Privacy Policy

1. Introduction

10 Red Balloons™ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our collective action platform.

2. Information We Collect

2.1 Information You Provide

• Email Address: Required for account creation and magic link authentication
• Pledge Commitments: Information about the pledges you join or create
• Profile Information: Optional information you choose to share

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, IP address
• Cookies and Tracking: Session cookies, authentication tokens, preference settings
• Referral Data: Referral codes used, network growth, influence points

3. How We Use Your Information

We use your information to:

• Provide and maintain the Platform
• Authenticate your identity via magic links
• Process and track your pledge commitments
• Calculate and display influence points and rankings
• Send threshold notifications and pledge updates
• Improve platform functionality and user experience
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Cookies and Tracking Technologies

4.1 Types of Cookies We Use

• Necessary Cookies: Required for authentication, session management, and core functionality. These cannot be disabled.
• Functional Cookies: Remember your preferences, pledges, and settings (optional, requires consent)
• Analytics Cookies: Help us understand usage patterns and improve the platform (optional, requires consent)

4.2 Managing Cookie Preferences

You can manage your cookie preferences through our cookie consent banner, which appears on your first visit. You can change your preferences at any time by clearing your browser cookies or adjusting browser settings.

5. Referral System and Network Data

Our referral system collects and processes:

• Referral Codes: Your unique code and codes you use to join
• Network Relationships: Direct referrals and multi-level network structures
• Influence Points: Calculated based on network size and activity
• Leaderboard Rankings: Your relative position based on influence points

This data is used to reward network building and is visible to you and, in aggregated form, to other users through leaderboards.

6. How We Share Your Information

We do not sell your personal information. We may share your information in the following situations:

• With Other Users: Your pledge participation and influence rank may be visible to other users
• Service Providers: We use third-party services for hosting (Vercel), database (Supabase), and email delivery (Resend)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In the event of a merger, acquisition, or sale of assets

7. Third-Party Services

We use the following third-party services:

• Vercel: Hosting and deployment infrastructure
• Supabase: Database and authentication services
• Resend: Transactional email delivery for magic links and notifications

These services have their own privacy policies governing their use of your information.

8. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Secure authentication via magic links (no password storage)
• Regular security audits and updates
• Access controls and monitoring

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We will delete or anonymize your information within 90 days of account deletion, except where longer retention is required by law.

10. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a machine-readable copy of your data
• Objection: Object to certain processing activities
• Withdrawal of Consent: Withdraw consent for optional data processing

To exercise these rights, contact us at privacy@10redballoons.com

11. Children's Privacy

Our Platform is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Platform, you consent to such transfers.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

14. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Right to access and data portability
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Platform. Your continued use after changes constitutes acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at: