Privacy Policy

1. Who We Are

Loyola College Chennai Alumni Association USA (LCCAA-USA) ("LCCAA-USA", "we", "us", or "our") is a non-profit alumni association connecting graduates of Loyola College, Chennai, who reside in the United States. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit https://loyolaalumniusa.netlify.app or register for our membership, events, or donation programs.

By using our website or creating an account, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration: name, email address, graduation year, major/degree, and password (stored as a salted hash — we never see your plaintext password).
• Profile details (optional): profile photo, current employer, job title, city/state, phone number, LinkedIn profile URL, and biography.
• Event registration: contact details and any dietary or accessibility notes you submit when registering for events.
• Donation & membership payments: payment transactions are processed by Zeffy (our third-party payment processor). We do not store or see your full credit card numbers. We receive a confirmation record of your gift or membership tier.
• Volunteer applications: contact details, background, and motivations submitted through the volunteer form.
• Communications: messages you send us via contact forms or email.

2.2 Information Collected Automatically

• Log data: IP address, browser type, pages visited, and timestamps, collected by Netlify's hosting infrastructure.
• Cookies & session tokens: We use HTTP-only, secure cookies to maintain your authenticated session. We do not use advertising or tracking cookies.

2.3 Information From Third Parties

• Zeffy: Confirmation of payments made through Zeffy's platform (name, email, amount, date).
• Google Fonts: Fonts are loaded from Google's CDN; your IP address may be logged by Google per their Privacy Policy.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your alumni account and membership.
• Display your profile in the alumni directory (subject to your privacy settings).
• Process event registrations and donations.
• Send you transactional emails (account confirmation, event reminders, receipts).
• Send newsletters or association announcements — you may opt out at any time.
• Operate and improve the website, debug errors, and ensure security.
• Comply with applicable laws and our non-profit reporting obligations.

We do not sell, rent, or trade your personal information to third parties for commercial purposes.

4. Alumni Directory and Privacy Controls

Your profile in the alumni directory is only visible to other verified, logged-in LCCAA-USA members. You control what information other members can see via the Privacy Settings in your dashboard:

• Show or hide your email address.
• Show or hide your phone number.
• Show or hide your current employer and job title.
• Show or hide your city and state.
• Show or hide your education details.

Even with all fields hidden, your name and graduation year may be shown in aggregate statistics (e.g., "Class of 2005 — 12 members"). Fully private accounts can be requested by contacting us at info@lccaa-usa.org.

5. Data Retention

• Active accounts: Retained as long as your account is active.
• Deleted accounts: Profile data is anonymized within 30 days of account deletion. Financial records (donation history) may be retained for up to 7 years to meet non-profit accounting and IRS requirements.
• Server logs: Typically retained for 90 days by Netlify.

6. Data Security

We implement the following security measures:

• All data transmitted over HTTPS with HSTS enforced.
• Passwords hashed using bcrypt via Supabase Auth — we never store plaintext passwords.
• HTTP-only, Secure, SameSite session cookies.
• Row-Level Security (RLS) policies in our Supabase database ensure members can only access their own data or publicly consented alumni data.
• Admin access restricted by role-based permissions with audit logging.
• Content Security Policy (CSP) headers preventing cross-site scripting.

No system is perfectly secure. If you believe your account has been compromised, please contact us immediately at info@lccaa-usa.org.

7. Third-Party Services

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data we hold.
• Correction: Update incorrect or incomplete information (directly in your dashboard profile).
• Deletion: Request deletion of your account and personal data.
• Portability: Request your data in a machine-readable format.
• Opt-out of communications: Unsubscribe from newsletters via the link in any email, or contact us directly.

To exercise any of these rights, email info@lccaa-usa.org with "Privacy Request" in the subject line. We respond within 30 days.

9. Children's Privacy

Our website is intended for alumni of Loyola College, Chennai — individuals who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted personal data to us, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered members by email. Your continued use of the site after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy: