This Privacy Policy explains how NaptownHub collects, uses, discloses, and retains personal information when you use our website, create an account, submit an event, subscribe to the newsletter, make a purchase, or contact us. It also explains the choices available to you. This policy applies to NaptownHub's website and related services, not to third-party websites that may be linked from our services.

Information we collect

The information we collect depends on how you use NaptownHub. We collect the following categories of information.

• Account and profile information. When you create an account or sign in, we collect your email address, display name, and, if provided by your sign-in provider, profile photo. We also store the preferences and profile information you choose to provide, such as interests, saved events, discovery preferences, and creator or onboarding responses.
• Submissions and communications. When you submit an event, request a feature, or otherwise contact us, we collect the information included in your submission or message. An event submission can include event details, organizer name and email address, event or image links, recurrence information, and related moderation or review details.
• Newsletter information. When you subscribe, we collect your email address, signup source, selected regional preference, and subscription status. We retain unsubscribe and reactivation information when necessary to honor your email preferences.
• Purchase information. If you initiate a paid creator subscription, upgrade, or event-related purchase, Stripe processes the payment. We send Stripe the email address and limited purchase metadata needed to create the checkout session, such as your account identifier, plan or pass type, and associated event identifier. We do not receive or store your full payment-card number.
• Chat information. NaptownBot receives the messages you enter and relevant public event context to generate a response. Chat is available to signed-in users. We also process account identifiers and network information for rate limiting, security, and abuse prevention.
• Usage, device, and diagnostic information. After you choose Accept All in the cookie notice, Google Analytics and Datadog may collect information about your use of the site, including pages or actions, browser and device information, performance signals, errors, resources loaded, and general session activity. Datadog may create sampled session replays; its implementation is configured to mask user input. We exclude admin-page telemetry from Datadog and do not send Google Analytics page views for admin routes.
• Minimized first-party click records. When enabled for a feature, NaptownHub records aggregate click information directly in our data service, including the page area, action, content identifier, destination origin and path, external referrer origin, and a random session identifier. The session identifier is generated in browser session storage and is not an account ID. This click record does not include an IP address, user agent, or user ID.
• Information collected automatically for security and service delivery. Our hosting and security providers receive standard request and log information, such as IP address, browser or device details, request time, and requested URL, to deliver the service, secure it, and troubleshoot problems.

How we use information

We use personal information to:

• Provide, maintain, personalize, and improve NaptownHub.
• Create and administer accounts, preserve saved content and preferences, and provide requested features.
• Review and publish community submissions, communicate with organizers, and operate our events, jobs, creators, and community-discovery tools.
• Send the newsletter and service messages when you ask to receive them.
• Process purchases, prevent fraud, enforce our terms, and protect the security and integrity of our services.
• Answer NaptownBot prompts, including by providing your submitted chat text and public event context to the model provider.
• Understand how features perform, fix errors, and improve the experience.
• Comply with applicable law and respond to lawful requests.

Browser storage, cookies, and consent choices

We use browser storage and similar technologies for site operation and to remember your choices. For example, local storage records your cookie choice and certain interface preferences, while session storage may hold a temporary random click-session identifier and locally saved NaptownBot conversation history. Authentication services may also use storage needed to keep you signed in securely.

Essential storage is used to provide core site functions. Google Analytics and Datadog browser monitoring do not initialize unless you select Accept All. If you select Essential Only, Google Analytics and Datadog remain off. The minimized first-party click records described above may still be sent when you interact with supported site features; they are not used to identify you or to serve targeted ads.

You can manage cookies and site storage through your browser settings. If you clear local storage, the cookie notice may appear again. Blocking or clearing essential storage can affect account, sign-in, and site features.

Service providers and other disclosures

We use service providers to operate the site and process information on our behalf. Depending on the feature you use, these providers include:

• Cloudflare for hosting, content delivery, security, edge functions, and our newsletter database.
• Firebase (Google) for authentication and Firestore storage of account, profile, preference, and submitted-content data.
• Supabase for public event, jobs, and community catalog data, as well as minimized first-party click records.
• Stripe for payment checkout and payment processing.
• Resend for newsletter and related email delivery.
• Google Analytics for consent-based site analytics.
• Datadog for consent-based real-user monitoring, diagnostic logs, performance measurement, and sampled session replay.
• Purdue GenAI for NaptownBot responses. It receives the chat text you submit and relevant public event information; we do not intentionally provide personal profile information to it for this feature.

We may also disclose information when required by law, to protect the rights, safety, and security of NaptownHub and others, to investigate fraud or abuse, or in connection with a corporate transaction such as a merger, financing, acquisition, or sale of assets. If you follow a link to an organizer, ticket seller, social platform, calendar, or other third-party service, that third party's privacy policy applies to your activity there.

Advertising, sale, and sharing

NaptownHub does not sell personal information for money, does not operate third-party advertising networks, and does not use personal information for cross-context behavioral advertising. Paid sponsor placements are labeled first-party placements and are not served through a third-party ad network. We do not knowingly sell or share personal information as those terms are defined by applicable U.S. state privacy laws.

Data retention

We retain information for as long as reasonably necessary for the purposes described in this policy, including to provide services, maintain records, resolve disputes, enforce agreements, and meet legal obligations. Retention periods vary by data type and context.

• Account and profile information is retained while your account remains active and for a limited period afterward when necessary for security, legal, or operational purposes.
• Newsletter subscription information is retained while you remain subscribed. We may retain a limited suppression record after you unsubscribe so we can honor that request.
• Event submissions, support communications, and purchase-related records are retained for the period needed to operate the feature, respond to requests, and meet legal or accounting obligations.
• Analytics, monitoring, and click records are retained according to the relevant provider's or system's configured retention settings and our operational needs.

Your choices and privacy requests

You can unsubscribe from the newsletter at any time using the unsubscribe link in an email. You can also control non-essential Google Analytics and Datadog collection through the cookie notice and manage browser storage through your browser settings.

To request access to, correction of, deletion of, or a portable copy of personal information associated with your account, please email thehubbnetworkk@gmail.com from the address associated with the request, or include enough information for us to verify your identity and locate the relevant record. We may need to verify your request before acting on it. We will respond within the timeframe required by applicable law.

State and regional privacy rights

Depending on where you live and the law that applies, you may have rights to know or access personal information, correct inaccurate information, delete information, obtain a portable copy, opt out of certain processing, appeal a decision about a privacy request, and receive non-discriminatory treatment for exercising your rights. California residents may also have rights to know, delete, correct, opt out of sale or sharing, and limit certain uses of sensitive personal information where applicable.

NaptownHub does not knowingly sell or share personal information or use it for targeted advertising. To make a privacy request or appeal a decision, email thehubbnetworkk@gmail.com with the subject line Privacy Request or Privacy Appeal. You may use an authorized agent where permitted by law; we may request proof of authorization and verify your identity directly when allowed.

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with data-protection laws, you may contact us to ask about the legal basis for processing, international transfers, or the rights available to you under those laws. We will assess and handle requests under applicable law.

Children

NaptownHub is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided personal information to us, please contact us at thehubbnetworkk@gmail.com so that we can investigate and take appropriate action.

Security and international processing

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No system is completely secure, and we cannot guarantee absolute security. Our providers may process information in the United States and other countries where they or their service providers operate. Those countries may have data-protection laws that differ from the laws where you live.

Changes to this policy

We may update this policy when our practices, services, or legal requirements change. We will post the revised policy here and update the effective date. When required by law, we will provide additional notice or request consent for material changes.