Privacy Policy

Depending on how you use the Services, we may collect the categories of personal information described below. Not every category applies to every member or every Service.

Some Services are designed for community participation and connection.

Information you intentionally publish to a public or member-accessible profile, feed, group, event, comment, or other community area may be visible to other users according to the feature's design and your privacy settings.

Privacy settings can help control exposure, but cannot guarantee that another person will not copy, screenshot, save, or redistribute information they can access. Information shared with another member may also be subject to that member's own handling of it.

Before posting, consider whether the information is appropriate for the audience that may access it. Do not publish sensitive information you do not want others to see.

Depending on the Service, we may use personal information for the following purposes:

We may use AI or automated systems to support features such as:

• Summarizing or organizing content;
• Recommending people, content, jobs, events, or benefits;
• Detecting potentially harmful content or suspicious activity;
• Supporting verification and fraud prevention;
• Assisting members;
• Improving search and discovery;
• Analyzing usage and generating content; and
• Supporting moderation and operational workflows.

AI-generated results can be inaccurate, incomplete, outdated, or inappropriate. You should independently evaluate important results and should not rely on AI output as a substitute for qualified professional advice where such advice is needed.

Where legally required or appropriate, we may provide human review, an appeal process, or other safeguards for consequential decisions. The specific safeguards depend on the feature and applicable law.

Third-party AI providers may process submitted information to provide the requested feature, maintain security, prevent misuse, or perform other contractually authorized functions. The terms governing a provider's processing may vary. We seek appropriate contractual and technical protections where applicable, but cannot guarantee the security or performance of every third-party service.

We do not treat the mere use of an AI provider as a sale of personal information. However, whether a particular disclosure qualifies as a "sale," "sharing," or another regulated activity depends on the facts, the arrangement, and applicable law—not simply on whether money changes hands.

Do not submit sensitive personal information to an AI feature unless the feature is designed for that information and you understand the relevant disclosures.

Google Workspace API data. If you connect a Google account to sync contacts or your calendar, or to copy mail into your Patriots Protect mailbox, the information Patriots Protect receives through those Google Workspace APIs is used only to provide the specific feature you connected — it is never used to create, train, or improve any artificial intelligence or machine learning model, whether our own or a third party's, and it is never transferred to a third-party AI service. Our use of data received from Google Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements.

We may disclose personal information to the following categories of recipients, depending on the Service and the circumstances.

Patriots Protect does not sell personal information for monetary consideration in the ordinary sense of selling a consumer database.

However, some privacy laws—including the California Consumer Privacy Act, as amended—define "sale" and "sharing" more broadly than an ordinary cash sale. For example, certain disclosures of personal information for cross-context behavioral advertising may qualify as "sharing" even if no money is paid directly for the information.

Accordingly, the statement that PP does not sell personal information for money is not, by itself, a determination that no activity qualifies as a sale or sharing under applicable law.

Our treatment of data for advertising, analytics, and other purposes depends on the actual technologies, configurations, contracts, and data flows used by the Services. Before publication, PP must confirm whether any advertising, analytics, social-media, or similar technologies disclose personal information in a way that triggers a regulated sale, sharing, or targeted-advertising right.

If PP engages in a regulated sale or sharing activity and the relevant law applies, PP will provide the required disclosures and accessible opt-out methods. These may include a "Do Not Sell or Share My Personal Information" or "Your Privacy Choices" mechanism and honoring applicable opt-out preference signals, as required by law.

We will not describe an opt-out feature as available or operational unless it has been implemented and is functioning as represented.

Depending on the Services and their configuration, we may use cookies, pixels, local storage, software development kits, analytics technologies, device identifiers, and session technologies.

These technologies may support:

• Authentication and session management;
• Security and fraud prevention;
• Remembering preferences;
• Analytics and performance measurement;
• Personalization;
• Error detection and troubleshooting; and
• Advertising, where applicable.

The technologies used, the information they collect, and the parties that receive it may vary by website, application, device, and feature.

Where required by law, we will provide appropriate notice, consent mechanisms, or opt-out controls. Browser settings may permit you to restrict certain technologies, although disabling them may affect the functionality of the Services.

Depending on your location, the nature of our processing, and applicable law, you may have rights concerning your personal information. These rights may include:

• Access or know: Request information about personal information collected, used, disclosed, sold, or shared about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of personal information, subject to applicable exceptions.
• Portability: Request a copy of certain personal information in a portable format, where required.
• Opt out: Opt out of certain sales, sharing, targeted advertising, or other regulated processing.
• Limit certain sensitive-data uses: Where applicable, direct a business to limit certain uses and disclosures of sensitive personal information.
• Withdraw consent: Withdraw consent where consent is the legal basis for processing.
• Appeal: Appeal certain decisions denying a privacy request, where applicable.
• Non-discrimination: Receive the protections required by law when exercising applicable privacy rights.

Not every right applies in every jurisdiction or to every category of information. Exceptions may apply, including where information must be retained to complete a transaction, provide a requested service, comply with legal obligations, maintain security, or establish or defend legal claims.

This section describes rights and disclosures that may apply to California residents under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), and related regulations.

Whether the CCPA applies to PP depends on the applicable statutory criteria, including the business's activities and relevant thresholds. PP must evaluate those criteria based on its actual operations and financial and data-processing information. This Policy does not represent that PP has already completed that assessment or that the CCPA necessarily applies or does not apply.

If the CCPA applies, PP will provide the disclosures and rights required for the Services and the relevant collection and processing activities. The following categories are potential categories based on the types of Services described in this Policy. Their actual inclusion in a legally required disclosure must be confirmed against PP's actual data flows and collection practices.

Certain information may be considered sensitive personal information under applicable law. Depending on the Service and what you provide, examples may include government identifiers, account credentials, precise geolocation, financial account details, or certain identity-verification information.

Not every item described in this section is necessarily collected by PP. The classification of information depends on the facts and applicable law.

We seek to use sensitive personal information only for disclosed, legitimate purposes that are permitted by law and reasonably related to providing, securing, or administering the relevant Service.

Where applicable law provides a right to limit certain uses or disclosures of sensitive personal information, PP will provide the required notice and mechanism. This Policy does not imply that a particular limitation mechanism is currently available unless it has been implemented.

Our objective is to collect and retain only the information reasonably necessary for verification.

Where practical, a verification provider may confirm that a person satisfies a criterion without PP retaining the full identity document used to establish it. The specific process depends on the verification type, provider, and applicable requirements.

Verification records may include a status, result, timestamp, expiration date, or limited supporting details. Access to verification information should be restricted according to its operational purpose and sensitivity.

Verification providers may independently retain or process information under their own policies and contractual arrangements. You should review the relevant provider disclosures where applicable.

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including:

• Providing and maintaining the Services;
• Maintaining accounts and records;
• Fulfilling contractual obligations;
• Security, fraud prevention, and abuse investigation;
• Legal, regulatory, and tax compliance;
• Accounting and payment administration;
• Dispute resolution and the establishment or defense of legal claims;
• Backup, disaster recovery, and system integrity; and
• Other lawful business purposes consistent with the context of collection.

Retention periods vary according to the type of information, the feature involved, operational needs, and applicable legal requirements. Some records may remain in backups or security logs for a limited period after deletion from active systems.

Where required by law, PP will disclose the retention period for a category of personal information or the criteria used to determine it. PP should maintain an internal retention schedule consistent with these statements and its actual systems.

We seek to avoid retaining personal information longer than reasonably necessary for the relevant purpose, subject to legal obligations and other lawful retention grounds.

We seek to use administrative, technical, and organizational safeguards appropriate to the nature of the information processed and the risks involved. Depending on the system and feature, safeguards may include:

• Encryption in transit and, where appropriate, at rest;
• Authentication and access controls;
• Role-based permissions and restricted administrative access;
• Logging and monitoring;
• Vendor and service-provider controls;
• Backup protections;
• Security testing and maintenance; and
• Incident-response procedures.

The safeguards actually in place may vary by system, provider, and implementation. No method of transmission, storage, or security control can guarantee absolute security.

Users are responsible for protecting their credentials, using appropriate account security practices, and promptly reporting suspected unauthorized access. Please report suspected security incidents or vulnerabilities to security@patriotsprotect.com.

If we determine that a security incident triggers a legal notification obligation, we will provide notifications required by applicable law.

The timing, content, recipients, and method of notification depend on the applicable jurisdiction and circumstances. We may also take steps to investigate, contain, remediate, and document an incident.

Unless a specific Service states otherwise, the Services are not directed to children under 13. We do not knowingly collect personal information from children under 13 in violation of applicable law.

Where a Service permits minors, additional age, parental-consent, privacy, and safety requirements may apply. Any such Service should provide age-appropriate notices and safeguards consistent with applicable law.

If you believe a child has provided personal information in violation of applicable requirements, contact privacy@patriotsprotect.com.

The Services may integrate with or link to third-party providers, including providers of email, identity verification, payments, jobs, events, social or video functionality, AI, analytics, hosting, and cloud infrastructure.

A third party may process information under its own privacy policy, as our service provider, or under another arrangement. The applicable terms depend on the service and the relationship between the parties.

We do not control the privacy practices of independent third parties. Review their privacy disclosures before using their services or providing information directly to them.

References to third-party products or providers are illustrative and do not necessarily mean that a particular integration is currently active or available in every Service.

Patriots Protect may process information in the United States and other countries where we or our service providers operate.

Privacy protections and legal requirements may differ between jurisdictions. Where applicable, we will implement legally recognized mechanisms and safeguards for international transfers.

Email privacy depends on the technical design, configuration, and operation of the relevant email service.

Messages and attachments may be processed by email infrastructure providers and security systems to deliver and store messages, prevent spam and malware, protect accounts, troubleshoot service issues, and comply with legal obligations.

Authorized access may also occur where reasonably necessary for security investigations, abuse prevention, account administration, technical operations, legal compliance, or other permitted purposes.

Patriots Protect does not intend to routinely read member email for advertising purposes. This statement does not mean that every email feature is end-to-end encrypted, that no service provider can process message content, or that access is technically impossible. Do not assume end-to-end encryption unless a specific feature expressly provides it.

Where required by law and technically feasible, we may provide mechanisms to export certain account information.

Export availability may depend on the Service, technical architecture, third-party restrictions, security requirements, and applicable law. This section does not limit a legally enforceable right to access or receive personal information in a portable format.

You may request deletion of personal information through privacy@patriotsprotect.com or https://www.patriotsprotect.com/contact.

The scope and timing of deletion depend on the information involved, the relevant Service, and applicable law. Some information may be retained where permitted or required, including when necessary to:

• Complete a transaction or provide a service you requested;
• Maintain security and prevent fraud or abuse;
• Comply with legal obligations;
• Complete accounting or recordkeeping;
• Establish, exercise, or defend legal claims;
• Preserve records required by law; or
• Maintain or restore system integrity through protected backups.

Where a deletion request is granted, we will take the steps required by applicable law, including directing service providers to delete information where required.

Deleting information from PP's active systems may not remove copies previously made by other users, information independently retained by third parties, or information that remains in backups until overwritten under the applicable retention process.

Account closure and deletion of personal information are not necessarily identical processes. Where required, we will explain the scope of a deletion request and any applicable exceptions.

Some browsers offer "Do Not Track" settings. There is no single uniform standard governing every such signal, and our treatment of a Do Not Track signal depends on the applicable technology and legal requirements.

A Global Privacy Control ("GPC") signal is different from a general Do Not Track signal. Where applicable law requires PP to recognize GPC or another legally recognized opt-out preference signal, PP will honor it in accordance with that law.

This Policy does not represent that PP's systems currently detect or honor any particular signal unless that functionality has been verified. PP must confirm its obligations and test the actual implementation before relying on this statement as its compliance disclosure.

We may update this Policy as the Services, technology, laws, or business practices change.

The updated version will state its effective date. We will provide notice of material changes where required by law and obtain consent where required.

We will not treat a revised publication date, by itself, as retroactively authorizing processing that requires additional notice or consent.

Patriots Protect, Inc.
A Delaware corporation

Address for written notices:
16192 Coastal Highway
Lewes, Delaware 19958
United States

Privacy and data-protection requests: privacy@patriotsprotect.com

General member assistance: support@patriotsprotect.com

Online contact page: https://www.patriotsprotect.com/contact

Security incidents and vulnerability reports: security@patriotsprotect.com

Trust, abuse, and safety reports: trust@patriotsprotect.com

Please identify privacy-related communications as privacy requests. Use the security or trust addresses for their respective purposes rather than sending sensitive information to general support.

For requests under a specific privacy law, we will follow the request, verification, response, and appeal procedures required by that law.