Privacy Policy
Last updated: August 31, 2026
1. Who This Applies To
This policy covers everyone who uses the St. Vincent De Paul Resource Guide: conference and council admins, regional and national administrators, and general users browsing the directory.
2. What We Collect
Admins
We collect your email address for login. We use one time codes instead of passwords, so we don't store a password for your account. We also collect your name, which is shown as the point of contact for your conference or council.
General Users
We collect your phone number for login. Login uses a one time code sent by text, so we don't store a password for your account.
Push Notifications
If you enable push notifications on mobile, we use Expo's push notification service to deliver them. No additional personal data is collected for this.
Directory Data
Agency listings such as name, location, hours, and contact info are entered by admins. This describes organizations, not individuals, and isn't personal data.
Usage Data
We collect QR scan analytics, meaning which resource links get scanned, using a reference code built into the URL.
3. How We Use Your Data
We use your data to send login codes, deliver push notifications if you've enabled them, operate and improve the directory, and bill subscribing organizations.
4. Who Can See What Across the Hierarchy
National and regional admins may see the contact name and email of admins at councils and conferences within their hierarchy, for coordination purposes. They do not have access to individual directory usage or scan analytics for those levels.
5. Service Providers
We use the following providers to operate the service. We don't sell your data to anyone.
- Supabase for database, storage, and authentication
- Resend for sending login codes by email
- Twilio for sending login codes by text
- Expo for push notifications
- Cloudflare as our edge network and CDN
- Stripe for billing
- Our own VPS for hosting
6. Billing Data
Subscriptions are billed through Stripe. We don't store payment card or bank details. Stripe handles and stores that directly.
7. Data Retention
When an account is closed or a deletion is requested, we anonymize the associated data within 7 days.
8. Your Rights
Contact [email protected] to access, correct, or delete your data.
9. Contact
Agnitsch LLC, [email protected]