This Privacy Policy describes how Suslify ("Suslify," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our platform, including our website (suslify.com) and web/mobile application (collectively, the "Platform"). This Policy applies to Donors, Nonprofits, and all other visitors and users of the Platform.

Suslify is currently a personal educational project operated by Sana Udoekong, an individual, and is not yet a registered business entity. References to "we," "us," or "our" in this Policy refer to Sana Udoekong operating as Suslify.

The Platform is currently in beta and is provided for testing purposes. Features, functionality, and the data practices described in this Policy may change as the Platform develops, and this Policy will be updated accordingly.

This Policy is intended to comply with applicable U.S. state privacy laws (including the CCPA/CPRA and other comprehensive state privacy laws), the EU/UK General Data Protection Regulation (GDPR), Switzerland's FADP, and Canada's PIPEDA and Quebec's Law 25, to the extent applicable to our processing of your personal information.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or use the Platform, we may collect:

Name and email address
Phone number (if provided)
Bio
Physical address, used to generate approximate geographic coordinates for donation listings
Photographs you upload (e.g., of donation items, or a profile photo)
Nonprofit organization details, such as organization name, logo, causes, address and description, where applicable
Donation listing information, including item descriptions, categories, and condition
Any information you submit through Reviews, support inquiries, or other communications with us

1.2 Information Collected Automatically

When you use the Platform, we may automatically collect:

Log and usage data, including IP address, browser type, and information about how you interact with the Platform
Device data, including device identifiers, hardware model, and operating system information
Approximate location data derived from your IP address through our analytics tools

1.3 Donation Listing Data

When you create a donation listing, we collect information about the item being donated, including its description, category, photographs, and the geographic coordinates (latitude/longitude) generated from the address you provide. This location data is used to facilitate matching between Donors and Nonprofits.

1.4 Camera and Photo Access

The Platform may request access to your device's camera to allow you to take photographs of donation items directly within the app, and may request access to your photo library to allow you to upload existing photographs. You may decline these permissions through your device settings, though doing so may limit your ability to create donation listings with photos.

1.5 Sensitive Information

We do not intentionally collect sensitive personal information, such as health data, financial data, biometric data, government identification numbers, or information revealing race, ethnicity, religious beliefs, political opinions, or sexual orientation.

2. How We Use Your Information

We use personal information to:

Deliver and facilitate the delivery of the Platform's core services
Enable communication between Donors and Nonprofits
Manage and fulfill donation listings and requests
Respond to user inquiries and provide support
Send administrative information, such as one-time passcodes for password reset, security notices, and policy updates
Facilitate matching between Donors and Nonprofits based on listing details and location
Identify usage trends and improve the Platform
Protect the Platform, including diagnosing problems and preventing fraudulent activity
Request feedback to improve user experience
Verify the legitimacy of organizations registering as Nonprofits, in order to maintain trust and safety on the Platform and protect Donors from fraudulent or bad-faith actors

Once Suslify begins sending product or service update communications to users (for example, following our MVP launch), we will rely on this same administrative basis, and will provide a clear opt-out/unsubscribe mechanism in accordance with applicable law (including the CAN-SPAM Act).

3. Legal Bases for Processing (EU/UK/Switzerland Users)

Where the GDPR or FADP applies, we process personal information on the following legal bases:

Performance of a contract — to provide the Platform's core services to you
Legitimate interests — to identify usage trends, protect the Platform from fraud, request feedback, and verify nonprofit legitimacy, as described above
Consent — where required, such as for certain device permissions

4. How We Disclose Your Information

We do not sell or share personal information for cross-context behavioral advertising or other third parties' independent marketing purposes. We disclose personal information in the following circumstances:

4.1 Service Providers

We disclose information to third-party service providers who process data on our behalf, including:

Cloudinary — cloud-based image storage and delivery for photographs uploaded to the Platform
Google — Google Search Console, for website search performance analysis
Netlify — website hosting
Railway — cloud infrastructure and application hosting
Firebase — PWA hosting
Firebase Analytics — product analytics and usage tracking. We use Firebase Analytics, a service provided by Google LLC, to collect anonymized usage data such as screen views and in-app events. This data helps us understand how users interact with the Platform. Google may process this data on its servers in accordance with Google's Privacy Policy.
Nominatim / OpenStreetMap — geocoding services used to convert addresses provided in donation listings into approximate geographic coordinates

4.2 Other Users

To facilitate the Platform's core function, certain information you provide — such as your name, general location, donation listing details, and photographs — may be visible to other users of the Platform as part of the donor-nonprofit matching process.

4.3 Business Transfers

If Suslify is involved in a merger, acquisition, financing, or sale of company assets, personal information may be disclosed as part of that transaction. We will provide notice as required by applicable law.

4.4 Legal Requirements

We may disclose information where required by law, legal process, or to protect the rights, property, or safety of Suslify, our users, or the public.

5. International Data Transfers

Our servers and the third-party service providers we use are located in the United States. If you are accessing the Platform from the European Union, United Kingdom, Switzerland, or other regions outside the United States, your information will be transferred to and processed in the United States.

Where required, we rely on the European Commission's Standard Contractual Clauses (SCCs) — including those incorporated into our service providers' own data processing agreements — as our mechanism for legitimizing such international transfers.

6. Data Retention and Deletion

We retain personal information for as long as your account is active or as needed to provide the Platform's services.

When you delete your account through the Platform, your account is deactivated and your profile is no longer visible to other users. Associated personal data is marked for deletion and will be permanently purged from our systems within a reasonable period thereafter, subject to the backup retention note below. Organizations you own will also be deactivated and removed from public view at the same time.

Please note that if you have active or pending donation transactions at the time of your deletion request, you will be required to cancel those transactions before your account or organization can be deleted. This is to protect other users who are party to those transactions.

Residual copies of deleted data may persist temporarily in routine system backups before being purged in the ordinary course of our backup retention cycle.

7. Your Privacy Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Correct or update inaccurate information
Delete your personal information
Object to or restrict certain processing
Withdraw consent, where processing is based on consent
Receive a copy of your data in a portable format, where applicable

You can exercise many of these rights directly through your account settings, where you may edit your profile information or delete your account. For requests we cannot fulfill directly through your account, please contact us using the information in Section 12 below.

These rights are made available to the extent granted by the privacy law applicable to your location, including the CCPA/CPRA and other applicable U.S. state privacy laws, the GDPR, the FADP, and PIPEDA/Law 25.

8. Categories of Personal Information (U.S. State Law Disclosures)

In the preceding twelve (12) months, we have collected and disclosed (for business purposes, not sale) the following categories of personal information, as defined under applicable U.S. state privacy laws:

Identifiers (e.g., name, email address) — Collected and Disclosed
Consumer/personal property records (e.g., descriptions of donated items) — Collected and Disclosed
Geolocation data — Collected and Disclosed
Sensory data (e.g., photographs) — Collected and Disclosed

We do not collect information related to protected characteristics (such as age, gender, or race), and we do not sell personal information as defined under applicable law.

9. Cookies and Tracking Technologies

The Platform does not currently use cookies or web beacons. We use Firebase Analytics for product analytics and Google Search Console for website search performance; these tools may collect log, device, and usage data as described in Section 1.2 above.

10. California "Shine the Light" Disclosure

California residents may request information about our disclosure of personal information to third parties for those third parties' own direct marketing purposes. As described in this Policy, we do not share personal information with third parties for their own direct marketing purposes.

11. Security

We have implemented technical and organizational security measures designed to protect personal information, including encrypted data storage, secure transmission (HTTPS/SSL), and password hashing. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

In the event of a security incident affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law.

12. Data Protection Contact

Suslify has designated a privacy contact responsible for overseeing compliance with this Policy and applicable privacy laws. You may contact our privacy contact with any questions, concerns, or requests regarding your personal information at:

Email: hello@suslify.com

13. Future Expansion

If Suslify expands its services to additional jurisdictions, we will update this Privacy Policy to reflect any additional applicable local data protection requirements.

14. Children's Privacy

The Platform is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated Policy on the Platform and revise the "Last Updated" date above. Material changes will be communicated as required by applicable law.

16. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Suslify
Email: hello@suslify.com
Website: suslify.com