Skip to content
New to Catchafire? Register. Or sign in here.
Search icon

Privacy Policy

Last Updated: November 2, 2026

Your privacy is important to us, and we are committed to being transparent about how and why we collect, use, and share your information.

1. SCOPE OF OUR PRIVACY POLICY

This Privacy Policy applies to the information we collect on www.catchafire.org (our “Site”) and through any of the services we provide on or in relation to our Site (our “Services”).

This policy covers users who have registered accounts on our Site (“Members”) and non-registered users who visit our Site or engage with any of our Services (“Visitors”).

Our Services include the specific features offered on our Site, as well as off-Site activities including customer support, nonprofit advisor services, in-person events, information sessions, and other similar activities that support our mission of connecting skilled individuals with nonprofits and social good organizations for mutually meaningful and impactful volunteer experiences.

We only collect information about you that we need in order to provide our Services. We do not collect information about you that is unrelated to our ability to provide our Services.

This policy also covers our data sharing practices with third party providers that we may contract with in order to provide our Services (“Authorized Third Parties”). The specific data that we share with Authorized Third Parties, or information that you choose to share with Authorized Third Parties on our Site or via any of our Services, however, is subject to the privacy policies of those Authorized Third Parties, and is not covered by our Privacy Policy.

In addition, as with any website or internet service, there is a chance that your information may be accessed unlawfully by third parties (“Unauthorized Third Parties”), and while we take every reasonable measure to prevent unauthorized access, this Privacy Policy does not cover data obtained by Unauthorized Third Parties.

Please note that your use of the Site and any of our Services is subject to our Terms of Use, which you may access at the bottom of our homepage. If you do not agree with our Privacy Policy or Terms of Use, do not access our Site or use our Services. If you wish to deactivate your account, please email us at help@catchafire.org.

By using or continuing to use the Site or any of our Services, you acknowledge you have read and understand this Privacy Policy and agree to our Terms of Use, which are incorporated by reference. Where we rely on consent as the legal basis for processing your personally identifiable information, we will obtain your affirmative consent through clear opt-in mechanisms at the point of collection. You may withdraw your consent at any time; however, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Where we rely on other legal bases for processing (such as contractual necessity or legitimate interests), your continued use of the Site or Services constitutes your acknowledgment of such processing as described herein.

What this means: This Privacy Policy explains how we collect, use, and share your information when you use our Site and Services. It applies to both registered Members and non-registered Visitors, and covers our data sharing practices with Authorized Third Parties that help us provide our Services.

2. WHAT INFORMATION WE COLLECT

We collect two types of information from Users: personally identifiable information ("PII"), and non-personally identifiable information ("Non-PII").

A. Personally Identifiable Information

    • PII consists of personal information that can be used by itself to identify you specifically as an individual. For example, you may submit and we may collect your name, email address, ZIP code, phone number, or similar information through our Site or Services.

B. Non-Personally Identifiable Information 

    • Non-PII consists of information that cannot by itself be used to identify you specifically as an individual. Examples of Non-PII that we may collect on our Site include, but may not be limited to, your browser type, pages viewed, length of time spent, and the content with which you engaged on our Site, such as project listings, applications and user-to-user messages. We may also automatically collect information about your computer and internet connection, including your device or computer operating system, IP address, browser type, and browser language. We may also collect information about the location of your device, including general location derived from your IP address, for purposes of enhancing or facilitating the Services; if you do not want to share your location, you can disable location sharing in the settings on your device. This information helps us improve your experience with our Site and Services.

C. Audio, Video, and AI-Processed Information

    • If you participate in a video call hosted on our Site, we may collect audio and video recordings of such calls, but only if all participants expressly consent to being recorded. Where recordings are made with your consent, we may process the audio using artificial intelligence (“AI”) tools to generate insights, including for internal quality assurance purposes.  We apply data minimization principles to limit the information shared with AI service providers to what is reasonably necessary for the applicable function. Third-party AI service providers are bound by contractual obligations to keep your information confidential, use it only for the purposes for which we disclose it to them, and not use your information to train their own models unless expressly authorized by us and disclosed to you. You may withdraw your consent to recording at any time during a call, and any unprocessed audio will not be further processed following such withdrawal.

The following section describes how we collect and use your information.

What this means: The information we collect about you on our Site and via our Services is used to provide our Services and improve your user experience. Only some of this information is considered PII, which means it could be used on its own to identify you specifically as an individual. We may also collect audio and video recordings with your consent, and process such recordings using AI tools to generate insights and improve our Services.

3. HOW WE COLLECT AND USE YOUR INFORMATION
This section describes: (a) how we collect your information, including the types of information we collect and the methods by which we collect it; and (b) how we use the information we collect about you.

A. Information you provide to us and who can see it

  • When you create an account with Catchafire (i.e., when you register and become a Member) you may provide personal information about yourself, such as your name, email address, phone number, ZIP Code, job title, profile image, and work experience.

  • If you register as a staff member of an organization, you may also provide information about your organization and your role at the organization, such as your organization’s cause area, number of staff members, operating budget, and other similar information. We may use this additional information to personalize and enhance your user experience on our Site and with any of our Services, and to help match you with the best possible volunteer for your needs. Please note that organizations registering for a foundation or corporate partnership program are not required to provide any payment or credit card information.

  • If you register as a volunteer, you may also provide information about yourself such as cause areas you are passionate about, your professional skills, your work experience, and any biographical information that you wish to share. We may use this additional information to personalize and enhance your user experience on our Site and with any of our Services, and to help match you with the best possible volunteer opportunity.

  • Some of the personal information we collect, including your name and email address, is required in order to create an account and use our Site. Other personal information, such as phone number, is optional but not required. You may also choose how much detail to provide to us. For example, Users who register as volunteers must provide at least one current or prior work experience or academic program, but may choose to provide their full academic and professional experience. Providing more detail enhances your experience with our Site and Services.

  • When you use our Site or any of our Services, we may also collect information about what you do on our Site, such as which projects you post or apply to, testimonials you write for volunteers or organizations you have worked with, and which other Members you interact with. We may use this information to enhance your user experience and to personalize our Services. An example is that when you contact customer support, we may look up your recent activity in order to better assist you.

  • Certain personal information of Members, such as first name and limited profile information, is made available to other Members when required to provide our Services. For example, when facilitating a match between a volunteer and an organization, we may share limited profile information necessary to complete the engagement.

  • Limited personal information of Members may be available to Visitors. For example, information such as your first name, organization or employer name, professional skills, work experience, and profile image may be displayed publicly on our Site so that organizations and volunteers can understand how the Site and Services work.

  • Volunteer opportunities posted by organizations on our Site may be also displayed on other Authorized Third Party websites, such as LinkedIn or, under certain circumstances, via other affiliated organizations that have partnered with us to provide skilled volunteer opportunities. We enable these integrations in order to provide our Services, and in support of our mission of providing individuals with the opportunity to use their skills and talents for the greater good.

  • We only ask for, collect, and share the personal information that we need in order to provide our Services, and we take all reasonable actions to keep your personal information secure.

    We do not share your PII with third-party advertisers, and we do not display third-party advertisements to you anywhere on our Site or through any of our Services.

  • We may deidentify, aggregate, or anonymize information so that it will no longer be considered PII and use or disclose it without restriction for a variety of business purposes, including to analyze trends, improve our Services, and conduct research. Once deidentified, we do not attempt to reidentify the data, and we implement technical, organizational, and contractual measures to prevent reidentification by us or third parties. Our use and disclosure of deidentified, anonymized, or aggregated information is not governed by this Privacy Policy.

  • You can change or remove your personal information at any time by logging into your account and following the prompts to modify your profile, or by contacting us at help@catchafire.org. You can also deactivate your account at any time by contacting us. 

What this means: You provide personal information in order to create your account and to take full advantage of our Site and Services. We may share limited profile information with other registered Members for the sole purpose of providing our Services. We may also share limited personal information about you with non-registered Visitors. We do not share your PII with third-party advertisers. We may deidentify, aggregate, or anonymize your information for business purposes, and such deidentified information is not governed by this Privacy Policy.

B. Cookies, beacons, and log files

  • Like most websites, we use cookies and other technologies to recognize you in order to enhance your user experience. The following technologies (collectively, “Technologies”) may be used by us, as well as third parties that provide content or other functionality on the Site, to automatically collect information through your use of the Site and Services: (a) Cookies — small data files stored on the hard drive of your computer either for the duration of your visit (“session cookies“) or for a fixed period (“persistent cookies”), which may include both first-party cookies (set by us) and third-party cookies (set by our partners and service providers); (b) Web Beacons — small files embedded in webpages, applications, and emails (also known as “clear gifs,” “pixel tags,” or “single-pixel gifs”) that collect information about engagement on our Site; (c) JavaScripts — code snippets embedded in various parts of the Site that facilitate a variety of operations, including accelerating the refresh speed of certain functionality or monitoring usage; (d) Entity Tags — HTTP code mechanisms that allow portions of the Site to be stored or “cached” within your browser; (e) HTML5 Local Storage — which allows data from the Site to be stored or “cached” within your browser; and (f) Resettable Device Identifiers — identifiers found on mobile devices and tablets (such as the “Identifier for Advertisers” or “IDFA” on Apple iOS devices and the “Google Advertising ID” on Android devices) used to make online content more relevant. These Technologies collect information such as URLs you came from and go to, your browser and operating system information, your IP address, your mobile provider, and your mobile device. Cookies can enhance your online experience by saving your preferences and password, so you do not have to re-enter this information each time you visit the Site.

  • Most web browsers automatically accept cookies, but you can configure your browser to stop accepting new cookies, to notify you when a new cookie is received, and to delete existing cookies. Each browser is different, but many common browsers have preferences that may be adjusted to allow you to either accept or reject cookies and certain other Technologies before they are set or installed, or allow you to remove or reject the use or installation of certain Technologies altogether. We recommend that you refer to the “Help” menu in your browser to learn how to modify your browser settings. If you choose to disable cookies in your browser, however, you may be unable to take full advantage of all the Site’s features. The Site may contain links, content, or references to other websites or applications run by third parties, including advertisers, ad networks, content providers, and application providers. These third parties may use cookies or other tracking technologies to collect information about you when you interact with their content on the Site. We do not control these third parties’ tracking technologies or how they may be used, and this Privacy Policy does not cover the use of tracking technologies by any third parties. We encourage you to read the privacy statements and terms and conditions of each third-party website and application with which you interact.
  • When you are using our Site, we also gather basic information (log files) from your browser, which may include your IP address, browser type, ISP, and date/time stamps. We may collect these data in order to analyze trends, administer the site, identify bugs, and gather broad demographic information. We do not share log files with third parties for their own independent purposes. We may disclose log files to service providers that process such data on our behalf subject to confidentiality obligations, but such providers are not permitted to use log data for purposes unrelated to providing services to us.
  • The Site may use Google Analytics, and other analytic service providers, which use cookies and similar technologies to collect and analyze information about use of the Site and report on activities and trends. These services may also collect information regarding the use of other websites, apps, and online resources. You can learn about Google's practices by going to www.google.com/policies/privacy/partners/, and opt out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

What this means: We use cookies and other tracking technologies (such as web beacons, JavaScripts, and device identifiers) to recognize you and enhance your experience on our Site. You can manage your cookie preferences through your browser settings, though disabling cookies may limit certain Site features. We may also use analytics services such as Google Analytics to understand how our Site is used. For information about Do Not Track and Global Privacy Control signals, please see the "Your Privacy Choices and Rights" section below.

C. Information from other websites

  • When associating your Catchafire account with other Authorized Third Parties you have an account with, we will collect any information that you make available from those accounts. We collect this information to improve our Services and your user experience on the Site. For example, you can choose to connect your LinkedIn account so that you can import your work experience and profile image to your Catchafire profile, instead of entering it in manually.

D. Information we get about you from other sources

  • We may receive information about you from other sources, including from third-party services and organizations who have the right to provide us with such information, and add it to our information. We protect this information according to the practices described in this Privacy Policy, plus any additional restrictions imposed by the source of the data. These sources may include: publicly available sources such as open government databases or social networks; and service providers who provide us with information, or updates to that information, based on their relationship with you. By gathering additional information about you, we can correct inaccurate information and enhance the security of your transactions.

What this means: We collect information from your accounts with Authorized Third Party websites and companies when you choose to associate those accounts with your Catchafire account. Our supported integrations with Authorized Third Parties, such as LinkedIn, are designed to enhance your experience with our Site and Services.

E. How we use your information

We may use the information we collect about you for a variety of purposes, including to provide our Services, for administrative purposes, and to market our Services. In addition to the uses described in this section, we may use your PII to:

  • operate, maintain, improve, personalize, and analyze the Site and Services;

  • monitor and analyze trends, usage, and activities;

  • detect, prevent, or investigate security breaches, fraud, and other unauthorized or illegal activity;

  • carry out our obligations and enforce our rights arising from any contracts entered into between you and us;

  • maintain appropriate records for internal administrative purposes;

  • send promotional communications, such as information about features, newsletters, offers, promotions, and events (from which you may opt out as described in the “Choice” section below); and

  • develop, test, and improve new products or services, including by conducting surveys and research.

What this means: We use your information to operate and improve our Site and Services, keep our platform secure, communicate with you, and send you promotional materials (which you can opt out of). We may also use your information to develop and test new products and services.

F. Signing in with Google

If you choose to sign up for or log in to Catchafire with your Google account, Google shares the following information with us, with your permission: your name, email address, Google account ID, and basic profile information.

How we use it. We use this information only to create your Catchafire account, fill in your registration details, and let you sign in securely. For Catchafire staff accounts, we also use it to confirm the sign-in comes from an authorized Catchafire email domain.

What we store. We store your Google account ID, email address, and name as part of your Catchafire account. We do not store your Google password, your profile photo, or access tokens, and we do not access your Gmail, Google Drive, Calendar, contacts, or any other Google services.

Sharing. We do not sell Google user data or share it with third parties, and we do not use it for advertising. Information received from Google is handled as described elsewhere in this policy, and we do not transfer it except as needed to provide the service or to comply with the law.

Removing access. You can remove Catchafire's access any time at myaccount.google.com/permissions. To delete your Catchafire account and its data, contact help@catchafire.org.

4. DISCLOSURE OF YOUR INFORMATION TO OTHERS

A. Opt-in requirement

Without your affirmative consent, we will not share your PII with other third parties, except in specific circumstances where we contract with an Authorized Third Party provider (described in this section), and unless required as described under the Required Disclosures section below. In the case of posting a volunteer opportunity and accepting a volunteering match, we regard this as affirmative consent and will disclose limited profile information necessary to complete the engagement with the matched party.

At times we may outsource one or more aspects of our Site or Services to a supplier or service provider who performs services according to our requirements, and these Authorized Third Parties may have access to your PII. For example, in order to facilitate phone calls between Members, we may contract with a third party communications provider, and that provider would require the Member’s phone number in order to perform the required service.

Although we endeavor to select only reputable companies who share our commitment to privacy and will restrict how they use or disclose the PII to which they have access, we are in no way responsible for Authorized Third Parties or their activities. When you use our Site or any of our Services you agree to allow us to share your information, which may include your PII, with Authorized Third Party suppliers and service providers when it is necessary in order for us to provide our Services to you.

B. AI-related disclosures

Improvement of AI. We may share your PII with third-party service providers of products, features, and/or tools powered by AI, machine learning, or similar technologies to assess, develop, improve, and refine predictive and generative modeling and data analytics for purposes of improving the quality and accuracy of our Services.

AI Service Providers. We may share your PII, including audio recordings collected with your consent, with third-party AI service providers in order to process such data and generate insights as described in the “What Information We Collect” section above. Third-party AI service providers are bound by contractual obligations to keep your PII confidential, use it only for the purposes for which we disclose it to them, and not use your PII to train their own models unless expressly authorized by us and disclosed to you. We apply data minimization principles to limit the PII shared with AI service providers to what is reasonably necessary for the applicable function.

Please note that PII that you post on or through public areas of the Site (e.g., publicly-facing profiles or discussion groups) is generally accessible to others and may be collected and used by third parties, which may result in unsolicited contact. Users are encouraged to exercise caution when providing PII in public or interactive areas.

Due to factors beyond our control, we cannot fully ensure that your information will not be disclosed to Unauthorized Third Parties. For example, Unauthorized Third Parties may circumvent our security measures to unlawfully intercept or access your information. Certain information that you provide to us through the registration process (such as name, location, and profile image) could be accessible and made public through syndication programs, search engines, crawlers, and other similar programs.

What this means: We will never share your PII without your affirmative consent, except in cases where we contract with Authorized Third Party providers in order to provide our Services, including AI service providers that help us process data and generate insights, or in cases outlined in the Required Disclosures section below. Information you post in public areas of the Site may be accessible to others. And although we do our very best to protect your data, we can’t guarantee that your information will never be accessed unlawfully by Unauthorized Third Parties.

C. Required disclosures

We make every reasonable effort to preserve your privacy, but we may need to disclose your information when required by law, or if we believe that such action is necessary to:

  • Enforce our Privacy Policy or Terms of Use;

  • Comply with a judicial proceeding, court order, or legal process;

  • Conduct a merger, acquisition or sale (including any transfers made as part of insolvency or bankruptcy proceedings) involving Catchafire or as part of a corporate reorganization, stock or asset sale, or other change in corporate control; or

  • Protect the rights, property, or personal safety of Catchafire, its Members, or others.

  • You authorize us to disclose any information about you to law enforcement or government officials as we, in our sole discretion, believe is necessary or appropriate, in connection with any investigation of illegal activity or that may expose us to liability. 

What this means: We may need to share your personal information when it is required by law, as part of a major corporate transaction, or to help protect the rights and safety of you, us, or others.

5. YOUR PRIVACY CHOICES AND RIGHTS

In accordance with applicable law, you may have the following rights with respect to your PII:

  • Access. You may request confirmation of whether we are processing your PII, obtain access to or a copy of your PII, and receive an electronic copy of PII that you have provided to us, or ask us to send that information to another company (the “right of data portability”).

  • Correction. You may request correction of your PII where it is inaccurate, incomplete, or outdated. You can also change your personal profile information at any time by logging in to your account and editing your profile.

  • Deletion. You may request deletion of your PII held by us. Please note that we may not be able to delete your PII without also deleting your account, and certain information may be retained as required by applicable law or for legitimate business purposes.

  • Restrict or Opt-Out of Processing. You may request to restrict or opt out of the processing of your PII, including for the purpose(s) of: (a) targeted advertising; (b) sale or sharing of PII; or (c) profiling to make decisions that have legal or other significant effects on you.

  • Withdraw Consent. Where your consent is required to process your PII, you may withdraw such consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

  • Automated Decision-Making. To the extent we use automated decision-making, including AI-powered profiling, that produces legal or similarly significant effects concerning you, you may have the right, where required by applicable law, to: (a) be informed that such automated processing is taking place and receive meaningful information about the logic involved; (b) request human review of any decision made solely by automated means; (c) contest the outcome of such automated decision; and (d) opt out of such automated processing.

  • Object to Processing. Where we process your PII on the basis of our legitimate interests, you may have the right to object to such processing on grounds relating to your particular situation. Upon receipt of your objection, we will cease processing your PII unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If you would like to exercise any of these rights, please contact us at help@catchafire.org. We will process such requests in accordance with applicable law. If you are dissatisfied with our response to your request, you may request reconsideration by contacting us in writing. We will inform you of any action taken or not taken within sixty (60) days of receipt of your request for reconsideration, including a written explanation of the reasons for our decision. You also have the right to lodge a complaint with the applicable supervisory authority in your jurisdiction of residence.

  • Non-Discrimination. You have the right not to receive discriminatory treatment for the exercise of your privacy rights.

  • Verification. To protect your privacy, we will take steps to verify your identity before fulfilling your request. When you make a request, we will ask you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected PII or an authorized representative, which may include asking you to answer questions regarding your account and use of our Services.

“Do Not Track” (“DNT”) is a privacy preference you can set in certain web browsers. When you turn on this preference, it sends a signal to the websites you visit indicating that you do not wish to be tracked. We currently do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers. You may also broadcast an Opt-Out Preference Signal, such as the Global Privacy Control (“GPC”) (on the browsers and/or browser extensions that support such a signal). To the extent required by applicable law, we will honor such signals.

To deactivate your account, send an email request to help@catchafire.org from the email address that is currently associated with your account. 

What this means: You have a number of rights with respect to your PII, including the right to access, correct, delete, and restrict processing of your information. You can also change your personal information at any time by logging into your account, and you can deactivate your account by sending an email to help@catchafire.org. We do not respond to legacy “Do Not Track” signals, but we honor Global Privacy Control signals where required by applicable law.

6. AGE RESTRICTIONS

Our Site and Services are directed at a general audience over the age of eighteen (18) and are not intended for children. We do not knowingly collect PII from children under the age of thirteen (13) without verifiable parental consent. If we learn that we have inadvertently collected or received PII from a child under the age of thirteen (13) without appropriate consent, we will use reasonable efforts to immediately delete such information, unless we have a legal obligation to retain it. If you are a parent or legal guardian and believe your child has provided us information without your consent, please contact us at help@catchafire.org. 

What this means: Catchafire is not intended for individuals under the age of 18, and we do not knowingly collect personal information from children under 13.

7. COMMUNICATIONS

Email and telephone

When you register for our Site or Services, we require an email address that can be used for communications between you and us, and between you and other Members.

Email messages may contain code that helps our systems track your usage of these emails, including which links were clicked. If you would rather not receive promotional emails from us, please see the "Choice" section below.

We reserve the right to send you emails regarding service announcements, administrative messages, and Privacy Policy or Terms of Use changes.

We may also contact you by telephone in connection with our Site or Services. Your telephone number may also be used to facilitate phone calls between you and another Member. Your phone number is only provided to another Member with your express consent.

By providing your cell phone number to Catchafire, you consent to receiving informational text messages regarding your Catchafire account. Please be aware that you may opt out of the text messages by notifying Catchafire at help@catchafire.org or through the text message itself. 

If you have any questions, do not hesitate to contact us.

What this means: We use the email address and phone number you provide to us to communicate with you directly, and to facilitate communication between you and other Members. If you give us your cell phone number then you may receive informational text messages from us regarding your account and our Services.

8. CHOICE

You can opt-out of email notifications by changing your preferences in the Communications section of your account profile. You will also have the ability to opt-in in the event that we request to share your information with third-party organizations for their marketing or promotional uses, or for various other programs or features.

If you wish to be removed from any other communications, such as promotional emails or newsletters, simply respond to the link provided in the email, or email us at help@catchafire.org.

You may also choose to deactivate your account at any time, or modify the data in your personal profile.

What this means: You may opt-in or out of emails from us, and you can modify your information or deactivate your account at any time.

9. PRIVACY POLICY CHANGES

We reserve the right to change our Privacy Policy at any time, and will notify Users by posting our updated Privacy Policy on this page. Under certain circumstances, such as significant changes to our Privacy Policy, we may also elect to notify you of updates to the Privacy Policy by additional means, such as by posting a notice on the homepage of the Site, or by sending you an email. Any changes will be effective immediately upon posting to the Site and will be reflected by the “Last Updated” date above. Continued use of the Site and Services following any changes shall indicate your acknowledgement of such changes and agreement to the Privacy Policy.

What this means: We make changes to our Privacy Policy from time to time, and we always publish the current effective version on our Site.

10. DATA RETENTION

We retain your PII for as long as reasonably necessary to fulfill the purposes for which it was collected, manage your relationship with us, and comply with our legal obligations. In determining the appropriate retention period, we consider the nature and sensitivity of the PII, the purposes for which it is processed, applicable legal and regulatory requirements, and applicable statutes of limitations. The following general retention periods apply by category of PII:

  • Account and registration information is retained for the duration of your account and for a reasonable period thereafter as required by applicable law.

  • Transaction information is retained for the period required by applicable tax, accounting, and financial reporting obligations.

  • Activity and usage information is retained for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide and improve our Services, comply with legal obligations, and support our legitimate business interests. We periodically review retained data and delete or anonymize information that is no longer necessary for these purposes.

  • Audio recordings collected with your consent are retained only for so long as necessary to fulfill the specific purpose for which they were collected, including AI processing and quality assurance.

  • Sensitive personal information (if any) is retained only for so long as necessary to fulfill the specific purpose for which it was collected.

Where we retain data, we do so in accordance with our data retention policies and any limitation periods imposed by applicable law. When your PII is no longer required for these purposes, we will securely delete or anonymize it in accordance with our data retention policies.

What this means: We keep your information only for as long as we need it to provide our Services, manage your account, and comply with the law. When we no longer need your information, we securely delete or anonymize it.

11. SECURITY

To protect your privacy and security, we take reasonable steps to verify your identity before granting profile access. You are responsible for maintaining the secrecy of your unique password and account information at all times.

The Site has reasonable safeguards designed to protect against the loss, misuse, and alteration of the information under our control. As our Site and some of our Services are provided via the internet, however, we can make no guarantees that your information will be 100% safe. Any transmission of PII is at your own risk. For this reason we recommend that you take appropriate measures to maintain your data security, such as protecting your passwords, using firewalls, and using anti-virus software on your devices.

If we learn of a security systems breach, then we may attempt to notify you electronically through our Site or by email so that you can take appropriate protective steps. In the event of a data breach involving your PII, we will notify you and the applicable supervisory or regulatory authorities as required by applicable law.

By using our Site or providing personal information to us through any of our Services, you agree that we can communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Site.

What this means: We monitor for and try to prevent security breaches on our Site, and it is up to you to keep your account password secure and protect your personal devices from security breaches.

12. INTERNATIONAL USERS

The Site is hosted in the United States (U.S.). All information that is submitted by you is stored and processed within the U.S., which may not have the same data protection and privacy laws as your country. We endeavor to safeguard your information consistent with the requirements of applicable laws. Where required by applicable law, we implement appropriate safeguards for the transfer of PII to countries outside of your jurisdiction of residence, including standard contractual clauses or other mechanisms recognized under applicable data protection law. By using our Site or Services, you acknowledge and agree that your PII may be transferred to and processed in the United States and other jurisdictions as described in this Privacy Policy.

What this means: Your information may be stored or processed in the United States, which may have different data protection laws than your country. We implement appropriate safeguards for international transfers as required by applicable law.

13. CHANGE OF CONTROL

In the event Catchafire becomes involved in a merger, acquisition, financing due diligence, divestiture, restructuring, reorganization, bankruptcy, dissolution, sale, or transfer of some or all of its assets (whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding), or transition of the Site or Services to another provider, your PII may be sold or transferred to business entities or people involved in such process.

What this means: We don’t plan on selling or merging with another company, but in the event that we do, your information will be transferred to the new owner of our Site and Services.

14. CALIFORNIA PRIVACY NOTICE

California law requires us to disclose certain information related to our privacy practices. This California Privacy Notice supplements the information contained in this Privacy Policy and applies solely to residents of the State of California (“California consumers”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act of 2020 (“CPRA”) (together, the “CCPA”), and any terms defined under the CCPA have the same meaning when used in this section.

  • Categories of Personal Information Collected and Disclosed. In the preceding twelve (12) months, we may have collected and disclosed the following categories of personal information (as defined under the CCPA) for a business purpose: (a) Identifiers, such as name, email address, phone number, and IP address, disclosed to service providers and Authorized Third Parties; (b) Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as name, address, and telephone number, disclosed to service providers and Authorized Third Parties; (c) Internet or other electronic network activity, such as browsing history and interaction with our Site, disclosed to service providers; (d) Professional or employment-related information, disclosed to service providers; (e) Inferences drawn from other personal information to create a profile, disclosed to service providers; and (f) Audio information (where consent to recording is provided), disclosed to AI service providers. The categories of sources from which we collect personal information and our business and commercial purposes for using personal information are set forth in the “What Information We Collect” and “How We Collect and Use Your Information” sections above.

  • Sale or Sharing of Personal Information. We do not sell your personal information in the traditional sense for monetary consideration. However, to the extent that our use of cookies or similar technologies in connection with advertising services may constitute a “sale” or “sharing” of personal information under the CCPA, California consumers have the right to opt out of such sale or sharing by contacting us at help@catchafire.org. You may also broadcast an Opt-Out Preference Signal, such as the Global Privacy Control (“GPC”) (on the browsers and/or browser extensions that support such a signal).
  • Additional California Consumer Rights. In addition to the rights described in the “Your Privacy Choices and Rights” section above, California consumers have the following additional rights: (a) Authorized Agent — you may designate an authorized agent to make a request on your behalf by contacting us at help@catchafire.org and providing written authorization signed by you and your designated agent; (b) Shine the Light — California residents may request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties; and (c) Right to Limit Use of Sensitive Personal Information — California consumers may request that we limit the use of their sensitive personal information to that which is necessary to perform our Services. To exercise any of these rights, please contact us at help@catchafire.org. We will process such requests in accordance with applicable law.

What this means: If you are a California resident, you have specific rights under the CCPA, including the right to know what personal information we collect and disclose, the right to opt out of the sale or sharing of your personal information, and the right to limit the use of sensitive personal information. Contact us at help@catchafire.org to exercise these rights.

15. MULTI-STATE PRIVACY NOTICE

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with applicable consumer data privacy laws (each a “Covered State”) may have additional rights under their respective state privacy laws. This Multi-State Privacy Notice supplements the information contained in this Privacy Policy and applies solely to residents of the Covered States. Any terms defined under the applicable state privacy laws have the same meaning when used in this section.

  • Opt-Out of Sales, Sharing, and Targeted Advertising. Residents of the Covered States may opt out of the “sale” or “sharing” of their personal data, or the processing of their personal data for targeted advertising, by contacting us at help@catchafire.org. We recognize and honor Opt-Out Preference Signals, including the Global Privacy Control (“GPC”) (on the browsers and/or browser extensions that support such a signal), as a valid request to opt out of the sale or sharing of personal data and targeted advertising, as required by applicable state privacy law.

  • Authorized Agent. You may designate an authorized agent to make a request on your behalf by contacting us at help@catchafire.org and providing written authorization signed by you and your designated agent. We will verify your identity and the agent's authority in accordance with applicable law.
  • Limit Use of Sensitive Personal Information / Sensitive Data. Residents of the Covered States may exercise the right to limit the use and disclosure of sensitive personal information or sensitive data to only those uses necessary to perform the services or provide the goods reasonably expected by an average consumer, by contacting us at help@catchafire.org.
  • Profiling. Certain applicable state privacy laws provide residents of the Covered States with the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. To the extent Catchafire engages in profiling that produces legal or similarly significant effects, we will: (a) provide clear notice of such profiling activity; (b) provide a description of the logic used in such profiling, as well as a description of the likely outcome of the profiling with respect to the consumer; and (c) provide consumers with the right to opt out of such profiling. Where required by applicable law, consumers may also request human review of a decision made solely by automated means. To exercise any of these rights, please contact us at help@catchafire.org. Please note that the applicable state privacy laws of Iowa and Utah do not provide a right to opt out of profiling; residents of Iowa and Utah may exercise the opt-out rights available to them as set forth above.
  • Financial Incentives. We do not offer financial incentives, price differences, or service differences in exchange for the retention, sale, or sharing of your personal information or personal data. In the event we offer any such program in the future, we will provide you with the material terms of the program, obtain your opt-in consent, and notify you of your right to withdraw from the program at any time.
  • Right to Appeal. To the extent required by applicable state privacy law, residents of the Covered States may: (a) request to opt out of the processing of personal data for the purpose(s) of targeted advertising, sale of personal data, or profiling to make decisions that have legal or other significant effects; (b) request access to, correction of, or deletion of their personal data; (c) obtain a copy of their personal data in a portable format; and (d) appeal a denial of a privacy rights request. If your request for reconsideration is denied, you have the right to contact the attorney general of your respective Covered State to file a complaint. We will provide information regarding the applicable attorney general contact information in our written response denying your appeal. Residents of Connecticut may file a complaint with the Connecticut Office of the Attorney General by visiting the “File a Complaint” page at https://portal.ct.gov/AG or contacting the Consumer Assistance Unit at 860-808-5420.
  • Additional State-Specific Rights. (a) Delaware, Maryland, and Oregon: You have the right to request a list of the specific third parties to which Catchafire has disclosed your personal data. (b) Minnesota: You have the right to (i) request the specific third parties to whom Catchafire has disclosed personal data and/or (ii) question the results of Catchafire’s profiling to the extent it produced legal effects. Where permitted under applicable law, you may designate an authorized agent to make a request on your behalf. To exercise any of these rights, please contact us at help@catchafire.org. We will process such requests in accordance with applicable law.

What this means: If you live in a state with a consumer data privacy law, you may have additional rights, including the right to opt out of the sale or sharing of your personal data, the right to limit the use of sensitive data, and the right to appeal a denial of a privacy request. Contact us at help@catchafire.org to exercise these rights.

16. NEVADA PRIVACY NOTICE

If you are a resident of Nevada, you have the right to opt out of the sale of certain personal information to third parties who intend to sell or license that information. If you would like to exercise this right, please contact us at help@catchafire.org.

What this means: If you are a Nevada resident, you have the right to opt out of the sale of your personal information. Contact us at help@catchafire.org to exercise this right.

17. CONTACTING US

If you have any questions or comments about this Privacy Policy, our Terms of Use, or our Site or Services please contact us at help@catchafire.org.

What this means: We want to hear from you! Please contact us at help@catchafire.org if you have any questions or concerns about this Privacy Policy.