content: events you create (titles, descriptions, meetup location text and map coordinates, gear, notes), trip reports you publish (titles, route or area, optional map coordinates, trip dates, and text) and the photos you upload with them, comments, group-chat messages, join requests and notes, and reports you submit. - Feedback: messages you send us through the feedback form, and the email address you give so we can reply. (b) Information collected automatically: - Usage and device data and server logs (for example, IP address, browser type, pages viewed, and timestamps), processed by our hosting provider to operate and secure the Platform. When you send feedback, we keep a one-way hashed form of your IP address, used only to limit spam. - Essential cookies: a sign-in session cookie that keeps you logged in. We do not use advertising cookies or third-party ad trackers. (c) We do not intentionally collect precise device GPS location; event and trip report "locations" are the text and map points that users choose to enter. When you upload a photo, we remove its embedded metadata — including any GPS coordinates recorded by your camera or phone — before we store it. 2. HOW WE USE INFORMATION. We use information to: create and manage your account; operate and provide the Platform and its features; display your public profile, event participation, and trip reports; send transactional email (sign-in links, and notifications and reminders about events you host or join); maintain safety, moderation, and security (reviewing reports, enforcing rules, banning abusive accounts, and rate-limiting); analyze and improve the Platform; and comply with law. 3. WHAT OTHER USERS CAN SEE. Beta Bulletin is a social platform. Your display name, profile photo, bio, home area, activities and skill levels, the events you host, the trip reports you publish, and your participation in events are visible to other users. Trip reports, including their photos and your display name as the author, are public: anyone can view them, including people who are not signed in. Event content (descriptions, public Q&A, and the roster) is visible according to each event's settings; group chat is visible to the event's confirmed roster. Please do not post anything you do not want other users to see. 4. HOW WE SHARE INFORMATION. We do not sell your personal information. We share it with: - Service providers ("subprocessors") who host and operate the Platform on our behalf, currently: Vercel (hosting and infrastructure), Supabase (database and photo storage), Resend (email delivery), Google (sign-in), and the OpenStreetMap project / Nominatim (map tiles and converting typed location text into map coordinates). When you type an event or trip report location, that text is sent to the mapping service to look up coordinates. - Other users, as described in Section 3. - Legal and safety: to comply with law, enforce our terms, or protect the rights, safety, and property of Cascade Venture Labs LLC, our users, or the public. - Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy. 5. DATA RETENTION. We keep your information while your account is active and as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce agreements. Sign-in link tokens are short-lived and stored only as a hash. You can request deletion of your account and associated personal information (see Section 7); some limited records may be retained where permitted or required by law (for example, for safety, legal, or dispute purposes). 6. SECURITY. We use reasonable technical and organizational measures to protect information, including encryption in transit (TLS), hashing of sign-in tokens, and database access controls. We do not store passwords — sign-in is via Google or an emailed link. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. 7. YOUR CHOICES & RIGHTS. You can review and update your profile in the app, edit or delete your trip reports at any time, and permanently delete your account at any time from your profile page (which deletes your account and profile, deletes events you host, deletes your trip reports and their photos, and removes you from events you joined). You can also request access to or correction of your personal information by contacting us at support@betabulletin.org. Depending on where you live, you may have additional rights — for example, California residents (CCPA/CPRA) have rights to know, delete, and correct their personal information and not to be discriminated against for exercising those rights. We do not sell personal information or "share" it for cross-context behavioral advertising. To exercise a right, contact support@betabulletin.org; we may need to verify your identity. 8. CHILDREN. The Platform is for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information, contact us and we will delete it. 9. INTERNATIONAL USERS. The Platform is operated in the United States and intended for users in the U.S. Pacific Northwest. If you access it from elsewhere, you understand your information is processed in the United States. 10. CHANGES. We may update this Policy from time to time. We will post the updated Policy with a new date and, for material changes, take reasonable steps to notify you. CONTACT: support@betabulletin.org.