1. Introduction

Whidbey Island Bulletin ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

• Create an account: Email address, password, display name
• Complete your profile: City, phone number, residence verification details
• Post classified ads: Title, description, price, images, contact information, location
• Create directory listings: Organization name, description, contact details, address, hours, images, website, social media links, YouTube video URL
• Post directory listing updates: Title, content, images, optional expiration dates
• Write reviews: Rating, review text
• Subscribe to email alerts: Category and subcategory preferences for new ad notifications
• Create promotional flyers: Business information, marketing copy, logo

2.2 Automatically Collected Information

• Usage data: Pages visited, features used, time spent on platform
• Device information: Browser type, operating system, device identifiers
• Location data: IP address, geolocation (if you enable location services)
• Cookies and tracking: Session data, preferences, analytics

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your credit card information. Stripe collects and processes payment data according to their privacy policy.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service
• Process your transactions and manage your account
• Verify your Whidbey Island residency for posting privileges
• Display your classified ads and directory listings to other users
• Send email alerts when new ads match your subscribed categories
• Send notifications about platform updates
• Respond to your inquiries and provide customer support
• Improve and personalize your experience
• Detect, prevent, and address fraud and security issues
• Comply with legal obligations
• Send administrative information and service updates

4. How We Share Your Information

4.1 Public Information

The following information is publicly visible to all users and search engines:

• Classified ad listings (title, description, price, images, general location, contact info you choose to include)
• Business directory listings (name, description, contact details, address, hours, images, reviews, ratings)
• Posts and updates
• Reviews you write (displayed with your display name)

4.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase: Database hosting and authentication
• Stripe: Payment processing
• Google Cloud Storage: Image and file storage
• SendGrid: Email delivery for notifications and alerts
• OpenAI: AI-powered alt text generation for images
• WeatherAPI.com: Real-time weather data for Island Status Bar
• WSDOT Traveler API: Ferry wait times for Island Status Bar
• Web push services: Browser notifications

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Service.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide you with our services
• Comply with legal obligations
• Resolve disputes and enforce our agreements

Expired ads and listings may be archived but are no longer publicly visible. You may request deletion of your account and associated data at any time.

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and personal data
• Objection: Object to processing of your personal data
• Portability: Request transfer of your data to another service
• Withdraw consent: Withdraw consent for optional data processing

Managing Your Information:

• Update your profile information in account settings
• Edit or delete your ads and directory listings
• Manage email alert subscriptions in your dashboard
• Manage notification preferences in settings
• Delete your account (contact support)

8. Notification Preferences

You can control which notifications you receive:

• Email alerts: Subscribe to category-specific alerts for new classified ads; manage subscriptions in your dashboard
• Push notifications: Can be enabled/disabled in browser settings

Email alerts can be toggled on/off or unsubscribed via one-click links in alert emails. You can manage all notification preferences in your account settings.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication via Supabase
• Regular security assessments
• Access controls and authentication
• PCI-compliant payment processing via Stripe

However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your CCPA rights

12. International Users

Our Service is operated in the United States. If you are accessing the Service from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

13. Third-Party Links

Our Service may contain links to third-party websites (e.g., business websites listed in the directory). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Significant changes will be communicated via email or a prominent notice on our Service.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us through the contact information provided on our website.