Privacy Policy

1. Introduction

The Purple Wings ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our financial education services.

As a 501(c)(3) nonprofit organization based in Needham, Massachusetts, we are dedicated to providing free financial literacy education while respecting your privacy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and email address (when you create an account)
• Contact information (when you contact us or subscribe to our newsletter)
• Learning progress and quiz results (to provide personalized education)
• Demographic information (optional, for improving our programs)

2.2 Automatically Collected Information

• Browser type and version
• Operating system
• IP address (anonymized)
• Pages visited and time spent on pages
• Referring website addresses

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. You can control cookie preferences through our cookie consent banner and your browser settings.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our educational services
• Personalize your learning experience
• Send you educational content, newsletters, and updates (with your consent)
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve our platform
• Comply with legal obligations
• Prevent fraud and enhance security

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and services (e.g., Supabase for database hosting, email service providers)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with any merger, sale, or transfer of our organization
• With Your Consent: When you explicitly consent to sharing your information

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication systems
• Regular security audits and updates
• Limited access to personal data on a need-to-know basis

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Opt-Out: Unsubscribe from marketing emails at any time
• Data Portability: Request a copy of your data in a portable format
• Cookie Control: Manage cookie preferences through our cookie banner

To exercise these rights, please contact us at info@thepurplewings.org

7. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

10. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

Our legal basis for processing your data is your consent, which you may withdraw at any time.

11. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When you request account deletion, we will delete or anonymize your data within 30 days.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: