Privacy Policy

RallyAid, Inc. ("RallyAid," "we," "our," or "us") is a Delaware Public Benefit Corporation dedicated to empowering civic engagement, peaceful protest, and community-driven activism. As a Public Benefit Corporation (PBC), we are legally obligated to consider the impact of our decisions on society, not just our shareholders or users.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform at rallyaid.com and any associated mobile applications (collectively, the "Services"). This policy applies to all users, organizers, co-organizers, attendees, and visitors.

By using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you disagree with any part of this policy, you must discontinue use of our Services.

2.1 Information You Provide Directly

• Account registration data: full name, email address, phone number, profile photo, and biography
• Rally creation data: event title, description, location, date/time, permits, and supporting documents
• Financial information: donation amounts, payment method details (processed via third-party payment processors; we do not store full card numbers)
• Identity verification: government-issued ID images submitted for official account verification
• Communications: messages, comments, discussion posts, probe submissions, and other content you create on the platform
• Safety check-in data: location descriptions and safety status you voluntarily share during events
• Emergency contact information you provide for safety notifications
• Documents and media: permits, licenses, rally kit files, photos, and videos uploaded to the platform
• Organization registration documents: articles of incorporation, 501(c)(3) determination letters, and other credentials
• Subscription and billing information: plan selections, billing cycle preferences (not full card numbers)

2.2 Information Collected Automatically

• Device information: IP address, browser type, operating system, device identifiers
• Usage data: pages visited, features used, click-through data, session durations, referral URLs
• Location data: approximate location derived from IP address; precise GPS location only if you explicitly enable location features such as Local Rallies or carpool coordination
• Cookies and tracking technologies: session cookies, persistent cookies, web beacons, and pixel tags
• Log data: server logs, access times, error reports, and diagnostic data
• Performance metrics: app loading times, error rates, and feature engagement rates used to improve service quality

2.3 Information From Third Parties

• Social login providers (e.g., Google, Apple) if you choose to authenticate through them
• Payment processors (e.g., Stripe) for transaction verification, fraud prevention, and payout processing
• Municipal and government databases for official account verification and permit cross-referencing
• Public records for verifying organizational status (e.g., 501(c)(3) status, business registration)
• Identity verification services for official account applicants and high-value probe reward recipients

3.1 Service Operation

• Create and manage your account and profile
• Process rally registrations, donations, subscription payments, and probe reward transactions
• Facilitate communication between organizers, attendees, officials, and legal observers
• Enable safety features including check-ins, emergency contact notifications, and jurisdiction alerts
• Power our Voice Power, engagement streak, badge, and gamification systems
• Deliver real-time notifications about rally updates, schedule changes, and safety alerts
• Process refund requests in accordance with our Refund Policy

3.2 Platform Improvement & Safety

• Analyze usage patterns to improve platform features, design, and performance
• Detect and prevent fraud, abuse, spam, and illegal activity
• Moderate content in accordance with our Community Rules
• Train and improve our AI-powered safety and jurisdiction alert systems (only using aggregated, de-identified data)
• Conduct research and analytics to advance our public benefit mission and publish impact reports

3.3 Communications

• Send transactional emails (e.g., registration confirmations, donation receipts, subscription invoices)
• Deliver platform notifications and safety alerts
• Notify you of changes to our policies, platform features, or terms
• Send marketing and promotional communications (opt-out available at any time via account Settings or unsubscribe link)

3.4 Legal & Compliance

• Comply with applicable federal, state, and local laws and regulations
• Respond to lawful legal process, court orders, or government requests
• Enforce our Terms, User Agreement, and Community Rules
• Protect the rights, property, and safety of RallyAid, our users, and the public
• Maintain tax records and fulfill IRS and financial reporting obligations

4.1 With Other Users

• Your public profile (name, bio, Voice Power level, badges) is visible to other platform users
• Rally organizer names and contact info are visible to registered attendees
• Content you post publicly (comments, discussion posts, rally updates) is visible to all platform users
• Carpool and resource listings show your general neighborhood/ZIP area but never your precise home address
• Anonymous probe submissions do not expose your identity to organizers or other users

4.2 With Government & Law Enforcement

• Rally permit and licensing documentation may be shared with relevant municipal authorities as required by law or our permitting coordination process
• Verified official accounts (government agencies, law enforcement) can view rally information and submitted permits in their jurisdiction
• We cooperate with law enforcement requests that comply with applicable legal standards, including valid subpoenas, court orders, and search warrants
• We will notify you of government data requests to the extent permitted by law, unless prohibited by a court-issued gag order
• We will challenge overly broad or legally deficient government demands for user data
• We may disclose data without notice when we have a good-faith belief that disclosure is necessary to prevent imminent physical harm to you or others

4.3 With Service Providers

We share limited data with trusted third-party service providers who assist in operating our platform, including:

• Cloud hosting and infrastructure providers (e.g., data centers, CDN providers)
• Payment processors (e.g., Stripe) for transaction processing and fraud detection
• Email delivery services for transactional and marketing communications
• Analytics platforms for aggregate usage analysis (data is de-identified where possible)
• Identity verification services for official account verification

All service providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing services to us.

4.4 Corporate Transactions

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our platform at least 30 days before your data is transferred and becomes subject to a different privacy policy. Any successor entity will be required to honor the commitments made in this Privacy Policy.

We implement industry-standard technical and organizational security measures to protect your personal information:

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

Depending on your location, you may have the following rights regarding your personal data:

We use cookies and similar technologies to enhance your experience, analyze usage, and support platform operations. You can control cookie preferences through your browser settings or our Cookie Preference Center (accessible from the platform footer).

The Accountability Hub and Probe system involve special categories of data and heightened privacy considerations:

9.1 Accountability Profiles

• Accountability profiles are based on publicly available information and community-submitted evidence relating to public officials, organizations, companies, and public figures in their official or public-interest capacity.
• Private citizens may only be profiled when a documented, moderation-approved public-interest basis exists. All private citizen profiles require heightened review and must not contain home addresses, private phone numbers, financial accounts, or information about family members or minors.
• Subjects of accountability profiles have a right to request correction, dispute, or removal of inaccurate information by contacting accountability@rallyaid.org.
• Evidence submitted by community members is retained for moderation and corroboration tracking. Anonymous submissions do not expose submitter identity to the profiled subject or other users.
• Accountability profile data may be accessible via our Officials API to verified government accounts within their jurisdiction.

9.2 Probe Submissions

• Probe submissions are treated as confidential until reviewed and awarded. Submitter identity is not disclosed to the organizing party unless the submitter consents or reward payment requires identity verification (IRS $600 threshold).
• Anonymous probe submissions are supported. We do not store personally identifying metadata about anonymous submissions beyond what is needed for fraud prevention.
• Probe reward recipients receiving over $600 in a calendar year are subject to IRS 1099 reporting requirements and must provide identity verification information which is stored securely for tax compliance for 7 years.

RallyAid is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without verified parental consent, we will take steps to delete that information within 72 hours of discovery.

If you believe we may have collected information from or about a minor, please contact us immediately at support@rallyaid.app. We treat reports involving minors as high-priority and will respond within 24 hours.

RallyAid is headquartered in the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission for EEA transfers
• UK International Data Transfer Agreements (IDTAs) for UK transfers
• Data Processing Agreements with all sub-processors compliant with applicable data protection law

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Send an email notification to all registered users at least 30 days before the change takes effect
• Display a prominent in-app banner notifying you of the change
• Provide a summary of what changed and why