This Privacy Policy explains how Connection(“we”, “us”) collects, uses, and shares information about you when you use our service.
1. What we collect
- Account info. Name, email, language preference, and (optional) phone number you provide at sign-up.
- Business profile. Business name, category, city, languages, description, logo, cover image, contact info — submitted by you when you list a business.
- Verification documents. If you choose to verify your business, you may upload documents (EIN letter, business license, insurance certificate). These are stored in a private bucket and accessible only to you and our verification team.
- Messages & inquiries. The content of inquiries and messages you send through the platform.
- Usage data. Aggregated analytics about how the service is used (page views, feature usage).
2. How we use it
- To operate, maintain, and improve the Service.
- To verify business identity and earn trust badges.
- To route inquiries and messages between businesses on the platform.
- To detect, prevent, and investigate fraud, spam, and abuse — for example, the trust score uses verification status, reviews, completed deals, and reports.
- To communicate with you about your account.
3. How we share it
We do not sell your personal information. We share information only as follows:
- With other users on the platform, as part of your public business profile (what you choose to publish), reviews you author, and inquiries/messages you initiate.
- With service providers who help us run the platform (e.g. Supabase for database and authentication, Vercel for hosting, email provider). These providers are bound by confidentiality obligations and process data only on our instructions.
- For legal reasons, when required by law, subpoena, or court order.
4. Cookies
We use a small number of strictly necessary cookies (for sign-in session and theme preference). We don't use third-party advertising cookies. See our Cookie Policy for details.
5. Your choices
- Access & correction. You can view and update most account and business info from your dashboard.
- Deletion.You may delete your account by contacting us; we'll remove your personal data within a reasonable period (some records may be retained for legal compliance).
- Marketing emails.We'll send transactional emails (e.g. password resets); we'll only send marketing emails if you opt in.
6. Security
We use industry-standard practices to protect your data, including Postgres Row Level Security for fine-grained access control, encrypted transport (HTTPS), and secret-only access to sensitive operations. No system is perfectly secure — please use a strong, unique password and contact us immediately if you suspect unauthorized access.
7. Children
The Service is intended for users 18 and older. We don't knowingly collect information from children under 13.
8. Changes
We may update this Policy from time to time. Material changes will be announced via email or an in-app notice.
9. Contact
Questions, requests, or complaints? Email support@connection.example.