Privacy Policy

Effective Date: December 2, 2025

Our Commitment to Your Privacy

InABadWay is a 501(c)(3) charitable organization that respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our charitable platform.

1. Applicability

This Privacy Policy applies to all information we collect through our web and mobile applications from current and former InABadWay users and visitors. When you are no longer our customer, we continue to share your information as described in this policy.

Our Platform is strictly intended for individuals 18 years of age or older. We do not knowingly collect information from anyone under 18.

2. Information We Collect

2.1 Information You Provide

When you use our Platform, you may be asked for:

  • Account Information: Full name, email address, username, password, date of birth, phone number
  • Age Verification: Government-issued photo ID, selfie images, facial biometrics for identity verification
  • Profile Information: Bio, photos, videos, interests, location, preferences
  • Payment Information: Credit card details, billing address, banking information for payouts (processed through Stripe)
  • Communications: Messages, support tickets, feedback

2.2 Information Collected Automatically

We automatically collect:

  • Device Information: IP address, browser type, device type, operating system, device identifiers
  • Usage Data: Pages visited, features used, time spent, click patterns
  • Location Data: General location based on IP address
  • Cookies: Session cookies, preference cookies, analytics cookies

2.3 Information from Third Parties

  • Age and identity verification service providers
  • Payment processors (Stripe)
  • Analytics providers
  • Fraud prevention services

3. How We Use Your Information

We use collected information to:

  • Provide Services: Create accounts, authenticate users, enable features, process transactions
  • Verify Identity: Confirm you are 18+ and verify identity for legal compliance
  • Personalize Experience: Customize content and recommendations
  • Ensure Safety: Detect fraud, prevent abuse, block spammers, investigate violations
  • Communicate: Send service updates, security alerts, and promotional messages (with consent)
  • Improve Platform: Analyze usage patterns, develop new features
  • Legal Compliance: Comply with laws, court orders, and legal process

4. How We Share Your Information

4.1 With Other Users:

  • Public profile information (display name, bio, photos) is visible to other users
  • Messages are visible to recipients
  • Use caution when sharing information—we have no control over how others use it

4.2 Service Providers:

  • Payment Processing: Stripe (for transactions and payouts)
  • Age Verification: Third-party identity verification services
  • Cloud Hosting: Data storage and content delivery
  • Analytics: Usage analysis and improvement

4.3 Legal & Regulatory:

  • Law enforcement (pursuant to valid legal process)
  • Courts and regulatory agencies (in response to subpoenas, court orders)
  • Authorities as required by law

4.4 Business Transfers: In the event of merger, acquisition, or sale of assets, user information may be transferred to successor entities.

4.5 We Do NOT Sell Your Personal Information.

5. Artificial Intelligence & Biometrics

Selfie Liveness Check & Facial Verification

We use AI-powered facial recognition technology for identity and age verification purposes only.

  • Purpose: Verify user identities, prevent fraud, ensure safety
  • Data Collected: Selfie images/videos, facial biometrics, verification metadata
  • Security: Data encrypted in transit (SSL/TLS) and at rest (AES-256)
  • Retention: Retained only as long as necessary for verification and fraud prevention
  • Third Parties: May be shared with trusted verification providers bound by confidentiality obligations

We may use AI to flag content for possible Terms violations. Flagged content is reviewed by human moderators before action is taken.

6. Data Security

We implement industry-standard security measures:

  • Encryption: TLS/SSL for data in transit; AES-256 for data at rest
  • Access Controls: Role-based access; multi-factor authentication
  • Payment Security: PCI-DSS compliant processing; we do not store full card numbers
  • Secure Storage: Verification documents encrypted in access-controlled systems
  • Monitoring: Security audits, vulnerability scanning, breach detection

However, no system is 100% secure. We cannot guarantee absolute security. Use strong passwords and enable two-factor authentication.

7. Data Retention

We retain information for:

  • Active Accounts: Data retained while account is active
  • Verification Records: Minimum 7 years after account closure (legal compliance)
  • Financial Records: 7 years per IRS requirements
  • Legal Holds: Preserved indefinitely if subject to investigation or litigation
  • Backups: May persist in backup systems for up to 90 days after deletion

8. Your Privacy Rights

8.1 General Rights (All Users):

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of personal information (subject to legal retention)
  • Portability: Request a copy of your data in portable format
  • Opt-Out: Unsubscribe from marketing emails

8.2 California Residents (CCPA/CPRA):

  • Right to know what personal information is collected, used, shared
  • Right to delete personal information
  • Right to opt-out of sale of personal information (we do not sell data)
  • Right to non-discrimination for exercising rights
  • Right to correct inaccurate information

8.3 Limitations:

  • We cannot delete records required for legal compliance
  • We cannot delete records subject to legal holds
  • We cannot delete financial records required for tax compliance

To Exercise Rights: Email admin@inabadway.org. We will respond within 45 days.

9. Cookies & Tracking

We use cookies for:

  • Essential: Authentication, security, session management (required)
  • Functional: Preferences, settings, language
  • Analytics: Usage patterns, Platform improvement

Managing Cookies: You can control cookies through browser settings. Disabling essential cookies may impair Platform functionality.

Do Not Track: We do not currently respond to DNT signals.

10. International Data Transfers

Our Platform is operated from the United States. If you access from outside the U.S., your information will be transferred to, stored, and processed in the United States. By using the Platform, you consent to this transfer.

11. Children's Privacy

Our Platform is strictly for adults 18+. We do not knowingly collect information from anyone under 18.

If we become aware that we have collected information from a minor, we will immediately delete the account and all associated data, and report to appropriate authorities if required.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

  • Posting the updated policy with a new effective date
  • Sending email notification to your registered address
  • Displaying a prominent notice on the Platform

Continued use after changes constitutes acceptance of the updated policy.

13. Contact Information

Contact: admin@inabadway.org

Mailing Address: InABadWay, Inc., Frisco, TX

Legal Notice

This Privacy Policy is modeled after industry-standard policies used by major charitable and social support platforms. It should be reviewed by a qualified attorney to ensure compliance with all applicable laws in your jurisdiction.