Privacy Policy

01Introduction

JAB Innovations takes your privacy seriously. This policy explains what information we collect, why we collect it, and how you can control it.

This policy applies to everyone who visits jabinnovations.org, donates to our mission, registers for a NatureJAB event, or contacts us through any of our channels.

We don't sell your data. We don't share it for advertising. We collect what we need to run our nonprofit and nothing more.

02Information We Collect

Personal information — when you fill out a form, register for an event, or make a donation:

• Name and email address
• Phone number (optional, if provided)
• City and state (for event logistics)
• Any message or note you include

Technical information — automatically collected when you visit the site:

• IP address and approximate location
• Browser type and version
• Device type (desktop, mobile, tablet)
• Pages visited and time spent
• Referral source (how you found us)

Payment information — processed entirely by Stripe:

• We never see or store your card number, CVV, or full payment details
• Stripe provides us with a transaction ID, amount, and last-four digits for record-keeping
• Stripe's privacy policy applies to payment processing: stripe.com/privacy

Event information — when you attend an event:

• Registration history and check-in data
• Donation history associated with your account
• Any likeness waiver you signed (stored separately)

03How We Use Your Information

We use the information we collect for the following purposes:

• Event management: confirming registrations, sending reminders, managing capacity
• Donation processing: issuing receipts, maintaining tax records, complying with IRS requirements
• Communications: sending updates about our mission, events, and progress — only if you opted in
• Analytics: understanding how people find and use our site so we can improve it
• Legal compliance: fulfilling our obligations as a registered 501c3 nonprofit

We don't use your data for profiling, targeted advertising, or resale.

04Legal Basis for Processing (GDPR)

If you're in the European Economic Area (EEA) or United Kingdom, we rely on the following legal bases:

05Data Sharing

We share your data only when necessary to operate. Here's who we work with:

• Stripe: payment processing. They handle all financial transactions securely.
• Supabase: our database and file hosting provider. Data is stored on their infrastructure (hosted on AWS in the United States).
• Email service providers: used to send event confirmations and newsletters you opted into.

We do not sell your personal data to any third party. Ever.

We may disclose information if required by law, subpoena, or to protect the safety of our organization or the public.

06Data Retention

We keep your data only as long as we need it:

• Contact and event data: retained until you request deletion
• Donation records: retained for 7 years per IRS requirements for 501c3 organizations
• Analytics data: retained in aggregate form; individual-level data is not kept beyond 24 months
• Email communications: retained as long as you remain subscribed, deleted within 30 days of unsubscribe

To request deletion of your data, email donate@jabinnovations.org. Note that donation records may need to be retained for legal compliance even after deletion requests.

07Your Rights (GDPR)

If you're in the EEA or UK, you have the following rights regarding your personal data:

To exercise any of these rights, email donate@jabinnovations.org. We'll respond within 30 days.

08Your Rights (CCPA)

If you're a California resident, the California Consumer Privacy Act gives you additional rights:

• Right to know: you can request a summary of the personal information we've collected about you in the past 12 months
• Right to delete: you can request deletion of your personal information, subject to certain exceptions
• Right to opt-out of sale: we don't sell personal data, so there's nothing to opt out of
• Non-discrimination: we won't treat you differently for exercising your privacy rights

To submit a CCPA request, email donate@jabinnovations.org with the subject line "CCPA Request."

09Cookies

We use a small number of cookies to keep the site working and to understand how it's being used.

• Essential cookies: required for form submissions, session management, and site functionality
• Analytics cookies: help us understand how visitors navigate the site (page views, referral sources, device types)

We don't use advertising cookies or track you across other websites. You can block cookies in your browser settings, though some site features may not work correctly if you do.

10Children's Privacy

Our website is not directed at children under 13. We don't knowingly collect personal information from anyone under 13.

NatureJAB events are open to all ages, but registration and donation features are intended for adults. If a parent or guardian believes a child under 13 has submitted personal information to us, contact us at donate@jabinnovations.org and we will delete it promptly.

We comply with the Children's Online Privacy Protection Act (COPPA).

11International Transfers

JAB Innovations is based in the United States. Your data is stored in the US through Supabase (hosted on AWS). If you're accessing the site from outside the US, your information will be transferred to and processed in the United States.

For users in the EEA or UK, this transfer is covered by Supabase's standard contractual clauses and data processing agreements, which provide appropriate safeguards for your personal data.

12Security

We take reasonable steps to protect your personal information:

• Encryption in transit: all data transmitted between your browser and our servers is encrypted via TLS (HTTPS)
• Encryption at rest: data stored in our database is encrypted at rest
• Access controls: access to personal data is restricted to team members who need it to perform their role
• Payment security: payment data is handled entirely by Stripe, which is PCI DSS Level 1 certified

No system is 100% secure. If you believe your information has been compromised, contact us immediately at donate@jabinnovations.org.

13Marketing Communications

We send email updates about our mission, upcoming events, and major milestones — but only to people who opted in.

• Opt-in only: we won't add you to a list without your permission
• Unsubscribe anytime: every marketing email includes an unsubscribe link. One click and you're out.
• Transactional emails: donation receipts and event confirmations are not marketing and cannot be opted out of (they're required for legal and operational reasons)

To update your email preferences, use the link in any email we've sent you, or contact donate@jabinnovations.org.

14Changes to This Policy

We may update this Privacy Policy as our organization grows or as laws change. When we do, we'll update the "Last updated" date at the top.

For material changes — anything that significantly affects how we handle your data — we'll notify registered users by email before the change takes effect.

Your continued use of our website after any update means you accept the revised policy.

15Contact

Privacy questions, data requests, or concerns — reach out directly:

• Email: donate@jabinnovations.org
• Website: jabinnovations.org
• Organization: JAB Innovations, Alabama, USA