Privacy Policy

DRAFT — NOT APPROVED FOR PUBLICATION. This draft reflects the website's current functionality. Items marked [CONFIRM], [UNVERIFIED], or [REQUIRES APPROVAL] require Dr. Darlene Screen's confirmation before publication. We recommend review by a qualified Georgia attorney prior to publication. Nothing on this page is a final legal commitment.

1. Who We Are

The Confident Rose Outreach ("we," "us," "our") operates https://theconfidentrose.org and the membership platform The Global Power & Purpose Hub, together with Soul2Soul Podcast, Speaking & Bookings, Nonprofit Global Trailblazers, Books & Healing Resources, and the online shop.

• Public-facing organization: The Confident Rose Outreach
• Membership platform: The Global Power & Purpose Hub
• Registered legal entity name: [CONFIRM — do not assume the brand name is the legal entity]
• Business mailing address: [CONFIRM]
• Legal/privacy contact: hello@theconfidentrose.org [UNVERIFIED — mailbox functionality must be verified before publication]
• Federal 501(c)(3) status: [UNVERIFIED — we do not represent the organization as IRS-approved or any donation as tax-deductible without supporting documentation]

2. Information We Collect

a. Account registration & authentication

When you create a Hub account with email + password we collect your name, email address, a securely hashed password (bcrypt), the account tier, your email-verification status, and timestamps. Session management uses an HttpOnly, Secure, SameSite=None cookie. We never store plain-text passwords. Email-verification and password-reset tokens are stored as one-way SHA-256 hashes with a 1-hour expiry and single-use enforcement.

b. Google Sign-In

If you choose Google social login we receive your Google account's verified email, display name, and the Google account identifier through the Emergent-managed OAuth flow. We use these values to create or link your Hub account. We do not receive your Google password.

c. Membership and subscription records

For Empowerment or Leadership & Legacy members we store the current membership tier, subscription status (active / past_due / canceled), period end date, and a Stripe-issued customer identifier and subscription identifier.

d. Stripe payment processing

All payments (donations, memberships, merchandise) are processed by Stripe, Inc. Stripe collects your card details directly on its hosted checkout page — your full card number, expiration, and CVC never touch our servers. We receive a transaction summary (amount, currency, product reference, email on receipt, success/failure status) and the Stripe session, customer, and subscription identifiers. Stripe's own privacy practices apply at stripe.com/privacy.

e. Contact, speaking, podcast and nomination submissions

The Contact Us, Speaking & Bookings, Soul2Soul Podcast, and Nonprofit Global Trailblazers nomination forms are currently preview-only placeholders and do not transmit, store, or forward data. When each form is activated (subject to your approval and the implementation described in Section 10 of our Terms of Use), we will collect the fields you submit (such as name, email, message, nomination details) and the submission timestamp.

f. Email communications

When operational email sending is approved and enabled, we will send transactional messages (account verification, password reset, welcome, subscription activated, payment-failed notice during the 7-day grace period, subscription cancellation, purchase confirmation) through our email provider. Until explicitly approved by Dr. Darlene Screen, our email service runs in dry-run mode and no messages are sent.

g. Cookies, security logs & analytics

We set one essential cookie (trc_session) to maintain your authenticated session. We do not currently load third-party analytics or advertising scripts. If and when analytics is added, this Policy will be updated and a cookie-consent mechanism will be implemented where legally required. Our servers log request metadata (IP address, user agent, path, timestamp, status code) for security, abuse-prevention, and debugging; sensitive query values (tokens, keys, passwords) are automatically redacted from logs.

h. Third-party service providers

• Stripe — payments, subscriptions, Customer Portal
• Google (via Emergent-managed OAuth) — optional social sign-in
• Emergent-managed Resend — transactional email delivery (currently disabled)
• MongoDB-managed cluster — database hosting [CONFIRM final hosting region]
• Amazon — book referral links (Amazon's own terms and privacy apply to any purchase there)

3. How We Use Information

• Create and manage your Hub account; authenticate your sign-in; keep your session active.
• Deliver access to the free, Empowerment, and Leadership & Legacy tier content you are entitled to.
• Process payments and subscription renewals through Stripe; manage the 7-day grace period after a failed renewal.
• Send transactional emails tied to the actions above (once email sending is approved).
• Respond to contact, speaking, podcast, and nomination inquiries once those forms are active.
• Protect the service from abuse (rate-limit auth endpoints, dedupe webhooks, scrub sensitive data from logs).

We do not sell your personal information. We do not share information with third parties except the service providers listed in Section 2(h), each limited to the data needed to perform their service.

4. Legal Basis & Your Rights

We process your personal information to perform our contract with you (your membership, your purchases, your inquiries), to comply with our legal obligations, and in our legitimate interest in operating a safe, reliable platform. Depending on where you live you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion, subject to legal retention requirements described in Section 6
• Object to or restrict certain processing
• Receive a portable copy of information you provided
• Withdraw consent for email communications

To exercise any of these rights, email us at [CONFIRM contact email]. We will respond within a reasonable timeframe consistent with applicable law. [REQUIRES APPROVAL — add specific response-window commitments (e.g. 30/45 days) if required by your jurisdiction.]

5. Security Practices & Limitations

• Passwords are hashed with bcrypt (never stored in plain text).
• Session cookies are HttpOnly, Secure, and SameSite=None.
• Email-verification and password-reset tokens are hashed, single-use, and expire within 1 hour.
• Rate limiting protects login, signup, forgot-password, and OAuth callback endpoints.
• Stripe webhook events are verified by signature in production and deduplicated by event identifier.
• Access to administrative preview endpoints requires a header-authenticated token with constant-time comparison; sensitive query values are scrubbed from server logs.

No internet-based service is perfectly secure. We cannot guarantee the security of information transmitted to us, and you use the Site at your own risk.

6. Data Retention — Proposed Schedule

We propose the retention schedule below, by data category, for review. Final windows will reflect operational needs, applicable legal obligations, and verified deletion requests. All rows below are [REQUIRES APPROVAL].

• Account records (name, email, hashed password, Google linkage, tier) — kept while the account is active; after account closure, retained for a period reasonable for dispute resolution and tax recordkeeping, then deleted or anonymized. Proposed window: [REQUIRES APPROVAL].
• Membership & subscription history — retained while the account is active and for the period required by tax and nonprofit recordkeeping obligations. Proposed window: [REQUIRES APPROVAL].
• Payment transaction records (via Stripe) — retained for the period required by applicable tax and financial record-keeping law. Stripe retains its own copies subject to its policies. Proposed window: [REQUIRES APPROVAL].
• Email-verification and password-reset tokens — 1 hour then automatically deleted by the database.
• Session cookies — expire after 12 hours or at sign-out.
• Server access and security logs — proposed window: [REQUIRES APPROVAL].
• Contact / speaking / podcast / nomination submissions (once active) — proposed window: [REQUIRES APPROVAL], differentiated by purpose where appropriate.

Where you ask us to delete personal information and we are able to do so without violating a legal obligation (e.g. tax records), we will act on your request.

7. Age Requirements

Website account registration and paid membership participation are intended for adults aged 18 and older. We do not knowingly collect personal information from minors through account registration or paid membership. If we learn we have inadvertently collected personal information from a minor, we will delete it promptly. Separate nonprofit community programs that may involve younger participants are governed by their own in-person consent processes and are not covered by this website Privacy Policy.

8. International Users

The Site is operated from the United States. If you access the Site from outside the United States, understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country.

9. Changes to This Policy

We may update this Policy. Material changes will be flagged on the Site. The effective date of the final published version will be shown here once approved.

10. Contact

Questions, deletion requests, or privacy concerns: hello@theconfidentrose.org [UNVERIFIED] or mailing address [CONFIRM].

DRAFT — NOT APPROVED FOR PUBLICATION. Review by a qualified Georgia attorney is recommended before publication.