Privacy Policy for Command

Infinite Game Ventures Inc, doing business as Command ("Command," "we," "us," or "our"), operates a volunteer coordination platform at commandleaders.com (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Platform.

By using our Platform, you agree to the collection, use, and disclosure practices described in this Privacy Policy. If you do not agree with these practices, please do not use the Platform.

Our Role and User Categories

Command serves two categories of users, and our relationship with your data differs depending on which category you fall into:

• Organizations: Nonprofits, advocacy groups, campaigns, and other mission-driven organizations that subscribe to Command. We have a direct relationship with organizations. We are the data controller for organization account information.
• Volunteers: Individuals who sign up through the Platform to participate in volunteer activities. We have a direct relationship with volunteers who sign up through Command. For volunteer data that organizations manage within their accounts, we act as a service provider/processor on the organization's behalf.

For Volunteers: When you sign up with an organization through Command, that organization receives your information and manages it according to their own privacy practices. If you have questions about how a specific organization uses your data, please contact that organization directly.

1. Information We Collect

1.1 Information You Provide

Organization Account Information:

• Name and email address of account administrators
• Organization name and contact information
• Payment information (processed securely; we do not store card numbers)

Volunteer Information:

• Name, email address, phone number
• Mailing address and zip code
• Activity history (tasks completed, events attended, training progress)
• Referral relationships and outcomes
• Communication preferences and opt-in status

User Content:

• Training materials and modules created by organizations
• Event descriptions and details
• Messages sent through the Platform
• Survey responses and feedback

1.2 Information Collected Automatically

When you use the Platform, we automatically collect:

• IP address and device information
• Browser type and operating system
• Pages visited and features used
• Date and time of access
• Referring website or source

We use cookies and similar technologies to maintain your session, remember your preferences, and understand how you use the Platform. See Section 8 (Cookies and Tracking Technologies) for more information.

1.3 Information from Third Parties

We may receive information from:

• Payment processors: Transaction confirmation and fraud prevention data from Stripe
• Authentication services: If you sign in using a third-party service
• Organizations: When you sign up for an organization's events or activities, they may provide us with information about your participation

2. How We Use Information

2.1 For Organizations

We use organization information to:

• Provide and operate the Command platform
• Process payments and manage subscriptions
• Send transactional communications (account notifications, billing)
• Provide customer support
• Improve our platform and develop new features
• Comply with legal obligations

2.2 For Volunteers

We use volunteer information to:

• Facilitate your engagement with organizations
• Send transactional communications (task reminders, event notifications, streak updates)
• Enable participation in the Command volunteer network
• Recommend opportunities from organizations across the network (if you have not opted out)
• Provide support and respond to requests
• Improve our platform and develop new features

2.3 For the Volunteer Network

Command operates a volunteer network that enables discovery across organizations. We use volunteer information to:

• Display events and opportunities from organizations across the network
• Provide personalized suggestions based on your location and interests
• Show aggregate information such as leaderboards (displaying first name and last initial only)
• Send curated opportunity notifications (if you have opted in)

Your contact information is only shared with an organization when you take an action with that organization (such as signing up for an event or completing their signup form). Browsing the network does not share your contact information.

2.4 Communications

Text Messages (SMS):

• Task reminders and daily prompts
• Event reminders (typically 24 hours before)
• Streak notifications
• Training reminders
• System confirmations

Email:

• Magic link authentication
• Event confirmations and updates
• Re-engagement messages (if inactive)
• Weekly opportunity digests (if opted in)

You can manage your communication preferences in your account settings or by texting STOP (for SMS) or clicking unsubscribe (for marketing emails).

3. How We Share Information

We do not sell, rent, or trade your personal information to third parties.

We may share information only as follows:

3.1 With Organizations (for Volunteers)

When you sign up for an organization's event, complete their signup form, or take other actions with an organization through Command, we share your information with that organization so they can coordinate with you. This includes your name, email, phone number, and any other information you provided during signup.

3.2 With Service Providers

We share information with third-party service providers who help us operate the Platform, including:

• Payment processing
• Email and SMS delivery services
• Voice AI services (for training features)
• Cloud hosting and database services
• Analytics services

These providers are contractually obligated to use your information only to provide services to us and to protect your information.

3.3 For Legal Reasons

We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to:

• Comply with applicable laws or legal processes
• Protect our rights, safety, or property
• Protect the rights, safety, or property of our users or the public
• Detect, prevent, or address fraud or security issues

3.4 Business Transfers

If Command is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

3.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

4. Volunteer Network and Cross-Organization Data

4.1 How the Network Works

Command operates a volunteer network that connects volunteers with opportunities across multiple organizations. This creates value for volunteers (more opportunities to engage) and organizations (access to active volunteers).

Key principles:

• Action-based sharing: Your contact information is shared with an organization only when you take an action with that organization (sign up, RSVP, complete a form). Organizations cannot access your contact information simply because you exist in the network.
• No bulk imports: Organizations cannot bulk-upload contact lists to Command. Volunteers are added only through their own actions: signing up for events, completing forms, or taking tasks.
• You control your participation: You can opt out of network participation at any time through your account settings.

4.2 What Organizations See

When you sign up with an organization through Command, that organization can see:

• Your contact information (name, email, phone, address)
• Your activity history with their organization
• Your outcomes and engagement metrics within their organization

Organizations cannot see your activity with other organizations unless you have signed up with those organizations as well.

4.3 Network Discovery Features

If you participate in the network, you may appear in:

• Leaderboards
• Aggregate statistics: Such as total volunteers in a region
• Event suggestions: Personalized recommendations based on your location and interests

You can opt out of network discovery features in your account settings.

5. Data Ownership and Portability

5.1 Organization Data Ownership

Organizations own the volunteer contact information they collect through Command, specifically names, email addresses, and phone numbers, and any content they create or upload to the platform, such as training materials and event descriptions.

Organizations may export their volunteer contact list at any time using our export feature. If you cancel your subscription, you may request a data export within 30 days of cancellation.

5.2 Volunteer Data Rights

As a volunteer, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements and our need to maintain records for organizations you have signed up with)
• Export: Download your data
• Opt-out: Opt out of network participation, marketing communications, and non-essential notifications

To exercise these rights, contact us at daniel@commandleaders.com or use the controls in your account settings.

Note: If you have signed up with organizations through Command, those organizations have their own copies of your information. To request deletion from a specific organization, please contact that organization directly.

6. Data Security

We protect data using:

• Encryption in transit (TLS/SSL)
• Encryption at rest
• U.S.-based cloud infrastructure
• Access controls and authentication
• Regular security reviews

No system is perfectly secure. We cannot guarantee absolute security, but we take reasonable measures to protect your data.

7. Data Retention

Organization data: We retain organization and volunteer data for the duration of the subscription plus 30 days. After cancellation, organizations may request a data export. Data is deleted within 90 days of cancellation unless legally required to retain it.

Volunteer data: We retain volunteer data for as long as you maintain an account or as needed to provide services to organizations you have signed up with. If you request deletion, we will delete your data within 90 days, except where we are required to retain it for legal or operational reasons.

Communication records: We retain records of SMS and email communications for compliance and support purposes.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences
• Understand how you use the Platform
• Improve our services

8.1 Types of Cookies

Essential cookies: Required for the Platform to function. These cannot be disabled.

Analytics cookies: Help us understand how users interact with the Platform. We may use analytics services to collect information about usage patterns.

Advertising cookies: We do not currently use advertising cookies, but we may in the future use cookies to measure the effectiveness of our marketing efforts.

8.2 Your Choices

Most browsers allow you to control cookies through their settings. You can typically:

• See what cookies are set
• Delete cookies
• Block cookies from specific sites
• Block all cookies
• Clear cookies when you close your browser

Note that blocking essential cookies may prevent the Platform from functioning properly.

8.3 Do Not Track

We do not currently respond to "Do Not Track" browser signals, as there is no industry standard for how to respond to such signals. We will update this policy if a standard is adopted.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You can request information about the categories and specific pieces of personal information we have collected about you.
• Right to delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to opt-out of sale: We do not sell personal information in exchange for money. However, some data sharing (such as sharing information with analytics providers) may constitute a "sale" under the broad CCPA definition. You can opt out of such sharing by adjusting your cookie preferences.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at daniel@commandleaders.com.

10. Children's Privacy

Command is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly.

For users ages 13-17: Minors between 13 and 17 may use Command with appropriate consent. Organizations are responsible for ensuring they have appropriate consent to manage volunteer data for any minors who sign up through their organization.

11. International Users

Command is operated in the United States. If you are located outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers are located. By using the Platform, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last Updated" date. For significant changes, we may also notify you via email. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

Questions about this Privacy Policy or our data practices:

Email: daniel@commandleaders.com