Privacy Policy

Introduction

TeamNetwork ("the Service"), operated by MAC Connect LLC, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using TeamNetwork, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

Information We Collect

We collect information you provide directly to us, as well as information collected automatically when you use the Service.

• •Account Information: Name, email address, and password when you create an account.
• •Profile Information: Organization details, role, and other profile data you choose to provide.
• •Content: Information you submit through the Service, including events, announcements, forms, and other organizational data.
• •Payment Information: When you make purchases or contributions, payment details are processed securely by our payment processor (Stripe). We do not store full credit card numbers.
• •Usage Data (opt-in): With explicit consent, we collect minimal, privacy-first usage events (e.g., route views, navigation clicks, and feature interactions) without identities or content.
• •Ops/Security Telemetry: Limited error and reliability signals (e.g., API error codes, HTTP status, retryable flags) to keep the Service secure and stable. No content or user identifiers are included.
• •Device Information: Browser type and device class (mobile/tablet/desktop).

How We Use Your Information

We use the information we collect to:

• •Provide, maintain, and improve the Service.
• •Process transactions and send related information.
• •Send administrative messages, updates, and security alerts.
• •Respond to your comments, questions, and support requests.
• •Monitor and analyze trends, usage, and activities.
• •Detect, investigate, and prevent fraudulent transactions and other illegal activities.
• •Personalize and improve your experience.
• •Comply with legal obligations.

Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• •With Your Organization: Information you provide may be visible to other members of your organization based on your role and permissions.
• •Service Providers: We share information with third-party vendors who perform services on our behalf, such as payment processing (Stripe), hosting, and analytics.
• •Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• •Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• •With Your Consent: We may share information with your explicit consent.

Third-Party Services

The Service integrates with third-party services to provide functionality:

• •Supabase: Database and authentication services.
• •Stripe: Payment processing for subscriptions and contributions.
• •Google Calendar: Optional calendar synchronization (requires your explicit authorization).
• •Google Workspace: Optional read-only connectors that let the TeamNetwork assistant answer questions using your Google Drive, Gmail, Google Calendar, and Google Sheets (requires your explicit authorization). See Section 7.
• •Amazon Web Services (AWS Bedrock): Runs the AI models that generate assistant responses. See Section 6.
• •Google Gemini API: Generates the embeddings that power search across your organization's TeamNetwork content. See Section 6.
• •Cloudflare Turnstile: Bot protection and security verification.
• •These services have their own privacy policies, and we encourage you to review them.

AI Assistant and Automated Processing

TeamNetwork includes an AI assistant. When you send it a message, we transmit that message, the relevant organization context, and any data needed to answer it to third-party AI providers that generate a response on our behalf.

Your data is not used to create, train, fine-tune, or improve any foundational or generalized artificial intelligence or machine learning model — not by us, and not by the providers we use.

• •Amazon Web Services — AWS Bedrock (paid commercial tier): Runs the Amazon Nova models that generate assistant responses. Under the AWS Service Terms, content submitted to Bedrock is not used to train or improve any AWS or third-party model, is not shared with model providers, and is not stored by the service after the request completes.
• •Google Gemini API (paid tier): Generates numeric embeddings used to search your organization's own TeamNetwork content — announcements, events, discussions, job postings, mentor profiles, form submissions, and knowledge documents. Data obtained from the Google Workspace connectors is never sent to the embedding service.
• •No other AI or machine learning providers receive your data.
• •Conversation history: Assistant conversations are stored in your account so you can return to them. They are visible only to you and are deleted when you delete the conversation or your account.

Google Workspace Data and Limited Use

TeamNetwork offers two optional Google integrations, each requiring your explicit authorization on Google's consent screen. You can disconnect either at any time from Settings, or revoke access directly at myaccount.google.com/permissions.

TeamNetwork's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. Google Workspace data is never used, transferred, or sold to create, train, or improve any foundational or generalized artificial intelligence or machine learning model.

• •Read-only by design: The Workspace connectors request read-only scopes. The assistant can read the files, messages, calendar events, and spreadsheet values you authorize; it cannot create, modify, or delete them.
• •Fetched on demand: Workspace content is retrieved only when you ask the assistant a question that requires it. We do not bulk-import, mirror, or continuously sync your Drive, Gmail, Calendar, or Sheets.
• •Never indexed: Workspace content is never added to our search index and is never sent to our embedding provider.
• •Never cached: Requests that use a Workspace connector bypass our response cache, so a Workspace-derived answer is never stored for reuse or served to anyone else.
• •Not recorded in audit data: Our AI audit log records the name and parameters of each tool call, never the Workspace content returned by it.
• •Where it does persist: The assistant's reply is saved in your own conversation history, and that reply may quote content from the Workspace data you asked about. This history is visible only to you and is deleted when you delete the conversation or your account.
• •Access control: A personal connection is visible only to you. An administrator may separately connect an organization-wide Google Workspace account, and controls which roles are permitted to use it.
• •Google Calendar synchronization: With separate authorization, TeamNetwork can add and update your team's events on your Google Calendar. This is the only Google integration that writes data, and it writes only the team events you choose to sync.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

• •Data is encrypted in transit using TLS/SSL.
• •Access to personal data is restricted to authorized personnel only.
• •We use Row Level Security (RLS) policies to ensure users can only access data they are authorized to view.
• •Regular security assessments and updates are performed.
• •However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may also retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it by law.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• •Access: Request access to the personal information we hold about you.
• •Correction: Request correction of inaccurate or incomplete information.
• •Deletion: Request deletion of your personal information, subject to certain exceptions.
• •Data Portability: Request a copy of your data in a portable format.
• •Opt-Out: Unsubscribe from marketing communications at any time.
• •To exercise these rights, please contact us at mleonard@myteamnetwork.com.

Cookies and Tracking

We use cookies and similar technologies to:

• •Maintain your session and authentication state.
• •Remember your preferences and settings.
• •Support opt-in usage analytics (only after you explicitly consent).
• •You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service.

Usage Analytics and Personalization

With your explicit opt-in consent, we collect minimal, privacy-first usage analytics. Behavioral analytics are disabled by default until you accept the in-app consent prompt for a specific organization.

Consent is stored per organization and may be withdrawn at any time by contacting support.

• •What we track (opt-in only): Page/route views, navigation and CTA clicks, feature-level events (e.g., directory view, event open, RSVP update), device class, app version, and a daily-rotating session ID.
• •What we never track: Names, emails, phone numbers, message bodies, form answers, filenames, raw URLs, search terms, precise timestamps in analytics payloads, or any content you submit.
• •No user IDs in analytics: Consent is stored using your account ID, but analytics event payloads never include user identifiers.
• •Ops telemetry (always-on): Error and security events are logged without consent to keep the Service safe. These are minimal and never include content or identities.
• •Data lifecycle: Behavioral analytics are automatically deleted after 90 days. Ops telemetry is deleted after 30 days.
• •Account deletion removes all analytics data immediately.

Engagement, Conversion, and Audience Reports (Organization Administrators)

Separately from the anonymous usage analytics above, the Service records whether the members of an organization have seen that organization's announcements and whether they opened or clicked the emails the organization sent through the Service. This is a first-party delivery record for the organization's own communications, comparable to a read receipt. It is visible only to the administrators of the organization that published the announcement or sent the email.

Administrators can also see whether a message was followed by the action it asked for (for example, an RSVP to an event, a form submission, or a donation) and how their organization's membership has changed over time. These reports are built from records the organization already keeps and do not collect anything new about you beyond what is listed below.

Organization administrators can turn view, open, and click recording off for their organization at any time from the Notifications page. Turning it off stops new recording immediately.

• •What is recorded: For announcements, which member viewed it, when it first and last appeared on their screen, how many times, and on which platform (web or mobile app). For emails, whether each recipient's message was delivered, opened, or clicked, when, which link was clicked, and whether the message bounced.
• •How it is recorded: In the app, when an announcement is shown on your screen. In email, through a small invisible image and links that pass through the Service before reaching their destination. No third-party tracking or advertising service is involved.
• •Conversions: When an administrator sets a goal for a message, the report counts recipients or viewers who RSVP'd to the named event, submitted the named form, or donated within a limited number of days afterward. Donations are matched to a recipient by the email address used to donate. Nothing new is stored; the report reads the RSVP, form, and donation records the organization already holds.
• •Membership history: The Service keeps a record of when each person joined or left an organization and when their membership role changed (for example, from member to alumni), so administrators can see how their audience is growing.
• •Unsubscribes: Every email an organization sends through the Service includes an unsubscribe link, and your mail app may show its own unsubscribe button. When you use either, or report the email as spam, the Service turns those emails off in your notification settings and records which email the request came from, when, and how it was made, so administrators can see how many people unsubscribed from each email. This record is kept even when an organization has turned view, open, and click recording off, because it is how your request is honored. You can undo an unsubscribe from the same page or from your notification settings.
• •What is not recorded: Your IP address, device details, or browser information are not stored with these records.
• •Who can see it: Only administrators of the organization concerned, and the Service's AI assistant when an administrator asks it about their own organization's communications.
• •Children: Accounts flagged as under 13 are excluded from this recording, in addition to being blocked at the age gate.
• •Data lifecycle: Detailed email open and click events are deleted after 365 days; summary counts remain with the message. Announcement view records are deleted with the announcement. Deleting your account removes your announcement view records, removes your email address from email delivery records, and removes your name from the membership history while keeping the anonymous join and departure counts.

Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. Users who disclose they are under 13 during signup are blocked at our age gate before any personal information is collected or any account is created.

If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe we have collected information from a child under 13, please contact us at mleonard@myteamnetwork.com.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

By using the Service, you consent to the transfer of your information to the United States and other countries where we operate.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: mleonard@myteamnetwork.com