Privacy Policy

1. Introduction

OrangeCone ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our civic engagement platform.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using OrangeCone, you consent to the data practices described in this policy.

2. Data Controller

OrangeCone is the data controller responsible for your personal data. For any privacy-related inquiries, please contact us at:

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, username, password, profile photo
• Location Data: Geographic coordinates, city, state, country when you submit reports or set location preferences
• User-Generated Content: Issue reports, photos, videos, comments, and descriptions you submit
• Communication Data: Messages, feedback, and correspondence with us

3.2 Automatically Collected Information

• Device Information: Device type, operating system, browser type, IP address
• Usage Data: Pages visited, features used, time spent on platform, interaction patterns
• Location Data: Approximate location based on IP address (if location services are enabled)
• Cookies and Similar Technologies: Session data, preferences, analytics information

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our services to you
• Consent: Where you have given explicit consent for specific processing activities
• Legitimate Interests: For improving our services, security, and fraud prevention
• Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

• Provide, maintain, and improve our platform services
• Process and display your issue reports to the community
• Enable communication between users and public space managers
• Calculate civic impact points, badges, and leaderboard rankings
• Send notifications about report updates, achievements, and platform news
• Analyze usage patterns to improve user experience
• Prevent fraud, abuse, and ensure platform security
• Comply with legal obligations and respond to legal requests

6. Data Sharing and Disclosure

We may share your information with:

• Public Display: Your username, issue reports, photos, and comments are publicly visible unless submitted anonymously
• Service Providers: Third-party vendors who help us operate our platform (hosting, analytics, email services)
• Public Authorities: Government agencies when reports are related to public infrastructure issues
• Legal Requirements: When required by law, court order, or to protect rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties for marketing purposes.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

To exercise these rights, contact us at privacy@orangecone.app or use the in-app tools in Settings.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: 30-day grace period for account recovery, then anonymized
• Public Reports: Anonymized reports retained for community benefit
• Legal Requirements: Some data may be retained longer to comply with legal obligations

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Employee training on data protection
• Incident response procedures for data breaches

10. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can manage cookie preferences through our cookie banner or browser settings.

Types of cookies we use:

• Essential Cookies: Required for platform functionality
• Analytics Cookies: Help us understand usage patterns
• Preference Cookies: Remember your settings and choices

11. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

12. Children's Privacy

OrangeCone is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. The "Last Updated" date at the top indicates when changes were made.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights:

15. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates data protection laws.