Privacy Policy

Effective date: August 23, 2026

Community Ventures ("Community Ventures," "we," "us," or "our") provides the public website at comvent.org and related community, identity, makerspace, inventory, and QR-code services, including makerspace.comvent.org, auth.comvent.org, and inventory.comvent.org (collectively, the "Services").

This Privacy Policy explains what information we collect, why we use it, when we share it, and the choices available to you.

1. Information we collect

Information you provide

Depending on how you use the Services, you may provide:

• your name, email address, profile information, and account preferences;
• membership, group, project, event, task, volunteer, and interest information;
• makerspace certifications, equipment checkouts and returns, deposit or fee records, and related notes;
• project proposals, descriptions, images, milestones, funding requests, and other content you submit;
• tool, inventory, location, plant, maintenance, and QR-label information;
• messages, support requests, and other communications; and
• photographs, files, or other material you upload.

Please do not submit sensitive personal information unless it is necessary for a specific Community Ventures activity and you have been asked to provide it.

Information received when you sign in

You may sign in through Community Ventures' identity service or through a supported third-party account provider, such as Google, Apple, GitHub, or Discord. Depending on the provider and the permissions you approve, we may receive basic account information such as:

• a provider-specific account identifier;
• your name or username;
• your email address and email-verification status; and
• limited profile information, such as a profile image.

We use this information to authenticate you, create or link your Community Ventures account, prevent duplicate accounts, and apply appropriate access permissions. We do not receive your third-party account password.

Information collected automatically

When you use the Services, our systems and service providers may automatically process:

• IP address;
• browser, device, and operating-system information;
• pages or features requested;
• dates and times of access;
• referring URLs; and
• authentication, security, diagnostic, and error logs.

We also use cookies and similar browser storage that are necessary to maintain sessions, remember limited preferences, protect accounts, and operate the Services. We do not use third-party account information for targeted advertising.

2. How we use information

We use personal information to:

• provide, maintain, and improve the Services;
• create, authenticate, secure, and administer accounts;
• manage memberships, permissions, groups, projects, events, tasks, interests, certifications, and makerspace activities;
• administer equipment, inventory, checkouts, returns, deposits, maintenance, safety, and accountability records;
• display content that you intentionally mark or submit as public;
• communicate about your account, participation, requests, and service changes;
• prevent fraud, abuse, unauthorized access, and safety incidents;
• diagnose technical problems and monitor service reliability;
• comply with applicable legal, financial, insurance, safety, and recordkeeping obligations; and
• enforce our policies and protect Community Ventures, our members, and the public.

3. Google user data

If you choose Google to sign in, Community Ventures uses Google user data only to provide and secure account authentication and account linking. We do not use Google user data for advertising, sell it, or allow people to use it for purposes unrelated to providing the Services.

Community Ventures' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

4. When we share information

We may share information in the following circumstances:

At your direction or as part of a community feature

Information you intentionally publish—such as a public project title, description, image, or event—may be visible to the public. Other participation information may be visible to authenticated members, group members, project participants, leaders, or authorized staff according to the feature's visibility and permission settings.

Service providers and connected systems

We use service providers and connected systems to operate the Services, including hosting, identity and authentication, email or communications, website publishing, inventory management, storage, security, and technical monitoring. These parties may process information only as needed to provide their services to us, subject to their own terms and privacy obligations.

Connected systems currently include services based on Authentik, Ghost, InvenTree, and third-party sign-in providers selected by users.

Safety, legal, and organizational reasons

We may disclose information when reasonably necessary to:

• comply with law, regulation, legal process, or a valid governmental request;
• protect the rights, property, or safety of Community Ventures, members, participants, service providers, or others;
• investigate fraud, abuse, security incidents, policy violations, or unsafe activity; or
• support a merger, reorganization, transfer of operations, or similar organizational change, subject to appropriate protection of personal information.

We do not sell personal information.

5. Data retention

We retain information for as long as reasonably necessary to provide the Services and fulfill the purposes described in this policy. Retention periods vary based on the type of record and may account for:

• whether your account is active;
• operational, membership, inventory, checkout, certification, safety, audit, or financial needs;
• dispute resolution and enforcement;
• backup and security requirements; and
• applicable legal, insurance, tax, or recordkeeping obligations.

Account deletion does not necessarily remove information that must be retained for safety, financial, inventory, audit, dispute, or legal purposes. We may de-identify information that no longer needs to identify you.

6. Your choices and requests

You may be able to review or update certain information through your account. You may also request that we:

• provide access to personal information associated with you;
• correct inaccurate information;
• delete information that we are not required or permitted to retain;
• explain how particular information is used; or
• disconnect a third-party sign-in provider from your Community Ventures account.

We may need to verify your identity before completing a request. Some requests may be limited where information must be retained for security, safety, financial, inventory, audit, contractual, or legal reasons.

You may revoke Community Ventures' access through the settings of a connected sign-in provider. Revoking provider access may prevent that sign-in method from working but may not automatically delete your Community Ventures account or records.

7. Security

We use reasonable administrative, technical, and organizational safeguards intended to protect personal information. These include access controls, authenticated services, restricted administrative permissions, transport encryption where supported, and operational security monitoring. No system or transmission method is completely secure, and we cannot guarantee absolute security.

8. Children's privacy

The Services are not intended for children to create accounts or submit personal information independently where parental, guardian, school, provider, or other legally required authorization is necessary. If you believe a child provided personal information without appropriate authorization, contact us so we can review the situation.

9. External sites and services

The Services may link to or integrate with third-party services. Their privacy practices are governed by their own policies. Choosing a third-party sign-in provider authorizes that provider to process the sign-in request and share the information shown on its consent screen.

10. Changes to this policy

We may update this Privacy Policy as the Services, our practices, or legal requirements change. We will post the revised policy with a new effective date. If a change is material, we may provide additional notice through the Services or account communications when appropriate.

11. Contact us

For privacy questions or requests, contact:

Community Ventures

Use the support contact shown in the Community Ventures service, account area, or sign-in consent screen through which you access the Services.

When contacting us, please describe your request and the Community Ventures service or account involved. Do not send passwords, private keys, or other authentication secrets.