Privacy Policy

3.1 Information You Provide Directly

We collect information you provide when you:

• Register an account: name, email address, phone number, username, password, and account type (Goer or Giver).
• Set up a Project or Organization: project name, description, associated Organization details (including tax-exempt status information), and project privacy settings.
• Import Contacts: contact lists uploaded by Goers, which may include names, email addresses, and phone numbers of third parties.
• Use messaging features: content of messages, updates, newsletters, and other communications sent through the Platform.
• Subscribe to a paid plan: billing name, billing address, and payment card information (processed by our third-party payment processor; see Section 7).
• Contact us: name, email address, and the content of your inquiry.

3.2 Information Collected Automatically

When you visit or use the Platform, we automatically collect:

• Usage data: pages visited, features used, links clicked, time and date of access, and referring URLs.
• Device and connection data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Cookies and similar technologies: session cookies, persistent cookies, and similar tracking tools used to maintain sessions, remember preferences, and analyze usage. You may control cookies through your browser settings, though disabling certain cookies may impair Platform functionality.

3.3 Information from Third Parties

We may receive information about you from third parties, including social login providers (e.g., Google, Apple) if you choose to authenticate through them, and from analytics providers.

3.4 Imported Contact Information

Goers may import contact lists into the Platform. NGHBR does not control the sources from which Goers obtain Imported Contacts. By importing contacts, the Goer represents that they have obtained all necessary permissions and consents required by applicable law to share those contacts with NGHBR and to send communications to those individuals through the Platform. Notwithstanding the foregoing, NGHBR may, subject to applicable law, send a single one-time invitation email to an Imported Contact for the limited purpose of inviting that individual to join the Platform, provided that: (a) the Goer has represented, pursuant to the Platform's Terms and Conditions, such individual has provided all legally required consent to receive such communications; (b) such email clearly identifies NGHBR as the sender and explains the context in which the individual's information was received; (c) such email includes a clear and conspicuous opt-out mechanism; and (d) NGHBR will not send further promotional communications to any Imported Contact unless and until that individual affirmatively opts in to receive communications directly from NGHBR.

5.1 No Sharing of Mobile Information

We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.

5.2 Program and Message Types

NGHBR's mobile messaging program sends automated SMS messages from NGHBR to registered Users who provided their own mobile number to their NGHBR account, affirmatively consented to receive text messages through their own account settings, and left the corresponding notification preference enabled. Messages may include account and service notifications, Project updates, direct-message alerts, follow approvals, and other notifications selected in your notification preferences.

You do not need to agree to SMS messages to create an account or use the Platform. Following a Project does not, by itself, opt a User into text messages. A Goer cannot compose or send a text message to a Follower or Imported Contact through the Platform. The sole SMS exception triggered by a Goer's action is the project-link invitation described below; NGHBR is the sender and writes that message.

Project-link invitations. A Goer may invite the owner of another Project to link Projects by supplying that person's mobile number. NGHBR sends the initial invitation text to that number. NGHBR is the sender; the wording is NGHBR's and the inviting Goer can neither write nor alter it; it names the inviter, links to the invitation, and carries STOP opt-out instructions. The inviting Goer may re-send the invitation while it remains outstanding, so the recipient may receive more than one invitation text. By supplying a mobile number for this purpose, a Goer represents that the number belongs to the person the Goer intends to invite and that the Goer has that person's permission to provide it to NGHBR, and the Goer remains responsible for any consent that applicable law requires for that invitation. This invitation is separate from the Goer's Imported Contacts, and NGHBR sends no text message to an Imported Contact through the Goer's contact messaging tools.

Message frequency varies. Message and data rates may apply. Reply HELP for help or contact support@nghbr.com. Reply STOP to stop receiving SMS messages at any time. You may also manage SMS consent and notification preferences in your account settings.

5.3 Opt-In, Frequency, and Rates

To opt in to registered-User SMS notifications, enter your own mobile number and affirmatively select the SMS consent control during registration or in Preferences. Your SMS consent is optional, is stored with the date and time it was granted, and is not inferred from following a Project or from a Goer entering your number. The project-link invitation described in Section 5.2 is the sole Goer-triggered exception and does not rely on account-settings consent.

Message frequency varies based on your account activity, the Projects you follow, messages you receive, and the notification preferences you choose. Message and data rates may apply. Wireless carriers are not liable for delayed or undelivered messages.

5.4 Mobile Information and Program Records

For the SMS program, we collect and use your mobile number, SMS consent status and grant or removal timestamps, SMS notification preferences, and records of messages and inbound replies. We use this information to provide, secure, audit, and measure the SMS program, honor opt-outs, and troubleshoot delivery.

We share information with service providers that deliver SMS, host the Platform, process payments, provide analytics, or support AI features. Those providers may process mobile information only as needed to perform services for NGHBR and must maintain appropriate security standards.

5.5 HELP, STOP, START, and Unknown Numbers

Reply HELP to an NGHBR text for help. NGHBR responds with a clear support message and support contact information. Reply STOP, or another supported opt-out keyword, to stop SMS messages; STOP removes SMS consent for every NGHBR account using that mobile number. Reply START to restore SMS consent. Our SMS service provider may also provide carrier-level confirmation messages for supported opt-out keywords.

When NGHBR receives a text message from a number with no NGHBR account behind it — a reply to a project-link invitation or any other message — NGHBR's system answers automatically, stating that no account was found for that number and where to get help. That number receives at most one such answer in any twenty-four hour period, however many messages it sends. A message containing STOP or another opt-out keyword receives no answer at all: NGHBR records the opt-out and sends that number no further automated answer. These answers respond to messages sent to NGHBR and are not outreach initiated by a Goer.

6.1 With Other Users

When a Giver submits a request to follow a Semi-Private or Private Project, the Goer associated with that Project — and any team member the Goer has authorized to manage follow requests — is shown that Giver's name, email address, and phone number in order to decide the request, whether or not the request is ultimately approved. When a Giver becomes an approved Follower, the Goer has continuing access to that Giver's contact information. A Goer's or authorized team member's access to a mobile number remains subject to the additional mobile-information and SMS protections in Section 5 and the contact-transfer restrictions in our Terms and Conditions. Project content is shared in accordance with the Project's privacy setting (Public, Semi-Private, or Private), as described in Section 9 and more fully in our Terms and Conditions.

6.2 No Sale or Transfer of Contact Information

NGHBR will not sell, rent, lease, or otherwise transfer your Personal Information or Imported Contacts to any third party for their own marketing or commercial purposes. Our Terms and Conditions impose equivalent restrictions on Goers with respect to contact information they access through the Platform. Mobile information and SMS consent are governed by the specific rules in Section 5.1.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of substantially all assets, or similar transaction, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

6.4 Legal Requirements

We may disclose your information if required to do so by law or in the good-faith belief that such disclosure is necessary to comply with a legal obligation, protect the rights or safety of NGHBR or others, or respond to a verified government or law enforcement request.

8.1 Goer-Initiated Communications

When a Giver becomes an approved Follower of a Project, the Giver consents to receive email communications from the Goer and Project, including Project updates, newsletters, and other Project-related content. A Goer may use the Platform's contact messaging tools to reach Followers and Imported Contacts by email, but cannot compose or send them a text message through those tools.

The sole SMS exception triggered by a Goer's action is a project-link invitation: the Goer supplies the intended recipient's mobile number, and NGHBR writes and sends the invitation as described in Section 5.2. Registered-User SMS notifications, invitation re-sends, unknown-number replies, message frequency, HELP, STOP, and START are also described in Section 5.

8.2 NGHBR-Initiated Email Communications

By creating an account, you may receive promotional email communications from NGHBR regarding our services, features, partnerships, and updates, subject to your email consent and preferences.

If your contact information was imported into the Platform by a Goer, NGHBR may send you a single one-time invitation to join the Platform. NGHBR will not send you further promotional communications unless and until you affirmatively opt in to receive them directly from NGHBR.

8.3 Email Opt-Out

All commercial email communications from NGHBR and all Goer communications sent through the Platform will include a clear and conspicuous unsubscribe link. Exercising an email opt-out will remove you from future promotional email communications but will not affect transactional messages necessary to your account. You may manage email preferences through your account settings; SMS opt-outs are described in Section 5.5.

9.1 Public Projects

A Public Project is fully discoverable through the Platform's Explore and search features. Anonymous visitors and logged-in non-followers alike may view the full content of a Public Project without restriction. Approved followers also receive full access to all Project content. Following a Public Project is instant and does not require approval from the Project owner.

9.2 Semi-Private Projects

A Semi-Private Project is discoverable through the Platform's Explore and search features; however, only a minimal preview of the Project's content is displayed to anonymous visitors and logged-in non-followers. Anonymous visitors are prompted to log in before they may follow the Project. A logged-in non-follower may submit a follow request, which will remain in a pending status until approved by the Project owner. Once a follow request is approved, the follower receives full access to all of the Project's content.

9.3 Private Projects

A Private Project is not discoverable through the Platform's Explore or search features. Anonymous visitors who access the Project's URL will encounter a login wall and will not be shown any substantive Project content. Logged-in non-followers are shown only a minimal preview and may submit a follow request, which will remain in a pending status until approved by the Project owner. Once approved, a follower receives full access to all of the Project's content. Although the Project URL is technically accessible, no substantive content is revealed to any unapproved viewer.

14.1 California Residents (California Privacy Rights Act / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the "CPRA"), Cal. Civ. Code § 1798.100 et seq.:

• Right to Know: You have the right to request that we disclose (a) the categories and specific pieces of Personal Information we have collected about you; (b) the categories of sources from which we collected that information; (c) the business or commercial purpose for collecting that information; and (d) the categories of third parties with whom we share that information.
• Right to Delete: You have the right to request deletion of Personal Information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate Personal Information we hold about you.
• Right to Opt-Out of Sale or Sharing: NGHBR does not sell Personal Information, and does not share Personal Information for cross-context behavioral advertising. If this practice changes, we will update this Policy and provide a "Do Not Sell or Share My Personal Information" link on the Platform as required.
• Right to Limit Use of Sensitive Personal Information: To the extent NGHBR collects Sensitive Personal Information (which may include religious affiliation data associated with the Platform's Christian mission requirement), you have the right to direct NGHBR to limit its use and disclosure of that information to the purposes expressly permitted by the CPRA.
• Right of Non-Discrimination: We will not discriminate against you for exercising any of your CPRA rights.

14.2 Virginia, Colorado, and Texas Residents

If you are a resident of Virginia (Virginia Consumer Data Protection Act, Va. Code § 59.1-571 et seq.), Colorado (Colorado Privacy Act, C.R.S. § 6-1-1301 et seq.), or Texas (Texas Data Privacy and Security Act, Tex. Bus. & Com. Code § 541.001 et seq.), you may have rights that include the following, subject to applicable thresholds and exceptions under each state's law:

• Right to access Personal Data we hold about you.
• Right to correct inaccuracies in your Personal Data.
• Right to delete Personal Data you have provided or that we have collected about you.
• Right to obtain a portable copy of your Personal Data.
• Right to opt out of the processing of your Personal Data for purposes of targeted advertising, the sale of Personal Data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

14.3 Mississippi Residents

Mississippi does not currently have a comprehensive consumer privacy statute equivalent to the CPRA or VCDPA. However, NGHBR is committed to transparency and to honoring your rights as described throughout this Privacy Policy, including the access, correction, deletion, and opt-out rights in Section 13. Mississippi residents may also have rights under the Mississippi Consumer Protection Act, Miss. Code Ann. § 75-24-1 et seq., with respect to deceptive trade practices involving personal data.

NGHBR is incorporated and headquartered in Mississippi, and we take our obligations under Mississippi law seriously. If you have questions or concerns regarding our privacy practices under Mississippi law, please contact us at support@nghbr.com.

15.1 Security Measures

NGHBR implements and maintains commercially reasonable technical, administrative, and physical security measures designed to protect your Personal Information from unauthorized access, disclosure, alteration, or destruction. These measures include, without limitation, encryption of data in transit using industry-standard protocols (such as TLS), access controls limiting employee and contractor access to Personal Information on a need-to-know basis, and periodic review of our security practices.

Notwithstanding the foregoing, no method of transmission over the internet or electronic storage is completely secure. NGHBR cannot guarantee absolute security, and by using the Platform you acknowledge and accept this inherent risk.

15.2 Breach Notification

In the event that NGHBR determines or has reasonable cause to believe that a security breach has occurred involving your Personal Information, NGHBR will provide notification to affected Users as required by applicable law, including:

• The Mississippi Consumer Protection Act data breach notification provisions, Miss. Code Ann. § 75-24-29, which require notification to Mississippi residents whose Personal Information is reasonably believed to have been acquired by an unauthorized person following a breach of security of computerized data;
• The California Consumer Privacy Act / CPRA breach notification provisions, Cal. Civ. Code § 1798.150, for California residents whose unencrypted and non-redacted Personal Information is subject to unauthorized access, exfiltration, theft, or disclosure; and
• Any other applicable state or federal breach notification statutes.

15.3 Reporting Suspected Security Incidents

If you become aware of any suspected unauthorized access to your account, a Platform security vulnerability, or other potential security incident, please notify NGHBR immediately at support@nghbr.com. Include as much detail as possible about the suspected incident, including the nature of the suspected vulnerability or unauthorized access and any information that might help us investigate. NGHBR will acknowledge your report and take reasonable steps to investigate and address confirmed issues.