Privacy Policy

1. Who we are

Milaap (“we”, “us”, or “our”) provides a white-label community platform for diaspora organisations, cultural groups, and non-profits (“Organisations”). This policy explains how we handle personal data collected through milaap.app and the community sites we host.

2. Information we collect

We collect information you provide directly, including:

• Account details: name, email address, password hash
• Profile data: phone, city, province/state, country, profession, biography
• Membership applications submitted to an Organisation
• Event RSVPs and related communications
• Donation intent submissions and transfer references

We also collect usage data automatically: IP address, browser type, pages visited, and timestamps.

3. How we use your information

• To provide and improve the Milaap platform
• To enable Organisations to manage their membership lists and communications
• To send transactional emails (account confirmations, RSVP confirmations, donation receipts)
• To comply with legal obligations

We do not sell your personal data to third parties.

4. Data sharing

Your profile data is shared with the Organisation(s) you apply to or join. Organisations act as independent data controllers for their members' data. We act as a data processor on their behalf.

We use the following sub-processors:

• Supabase — database and authentication (hosted on AWS, Canada region)
• Vercel — hosting and edge network
• Resend — transactional email delivery
• Cloudflare — DNS and DDoS protection

5. Data retention

We retain your account data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by emailing privacy@milaap.app.

6. Your rights (CASL / GDPR / PIPEDA)

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent for marketing communications
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at privacy@milaap.app.

7. Cookies

We use essential cookies for authentication (Supabase session token) and performance monitoring (Vercel Analytics). We do not use advertising cookies. You can disable cookies in your browser settings, but this may affect platform functionality.

8. Security

We use industry-standard security practices: encrypted connections (TLS), row-level security on all database tables, and access controls. No system is completely secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy periodically. We will notify you of significant changes by email or by posting a notice on the platform. Continued use of the platform after changes constitutes acceptance.

10. Contact us

Questions about this privacy policy? Contact us at privacy@milaap.app.