Privacy Policy

Draft version. Effective date: [DATE]

DRAFT FOR ATTORNEY REVIEW. This document was written as a starting point and has not been reviewed by a lawyer. It is not legal advice. Have a Wisconsin attorney review and adjust it before the site opens to the public.

This policy explains what information Mobility Database ("we," "us") collects, why, who can see it, and what choices you have. We try to collect as little as we can. The Site is run by [LEGAL BUSINESS NAME].

1. What we collect

  • Account: your email address, the name you choose to show, whether you are mostly buying or selling, and whether you use caregiver mode.
  • Listings and wanted posts: what you type, your photos, your ZIP code, and the city and state we look up from it.
  • Messages: the messages you send through the Site, and your choice to share contact details, plus the contact details you choose to share.
  • Delivery: name, phone number, address, access notes, and photos taken at pickup and delivery.
  • Email subscription: your email address, whether you agreed to marketing email, the date, and where you signed up.
  • Safety records: reports you file, actions our team takes, and a log of administrative actions.
  • Technical data: our service providers (see below) may log things such as IP address and browser type when you use the Site. We do not run advertising trackers.

We never ask you for health information. Please do not put anyone's health or medical details in listings, messages, or delivery notes.

2. How we use it

To run the Site: sign you in, show listings, relay messages, send alerts you ask for, arrange deliveries, prevent fraud and abuse, answer questions, and improve the Site. With your permission, to send the weekly update and other marketing email. We do not sell your personal information.

3. Who can see what

  • The public sees listings: photos, details, price, city and state, the seller's chosen display name, and a Verified Seller badge. Never your email, phone, or street address.
  • Other members never see your email address or phone number unless you both choose to share them in a conversation.
  • The delivery partner sees the buyer's name, phone, and address, and the seller's address and pickup notes, only for deliveries that are requested.
  • Businesses in our directory receive your email address and message only if you press the button to ask them to contact you and check the box that agrees to it.
  • Our administrators can see account, listing, message, and delivery records as needed to run and protect the Site.

4. Services we use

We rely on outside services that handle data for us:

  • Google (Apps Script, Sheets, Drive, and Gmail) runs our back end, stores data and photos, and sends email.
  • GitHub Pages hosts the pages of the Site. [ATTORNEY/OWNER: update if hosting changes.]
  • Google Fonts serves the text font. Your browser contacts Google to load it, which shares your IP address with Google.
  • Zippopotam.us looks up the city and state for a ZIP code. We send only the ZIP code.

Each of these has its own privacy practices. We may also share information when the law requires it, to protect people's safety, or in a sale or reorganization of the business.

5. Photos

Photos are stored in a private folder, but each photo can be opened by anyone who has its web address, and listing photos are shown publicly. Do not photograph anything you do not want others to see, such as mail with your address, or people's faces.

6. Email

We email you because you asked for something (a sign-in link, an alert, a message notice, a delivery update). Marketing email, such as the weekly update, is sent only if you agreed, and every one includes an unsubscribe link that works with one click. You will still get messages that are part of something you are doing on the Site.

7. Cookies and your browser

We do not use advertising cookies. The Site stores a sign-in token and a few preferences (such as whether you closed a signup banner and a draft of a listing you are typing) in your browser's local storage on your own device. You can clear it at any time in your browser settings, and signing out removes the sign-in token.

8. How long we keep information

We keep account and listing records while your account is open and for a reasonable period afterward to handle disputes, comply with the law, and prevent abuse. Expired sign-in sessions and old email queue records are cleaned up automatically. Delivery records and photos may be kept longer to resolve claims. [ATTORNEY/OWNER: set specific retention periods.]

9. Security

We use reasonable measures, including one-time sign-in links, hashed session tokens, input checks, rate limits, and limits on who can see what. No system is perfectly secure, and we cannot promise that information will never be exposed. Our data is kept in Google services that a small number of authorized administrators can access.

10. Your choices and rights

You can edit your profile, remove your listings, and close wanted posts in your account. You can unsubscribe from marketing email at any time. You can ask to see, correct, or delete the information we hold about you by using the contact form (choose "A privacy request") or by writing to the contact form. We will answer within a reasonable time. Some records may need to be kept for safety or legal reasons. [ATTORNEY: add any state-specific privacy rights that apply, such as California.]

11. Children

The Site is for adults. We do not knowingly collect information from anyone under 18.

12. Changes and contact

We will update this page if our practices change, and tell members about important changes. Contact: the contact form. Mailing address: [BUSINESS MAILING ADDRESS].