Privacy & data use

This notice describes the current implementation and proposed launch controls. Innovation Army is the public-facing operator. Its full registered legal entity, address and designated Information Officer details are pending publication. Direct privacy requests to info@innovationarmy.org; do not infer registered NPO status from this name.

What happens in preview

Campaign drafts stay in this browser’s local storage. They are not an account backup; clearing storage, using another device or private browsing can remove them. Export a copy and avoid including identity documents or confidential material. Clear a draft with the builder’s delete control.

Contact messages and reports collect the name, email, category, relevant link and message you provide, only when the inbox is enabled. A success message means a record was stored, not that a human has reviewed it. If the inbox is unavailable, the form states that; email fallback is handled by your email provider.

Launch notifications

The optional waitlist requires consent and email confirmation. It stores your email, consent date, status and hashed confirmation/unsubscribe tokens. Confirmation links expire after 24 hours. Unsubscribe through the link in an update or contact us. Consent to launch updates is separate from creating an account and is not consent to unrelated marketing.

Providers and transfers

The implementation uses Vercel hosting, Supabase when connected, and Resend when notification email is configured. Images may load from Unsplash, revealing ordinary request information to that service. Embedded videos load only after you choose to view them. Processing may occur outside South Africa; the operator must document actual project regions, processor contracts and lawful transfer safeguards before enabling collection.

Visibility and anonymity

Published campaigns and active barter profiles are intended to be public. Email addresses and receipt tax details must stay private. Future anonymous giving means your name is hidden publicly, not that the payment provider or authorised operator cannot identify you. Receipt details are not collected in preview.

Barter communities

Strength fields, skills, availability and active help listings are public when membership opens. Joining a community is optional. Chat and discussions are visible to its members and authorised coordinators and administrators; these rooms are not confidential direct messages. Private listing responses are visible to the sender and requester. Introduction cases are visible to the member and room coordinators; exchange disputes and updates are also visible to the other exchange participant. Moderation reports are private to the reporting member and authorised coordinators.

You can remove your own posts from member view. Removing a discussion also hides its replies. Leaving a room does not remove earlier posts. Hidden content, case records and recorded moderation decisions are retained for review; an operator must set and publish their retention and deletion procedure before the pilot opens. No automatic community-record cleanup is currently scheduled. Contact the privacy address for removal, access or appeal requests.

Retention and deletion

Unconfirmed waitlist requests are scheduled for removal after 7 days; unsubscribing deletes the subscription. Inbox records are scheduled for removal after 12 months unless separately retained for a documented dispute or legal obligation. Abuse-prevention rate-limit records expire after 24 hours. These cleanup jobs must be enabled and verified before collection starts. Local drafts remain until you delete them or clear browser storage.

Cookies, logs and security

Session cookies support authentication when accounts open. Hosting logs may contain request metadata; no advertising tracker is included in this repository. Public intake uses a keyed hash of the requester’s IP for throttling, not a stored raw IP. Card details are not collected. Access controls reduce exposure but cannot promise absolute security.

Your requests

Ask for access, correction, deletion, withdrawal of notification consent or objection to processing at info@innovationarmy.org, or submit a privacy concern. Provide enough information to locate the record; do not send identity documents initially. The operator must verify identity proportionately and explain any lawful retention exception. You may also contact the South African Information Regulator.