Privacy Policy

1. Who We Are

Omaha 360 is operated by PPRP Innovations ("we", "us", "our"). This platform ("O360") provides community-coordination tools for network partner organizations in Omaha, Nebraska and surrounding areas.

Questions? Contact us at privacy@pprpinnovations.com.

2. What We Collect

• Account data: email address, full name, phone number (optional), job role.
• Organization data: organization name, service area, contact details you enter.
• Activity data: meeting attendance records, collaboration logs, RSVPs, messages sent within the platform, referrals you log.
• Technical data: session tokens (for authentication), IP address (for security/rate-limiting), browser type.

We do not collect financial information, Social Security numbers, or individual-level incident or health data. Community-safety data is held only as aggregate counts (no individual identification possible).

3. How We Use Your Data

• To operate and improve the O360 platform.
• To support network coordination and referral tracking within your organization's tenant.
• To generate anonymized, aggregate reports for funder reporting purposes.
• To send transactional emails (account invites, password resets, role changes).

We do not sell your data to third parties. We do not use your data for advertising.

4. Data Retention

• Account data is kept while your organization's partnership agreement is in effect, unless your account is erased sooner (see Your Rights).
• Most records you delete, such as events and their photos, meetings, projects, tasks, referrals, collaboration logs and announcements, are removed immediately.
• Removed resources and organizations are archived: hidden from the platform but kept. They are permanently deleted 7 years after removal, together with the records that belong to them, such as an organization's memberships and resources, messages sent to it, and referrals to or from it.
• Messages sent to an organization through its directory page are deleted after 90 days.
• Audit logs are kept indefinitely for compliance purposes. The details recorded with each entry are removed after 2 years; the record that an action took place remains.

5. Your Rights

• Access: Download a copy of your personal data at any time from your profile page. It includes the messages you sent and those sent to you.
• Correction: Update your profile information via the profile settings page.
• Deletion: Request account deletion via your profile page. An administrator reviews the request and erases your account: your profile, messages, photo and attachments are removed and your sign-in is ended. Records kept for reporting, such as meeting attendance and referrals, remain without your name. Accounts with active administrative roles require reassignment first.
• Portability: The copy you download from your profile page is a JSON file, a format other services can read.

To exercise any right, email privacy@pprpinnovations.com or use the in-app controls. We respond within 30 days.

6. Sub-Processors

We use the following trusted sub-processors:

7. Security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256 via Supabase). Access is controlled by row-level security — each organization can only see its own data. We conduct periodic security reviews and maintain an incident response plan.

8. Cookies

O360 uses only strictly-necessary session cookies for authentication. These do not track you across websites and do not require your consent under applicable law. We do not use advertising cookies or third-party analytics cookies.

9. Changes to This Policy

We will notify registered users via email at least 30 days before any material changes to this policy. Continued use of the platform after that date constitutes acceptance.