Privacy Policy

Hope and Grace Angel Network ("Hope & Grace," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use our website at hopeandgrace.space and related services (the "Platform").

By using the Platform, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

1. Information We Collect

1.1 Information You Provide

• Account Registration: Name (or display name), email address, phone number, region/state, and password (stored as a bcrypt hash — we never store plaintext passwords)
• Payment Information: Processed and stored by Stripe, Inc. We do not store credit card numbers, CVVs, or full card details on our servers
• Soul Stories: Need descriptions, need categories, and interview responses provided during the G.R.A.C.E. interview process
• Withdrawal Requests: Payout method preferences (PayPal, Venmo, Zelle, Cash App email/username, or mailing address for gift cards)
• Communications: Messages you send us via email or through the Platform

1.2 Information Collected Automatically

• IP Address: Logged for security, rate limiting, and fraud prevention
• Browser and Device Information: User agent string, collected automatically by our web server
• Usage Data: Pages visited, features used, and timestamps, collected through server logs
• Authentication Tokens: JSON Web Tokens (JWT) stored in your browser's localStorage for session management

1.3 Information We Do NOT Collect

• We do not use third-party tracking cookies, advertising pixels, or analytics trackers
• We do not collect data from social media profiles
• We do not purchase or acquire personal data from data brokers
• We do not collect biometric data

2. How We Use Your Information

We use your information for the following purposes:

• Operating the Platform: Processing donations, managing accounts, running the Blessing Ceremony, distributing funds, and maintaining The Chalice
• Communications: Sending transactional emails (welcome, verification, ceremony notifications, claim reminders, blessing updates) and responding to your inquiries
• AI Processing: Processing Soul stories through our G.R.A.C.E. AI interview system to create anonymous summaries and assess need (see Section 5)
• Security and Fraud Prevention: Detecting and preventing fraudulent registrations, Sybil attacks, duplicate accounts, and other abuse
• Financial Reporting: Maintaining records for IRS Form 990 reporting, 1099 issuance, and compliance with charitable organization requirements
• Improving the Platform: Understanding how the Platform is used in order to improve features and user experience

We will never sell your personal information to third parties.

3. How We Share Your Information

We share your information only in the following limited circumstances:

3.1 Service Providers

• Stripe, Inc. — Payment processing. Stripe receives your payment information to process transactions. Stripe's privacy policy is available at stripe.com/privacy
• Hostinger — Web hosting and email services. Hostinger hosts our servers and provides SMTP email delivery
• Google (Gemini API) — AI processing. Soul interview responses are sent to Google's Gemini API for processing by G.R.A.C.E. Google's privacy policy is available at policies.google.com/privacy
• Twilio — SMS messaging (when active). Phone numbers are shared with Twilio for verification codes and notifications. Twilio's privacy policy is available at twilio.com/legal/privacy

3.2 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Organizational Transfers

In the event that Hope & Grace merges with another organization, your information may be transferred as part of that transaction, subject to the same privacy protections described here.

3.4 Anonymous / Aggregated Data

We may share anonymized, aggregated data (such as total number of Angels, total blessings distributed, or ceremony statistics) publicly on our website or in reports. This data cannot be used to identify any individual.

3.5 Soul Stories (With Consent)

If a Soul opts in to story sharing, an anonymized version of their story (with name removed) may be published on The Blessed page and Ripples of Compassion archive. Need descriptions and region may be included. Souls may toggle story sharing on or off at any time through their Soul Wallet.

4. Data Retention

• Active Accounts: We retain your account data for as long as your account is active
• Deactivated Accounts: Account data is retained for up to 7 years after deactivation for tax reporting and legal compliance purposes (IRS record retention requirements)
• Soul Stories: Stories on The Blessed page are displayed for 30 days, then move to the Ripples of Compassion archive where they are stored permanently (in anonymized form, with consent)
• Financial Records: Transaction records, ceremony records, and Ops Ledger entries are retained permanently for IRS compliance and organizational transparency
• Server Logs: IP addresses and access logs are retained for up to 90 days for security purposes

5. Artificial Intelligence Disclosure

5.1 G.R.A.C.E. (Guiding Resources And Compassionate Encouragement)

G.R.A.C.E. is an AI-powered interview agent that interacts with Souls in Need during the registration process. G.R.A.C.E. is not a human. G.R.A.C.E. is currently powered by Google's Gemini API.

When you interact with G.R.A.C.E.:

• Your responses are sent to Google's Gemini API for processing
• G.R.A.C.E. generates an anonymous summary of your situation
• G.R.A.C.E. assesses the nature of your need for vetting purposes
• G.R.A.C.E. may suggest relevant resources in your area

G.R.A.C.E. does not make final decisions about eligibility on its own. Flagged cases are reviewed by authorized personnel.

5.2 Platform Development

Hope & Grace acknowledges that AI tools, including Claude AI by Anthropic, have been used in the development of Platform content, documentation, and design materials. AI-generated content is reviewed and approved by authorized personnel before publication.

6. Data Security

We implement reasonable security measures to protect your personal information:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using SSL/TLS (HTTPS)
• Password Security: Passwords are hashed using bcrypt with a cost factor of 12. We never store plaintext passwords
• Access Control: Database access is restricted to authorized server IP addresses only
• Rate Limiting: API endpoints are rate-limited to prevent abuse and brute-force attacks
• JWT Authentication: Session tokens expire after 30 days and are required for accessing account features

No system is 100% secure. While we take reasonable precautions, we cannot guarantee the absolute security of your information.

7. Data Breach Notification

In the event of a data breach that compromises your personal information, we will:

• Notify affected users by email within 72 hours of discovering the breach
• Notify the Oregon Attorney General as required by Oregon's breach notification law (ORS 646A.604)
• Describe the nature of the breach, the types of information affected, and the steps we are taking to address it
• Provide guidance on steps you can take to protect yourself

8. Your Rights

8.1 Access and Correction

You may access and update your personal information at any time through your Angel Wallet or Soul Wallet, or by contacting us at support@hopeandgrace.space.

8.2 Deletion

You may request deletion of your account and personal information by contacting us at support@hopeandgrace.space. Please note that we may retain certain information as required by law (see Section 4, Data Retention).

8.3 Opt-Out of Communications

All marketing and status emails include an unsubscribe link. You may opt out of non-essential communications at any time. Transactional emails (such as ceremony notifications, verification emails, and legally required notices) cannot be opted out of while your account is active.

8.4 Story Sharing

Souls may toggle story sharing on or off at any time through their Soul Wallet. Opting out removes your anonymized story from The Blessed page and Ripples of Compassion.

9. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request that we delete your personal information, subject to certain exceptions
• Right to Opt-Out of Sale: We do not sell your personal information. We never have and never will
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, contact us at support@hopeandgrace.space with the subject line "CCPA Request." We will respond within 45 days.

10. Children's Privacy

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a person under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at support@hopeandgrace.space.

11. Cookies and Local Storage

The Platform uses minimal browser storage:

• JWT Token: Stored in localStorage for authentication. Not a cookie. Contains no personal information beyond your account identifier and expiration date
• No Third-Party Cookies: We do not use third-party cookies, advertising trackers, or analytics cookies
• No Cross-Site Tracking: We do not track your activity across other websites

12. SMS & Text Messaging (Mobile Program)

If you provide your mobile phone number and check the SMS consent box during registration, you may receive text messages from Hope & Grace Angel Network. This section describes that program.

• Program name: Hope & Grace Angel Network
• Message types: one-time account verification codes at signup; transactional notifications if you are selected in a weekly Blessing ("Chalice") Ceremony; and account-status alerts if your account requires attention
• Message frequency: varies and is low
• Cost: message and data rates may apply, per your mobile carrier plan
• Opt-in: consent is collected via an unchecked checkbox during registration (never pre-selected). We record the date, time, and IP address of your consent as proof of opt-in. SMS consent is not a condition of using the Platform or of receiving any blessing — email is our primary channel
• Opt-out: reply STOP (or STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT) at any time to stop messages
• Help: reply HELP or INFO, email support@hopeandgrace.space, or visit hopeandgrace.space

Mobile information sharing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We use Twilio as our messaging service provider solely to deliver the messages described above.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email as described in the Preliminary Notice above. The "Last Updated" date at the top of this policy indicates when changes were last made. Continued use of the Platform after changes take effect constitutes acceptance of the revised Privacy Policy.

14. Contact Information

For questions about this Privacy Policy or to exercise your privacy rights:

Hope and Grace Angel Network
488 NW 6th Ave, Apt 28
Canby, Oregon 97013
Email: support@hopeandgrace.space
Website: hopeandgrace.space