Privacy Policy
DRAFT, not yet reviewed by a lawyer. It describes what TOUSE does with information today. It is not final and should not be relied on until it has been reviewed and this notice is removed.
What TOUSE holds
For each member: name, email, and whatever the member or the chapter adds (phone, major, graduation year, hometown, photo). Restricted details, visible only to the roles that need them: GPA, dietary and medical notes, emergency contact. For the chapter: dues and payment records, attendance, points and standards decisions, new member education records, risk plans, guest lists (names and age bands), incident records, announcements, poll results, documents, and an audit log of privileged actions.
Who sees it
Only members of the chapter, and only what their role allows. TOUSE staff who administer the platform can see which chapters exist and the audit log; reading the audit log is itself logged. Nothing is shown to other chapters, to the public, or to search engines.
Anonymous reports and votes
An anonymous concern report stores the report and no information about who sent it. An anonymous vote stores the choice and no voter. A person who knows how the database works and has direct access to it could learn more than the application shows; that limit is described in the project's documentation.
TOUSE sends sign-in codes, invitations and the notices a person has asked for, and an optional daily or weekly summary that can be stopped with one tap. It sends no marketing email.
Keeping and deleting
Incident records and new member education logs are kept for the chapter's retention period (seven years by default). A person can be erased: their personal details are cleared and their account made anonymous, while the records that refer to them are kept and read "Former member". A chapter can be deleted entirely. Backups kept by the database host age out on the host's own schedule. The written procedure is in the project's documentation.
Children
[To be completed by counsel: how TOUSE treats members under 18, parental consent, and any state rules, before such a chapter begins.]
Contact
[To be completed: the operator's legal name and a contact address for privacy requests.]