Privacy policy

OpenCharterApp is operated by OpenAppHub ("we," "us," or "our").

We recognize that the information entrusted to OpenCharterApp may include sensitive organizational records, personal information, membership details, meeting records, and internal communications.

We believe that the information maintained within the Application belongs to the individuals and organizations that provide it, subject to applicable third-party rights.

Our role is to act as a custodian of that information and to provide the technology necessary to store, manage, and make it available to authorized Users.

We do not sell personal information or organizational data. We do not use information for advertising, targeted marketing, or unrelated commercial purposes.

This Privacy Policy describes our information-handling practices and the rights and responsibilities associated with using the Application.

This Policy applies to individuals who access or use OpenCharterApp, including representatives, officers, board members, employees, volunteers, and other authorized Users.

A Customer Organization generally determines what organizational information is submitted to the Application, who may access it, and how it is used for that organization's activities.

Depending on the nature of the relationship and applicable law, the Customer Organization may act as the data controller or business responsible for the information, while the Operating Organization acts as a service provider, processor, or custodian.

The Operating Organization may independently determine limited processing necessary to administer accounts, maintain security, operate the Service, and comply with legal obligations.

Customer Organizations may maintain separate privacy policies or notices governing their own organizational activities. Users should consult their organization regarding questions about the collection or use of organizational information.

We collect and process only information that is provided to us or reasonably necessary to operate, secure, and maintain the Application.

Depending on how the Application is used, information may include the following categories:

We use information only for purposes reasonably related to providing, maintaining, securing, and supporting OpenCharterApp.

These purposes include:

• Creating and administering User accounts.
• Authenticating Users and enforcing access permissions.
• Storing and displaying organizational records and documents.
• Providing meeting, governance, membership, and voting functionality.
• Maintaining system availability and performance.
• Troubleshooting technical problems and responding to support requests.
• Protecting the Application against unauthorized access, misuse, and security threats.
• Maintaining backups and operational records.
• Complying with applicable federal, state, and local laws.

We do not use Customer Organization Data or Personal Information for unrelated commercial purposes.

We do not sell, rent, lease, license, or exchange Personal Information or Customer Organization Data for monetary or other valuable consideration.

We do not sell user information to data brokers or advertising networks.

We do not use Customer Organization Data or Personal Information to create advertising profiles, deliver targeted advertisements, or support third-party advertising campaigns.

We do not display third-party advertisements within OpenCharterApp.

We do not use information maintained within the Application for independent marketing, promotional campaigns, or unrelated commercial exploitation.

We do not use organizational records or User Content to develop advertising products or marketing profiles.

We may send communications necessary to operate the Service, including account verification, password recovery, security notifications, technical announcements, and legally required notices. These are operational communications, not marketing communications.

We will not repurpose operational communications as a channel for unrelated promotional messaging.

We may use carefully selected third-party service providers to operate and maintain OpenCharterApp.

These providers may include infrastructure hosting providers, database providers, authentication services, email delivery providers, storage providers, and security services.

Such providers may process information only to the extent reasonably necessary to perform services on our behalf or as otherwise permitted by applicable law.

We do not authorize service providers to sell Customer Organization Data or use it for their own independent advertising or marketing purposes.

Where appropriate, we use contractual, technical, and organizational safeguards designed to protect information processed by these providers.

We may update or replace service providers as operational needs change. Material changes to our information-processing practices will be reflected in this Policy where appropriate.

A current list of relevant service providers and their processing purposes should be maintained by the Operating Organization and made available where required by applicable law or agreement.

OpenCharterApp may use cookies or similar technologies to provide a reliable and convenient user experience.

These technologies may be used for:

• Maintaining authenticated sessions and keeping Users signed in.
• Remembering preferences and application settings.
• Maintaining security and preventing unauthorized access.
• Supporting essential application functionality.

We do not use cookies for advertising, targeted advertising, cross-site advertising tracking, or the sale of Personal Information.

We do not authorize advertising networks to place tracking cookies within the Application.

Where applicable law requires consent for non-essential cookies or similar technologies, we will obtain that consent before using them.

Users may be able to manage or disable cookies through their browser settings. Disabling certain cookies may affect the availability or functionality of some Application features.

Access to organizational information is restricted according to the permissions and roles established within the Application.

Customer Organizations are responsible for determining which Users may access their organizational information.

The Operating Organization may access information when reasonably necessary to:

• Provide technical support requested by an authorized User.
• Troubleshoot or resolve application issues.
• Maintain or restore system functionality.
• Investigate suspected unauthorized access, fraud, or security incidents.
• Perform necessary maintenance, backups, or system administration.
• Comply with applicable legal obligations.

Access by personnel should be limited to individuals with an operational need and should be subject to appropriate administrative and technical safeguards.

We do not routinely review or monitor organizational content for unrelated purposes.

We operate in accordance with applicable federal, state, and local laws and regulations.

We may preserve, access, process, or disclose information when required or authorized by applicable law.

Circumstances may include:

• Valid subpoenas and court orders.
• Search warrants and other legally enforceable demands.
• Regulatory requirements and lawful governmental investigations.
• Legal obligations to preserve or produce records.
• Other legally authorized requests or disclosures.

We will not treat an informal request as automatically authorizing unrestricted access to Customer Organization Data.

Where legally permitted, we will make reasonable efforts to verify the legal basis and scope of a request and limit any disclosure to the information reasonably required.

Where legally permitted and reasonably practicable, we may notify the affected Customer Organization before disclosing information.

We cannot guarantee notification where prohibited by law, restricted by a valid order, or where notification would create an unacceptable legal or security risk.

Nothing in this Policy prevents us from complying with a lawful obligation or valid legal process.

We implement reasonable administrative, technical, and organizational safeguards designed to protect information maintained within OpenCharterApp.

Depending on the relevant system and functionality, safeguards may include:

• Authentication and authorization controls.
• Role-based access restrictions.
• Secure communication and data transmission.
• Database access controls.
• System monitoring and security logging.
• Backup and recovery procedures.
• Software maintenance and security updates.

We periodically review our security practices and make improvements as appropriate.

No security system or method of electronic transmission can guarantee absolute protection. We cannot guarantee that unauthorized access, data loss, or other security incidents will never occur.

We will address security incidents in accordance with applicable law and our established incident-response procedures.

We retain information only for as long as reasonably necessary to provide the Service, fulfill operational requirements, and comply with applicable legal obligations.

Customer Organization Data is generally maintained while the applicable organization maintains an active account or otherwise requires access to the information.

Certain technical, security, and operational records may be retained for limited periods after account closure where necessary for security, troubleshooting, fraud prevention, or legal compliance.

Information may also be retained where required to establish, exercise, or defend legal claims or to satisfy applicable recordkeeping obligations.

We do not retain information indefinitely for advertising, marketing, data brokerage, or unrelated commercial purposes.

We recognize that Customer Organizations and Users retain ownership of their information and should be able to discontinue using the Application without surrendering ownership of their records.

Authorized Users and Customer Organizations may request the deletion of information associated with their accounts, subject to applicable permissions and legal requirements.

Account closure or a valid deletion request will initiate the applicable deletion process.

We will take reasonable steps to remove the requested information from active production systems in accordance with our established deletion procedures.

Certain information may remain temporarily in backups, disaster-recovery systems, or other protected archival storage until those systems reach their normal expiration or replacement cycles.

We may retain information where required by law or where reasonably necessary to address security matters, prevent fraud, resolve disputes, or establish or defend legal claims.

Information retained under these exceptions will be restricted to the purpose requiring retention and will not be used for unrelated commercial purposes.

Deletion requests may be subject to verification of identity, account ownership, and organizational authority.

A User's request to delete their personal account does not necessarily authorize deletion of records belonging to the Customer Organization or other Users.

Customer Organizations should maintain their own copies of records they are independently required to preserve.

Depending on your location, the nature of the information, and applicable law, you may have rights concerning Personal Information maintained within the Application.

These rights may include:

• Requesting access to Personal Information.
• Requesting correction of inaccurate information.
• Requesting deletion of Personal Information.
• Requesting information about how Personal Information is processed or disclosed.
• Requesting a copy of certain information in a portable format.
• Objecting to or restricting certain processing activities where applicable law provides that right.
• Withdrawing consent where processing is based on consent.

These rights may be subject to legal exceptions and limitations.

Where a Customer Organization controls the relevant information, Users may need to direct their request to that organization. We will assist the organization as appropriate and as required by applicable law.

Privacy requests may be submitted to legal@openapphub.org.

We may request additional information reasonably necessary to verify the identity and authority of the person making a request.

We will respond to valid requests within the timeframes required by applicable law.

OpenCharterApp is designed primarily for organizational and administrative use.

The Application is not intentionally designed to collect Personal Information directly from children under the age of 13.

Users and Customer Organizations are responsible for ensuring that information concerning minors is collected, submitted, and maintained in accordance with applicable law.

Where information concerning a child is submitted without an appropriate legal basis or authorization, the affected organization or individual should contact us so that the matter can be reviewed and addressed.

Information may be processed or stored in the locations where the Operating Organization and its authorized service providers maintain infrastructure.

The location of data storage and processing may depend on the hosting and infrastructure services used by the Application.

Where information is transferred across state or national boundaries, we will take reasonable steps to comply with applicable legal requirements governing such transfers.

The Operating Organization should maintain accurate information regarding hosting locations and relevant service providers.

If we become aware of a security incident involving information maintained within OpenCharterApp, we will investigate and take reasonable steps to contain, mitigate, and address the incident.

Where applicable law requires notification of affected individuals, Customer Organizations, or regulatory authorities, we will provide such notification in accordance with the applicable legal requirements.

Where legally permitted and reasonably practicable, we may notify affected Customer Organizations to assist with their own legal and operational responsibilities.

The timing, content, and recipients of notifications will depend on the nature of the incident and applicable law.

The Application may contain links to external websites or services.

Those services operate independently and may maintain their own privacy policies, terms, and data-handling practices.

We are not responsible for the privacy or security practices of third-party websites and services that are not operated or controlled by us.

We may update this Privacy Policy to reflect changes in our practices, the Application, or applicable law.

The current version will be published within the Application with its effective or last-updated date.

Where changes materially affect how information is collected, processed, or disclosed, we will provide notice or obtain consent where required by applicable law.

We encourage Users and Customer Organizations to review this Policy periodically.

OpenCharterApp is operated by OpenAppHub.

• Privacy inquiries and data requests: legal@openapphub.org
• Technical support: support@openapphub.org

For privacy requests, please include your organization name, relevant account information, and a description of your request.

We may request additional information to verify your identity or authority before acting on a request.