Privacy Policy

FountainHead RI (“FountainHead RI”, “we”, “us”) is a Rhode Island nonprofit based in Providence. This policy covers fountainheadri.org and the FountainHead RI mobile app (together, the “services”). Questions or requests: info@fountainheadri.org.

Information you give us:

• Account: your email address, and your name if you add it.
• Profile (optional): job title, organization, phone, short bio, LinkedIn link and photo.
• Registrations: the name, email and details you enter when you RSVP or buy tickets (for example phone, organization, title, dietary or accessibility needs, how you heard about us, answers to an event’s questions, and guests’ names), plus your tickets and check-in times.
• Payments: when you pay, PayPal processes the payment. We receive the amount, PayPal’s order and transaction IDs, the payer’s email and the payment status. We never see or store card or bank numbers.
• Community features: messages you post in event chat, questions you ask speakers, direct messages, connection requests and connections, contact-card exchanges, people you block, and reports you make.
• Messages to us: what you send through the contact form or by email.
• Membership: membership records FountainHead RI keeps (name, email, organization, level and dates).

Information collected automatically:

• Sign-in cookies and tokens that keep you signed in, and a short-lived cookie remembering which event link brought you to a registration page (used only to count sign-ups per link).
• Basic technical data our hosting providers log for security and reliability, such as IP address, browser or device type and the time of a request.
• Notification settings and which notifications you’ve read.

We don’t use advertising or cross-site tracking, we don’t use third-party analytics, and we don’t sell or rent personal information.

• To run events: registrations, tickets and QR codes, check-in, waitlists, payments, refunds, reminders and event updates.
• To run your account and the community features you choose to use (attendee lists, chat, Q&A, messages, connections).
• To send email you need, such as sign-in codes, confirmations and receipts, reminders, and notifications you’ve turned on. Announcements go only to people who opted in, and you can opt out at any time.
• To keep the community safe: reviewing reports, enforcing the Community guidelines, and preventing spam and abuse.
• To keep records required for accounting, tax and legal purposes, and to answer your questions.

• Attendee lists: only if you join an event’s attendee list, other attendees of that event see your name, photo, title, organization and bio, as far as your privacy settings allow. You can leave at any time.
• Event chat and Q&A: other attendees of the event see what you post, with your name. You can ask questions anonymously; staff can still see who asked.
• Direct messages: only you and the other person can read them. FountainHead RI staff see a direct message only if one of you reports it, and then only that message.
• Staff and volunteers who run an event see its registrations so they can manage the event and check people in.

Service providers that run the services for us, under contracts that limit how they use the data:

• Supabase: database, sign-in and file storage (United States).
• Amazon Web Services: website and app hosting, and sending email (United States).
• PayPal: payment processing, under PayPal’s own privacy statement.
• Apple: distributing the iOS app.

We also share information when the law requires it, to protect people’s safety, or with other people when you choose to share it (for example, by exchanging your contact card).

• Your account and profile: until you delete your account.
• Registrations, tickets and payment records: as long as needed for the event and for accounting, tax and legal obligations, generally up to seven years.
• Chat messages and questions: until you, staff or account deletion remove them. Direct messages: until either person’s account is deleted.
• Reports and moderation records: as long as needed to keep the community safe.
• Server logs: kept for a limited time by our hosting providers for security and troubleshooting.

You can delete your account at any time: on the website, go to My tickets → Edit profile → Delete my account; in the app, go to Account → Delete my account. This permanently removes your sign-in, profile and photo, contact card, attendee-list memberships, connections, blocks, direct messages and notifications. Your chat messages are replaced with “Message deleted”, and your name is removed from questions you asked.

We keep your registration and payment records, no longer linked to an account, for check-in, accounting and refunds. Your tickets still work from the link in your confirmation email. To have those records erased too, where the law allows, email info@fountainheadri.org.

• See and correct your information in My tickets and Edit profile.
• Choose who can see your profile, who can send you connection requests, and who can message you.
• Turn notification emails on or off, and opt out of announcements.
• Block or report anyone.
• Ask us for a copy of your information, or to correct or delete it, at info@fountainheadri.org. We’ll respond within 30 days.

Depending on where you live (for example California or the European Union), you may have additional rights. We honor them for everyone who asks.

Connections are encrypted (HTTPS). Data is protected by access controls so each person sees only what they’re allowed to see, and staff access is limited and logged. No system is perfectly secure; if we learn of a breach that affects you, we’ll tell you as the law requires.

The services are for people 16 and older. We don’t knowingly collect information from children under 13. If you believe a child has given us information, contact us and we’ll delete it.

If we make important changes, we’ll update the date below and tell you on the website, in the app or by email before they take effect.