OrgWisely Privacy Policy

1. Introduction

OrgWisely ("we," "us," or "our") operates the Platform and respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Platform.

Products include HoldATime.com, HOAResidents.com, and OrgWisely.com. One account, using the same email address, can be used across these products. These products are not service providers.

The Platform is built for organizations in the United States. Personal information is processed in the United States.

2. Information We Collect

We collect information you provide directly when you create an account, book as a guest, or otherwise use the Platform, including:

• Name, email address, and organization or property information
• Content you post (announcements, discussions, documents, photos, and similar material)
• Files you upload
• Communications sent through the Platform
• Content you submit to AI features (such as document Q&A, drafting, or similar tools), only when you use those features
• Phone number, if you or your organization opts in to SMS or a resource requires a phone number
• Payment information when a charge applies; card details are processed by Stripe, not stored by us in full

3. Guests and Public Booking

If you book from an organization's public page or poster without a full membership, we collect the email address used to book, your name if the form asks for it, and the reservation record. We send a confirmation email and, when the organization uses one, a QR code or pass for that reservation.

4. Parking and Vehicle Data

When an organization turns on vehicle fields for a resource, we may collect license plate text, an optional plate or check-in photo, and a phone number if that resource requires one. The organization uses this information for its reservations and on-site checks. The Platform is not a tow, gate, or citation service.

5. Photos

Reservation, check-in, and plate photos are stored with our file host. How long a photo is kept follows the organization's retention setting. We may delete photos on that schedule. The setting is not longer than one year.

6. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Platform
• Enable communication within your organization or community
• Send reservation confirmations, password resets, invitations, and other transactional email through Resend
• Send SMS through Twilio only if you or your organization opts in (for example, alerts). STOP works as Twilio documents
• Provide AI help only when you use those features
• Process platform subscription fees and, where the organization enables them, amenity booking fees
• Support an organization's reservations and on-site checks
• Prevent fraud and enforce our terms

7. Payments

Optional amenity booking fees on paid plans are processed with Stripe Connect. Card data is handled by Stripe. The organization is the merchant of record for those amenity fees. OrgWisely does not take a cut of those amenity charges.

Platform subscription fees (Core and Pro) are separate and are paid to OrgWisely through Stripe.

8. Data Sharing and Third Parties

We do not sell personal information for advertising, and we do not sell, rent, or share personal information with third parties for their marketing.

HoldATime.com, HOAResidents.com, and OrgWisely.com are our products. They are not third-party processors.

We share limited information with processors that host, secure, deliver, or support the Platform, when the law requires it, or to protect the rights, property, or safety of OrgWisely, our users, or others.

Marketing or demo pages may load YouTube or a similar embed. Those providers have their own privacy policies.

9. Hosting, Security, Analytics, and Cookies

We use the processors below to host, secure, and operate the Platform. They process information only as needed for those purposes. We do not sell personal information for advertising.

Cookies and similar tools include Cloudflare (including Turnstile), Vercel Analytics, Cloudflare Web Analytics, and Microsoft Clarity. Clarity includes masked session recordings, clicks, and scroll activity.

You can control cookies in your browser. To ask us to delete a Clarity recording where that is feasible, email support@holdatime.com.

OpenAI receives content only when you use an AI feature. Stripe processes payments; we do not store full card numbers. Resend sends transactional email. Twilio sends SMS only if you or your organization opts in.

These processors handle data under their own terms and privacy policies:

• Vercel hosts the application and scheduled jobs, and provides Vercel Analytics in production (page views and similar usage events, including some in-app feature usage). Vercel may also process operational data such as IP addresses and request logs. Privacy policy: https://vercel.com/legal/privacy-policy
• Cloudflare may be used for site delivery, security, and performance (CDN, WAF, and/or proxy as applicable). We use Cloudflare Turnstile on account and public forms to reduce bot abuse (IP address and browser information). On some product sites we use Cloudflare Web Analytics (page views, referrers, device and browser type, and approximate country). Privacy policy: https://www.cloudflare.com/privacypolicy/
• Microsoft Clarity provides heatmaps and session analytics in production (page views, clicks, scroll, and masked session recordings). Privacy statement: https://privacy.microsoft.com/privacystatement
• OpenAI powers AI features such as document Q&A, in-app assistance, text drafting, and document text extraction. When you use those features, we send the relevant prompts, documents, or images to OpenAI to generate a response. Privacy policy: https://openai.com/policies/privacy-policy
• Stripe processes subscription payments and, where enabled, organization payments such as amenity booking fees through Stripe Connect. Stripe handles payment method details. Privacy policy: https://stripe.com/privacy
• Resend delivers transactional email (such as confirmations, password resets, invitations, and notifications) and, where enabled, custom organization inbound and outbound email. Privacy policy: https://resend.com/legal/privacy-policy
• Supabase provides our hosted database and file storage. Application records and uploaded files, including reservation and vehicle photos, are stored there. Privacy policy: https://supabase.com/privacy
• Twilio sends optional SMS alerts if you or your organization opts in. Twilio may process your phone number and message content, including STOP and START replies. Privacy policy: https://www.twilio.com/legal/privacy
• Google, if you choose to sign in with Google, shares your name and email (and related profile information Google provides) with us. Privacy policy: https://policies.google.com/privacy
• GitHub, if you choose to sign in with GitHub, shares your name and email (and related profile information GitHub provides) with us. Privacy statement: https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement

10. Retention

We keep account and reservation records while the organization or account is active and for a reasonable period afterward for backups, disputes, and legal obligations. Vehicle and check-in photos follow the organization's retention setting and are not kept longer than one year. Logs are kept for a shorter period.

11. Voluntary Sharing Within Your Organization

When you voluntarily share information with other users on the Platform (such as in discussions, service requests, or vendor reviews), that information may become visible to authorized users within your organization or community. We are not responsible for how other users handle information you choose to share.

12. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your personal information. However, no system is completely secure.

13. Your Choices and Rights

You may update your account information and communication preferences at any time through your account settings.

Email support@holdatime.com to access, correct, or delete personal information. We may need to verify your request. Deletion is subject to records we must keep for disputes, backups, and legal obligations.

14. California Residents – Your Privacy Rights (CCPA/CPRA)

If you are a resident of California, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These rights include the right to know, delete, correct, and not be discriminated against for exercising your rights. We do not sell or share your personal information for monetary or other valuable consideration.

To exercise any of the above rights, please submit a verifiable consumer request by emailing us at support@holdatime.com. We will respond to your request within the timeframes required by law (generally within 45 days).

We may need to verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf; we will require verification of both your identity and the agent's authority.

15. Children and Schools

Platform accounts are for adults (18 or older). Public School Starter is for school staff and administrators. A school decides whether students may be booked or listed.

We do not knowingly create accounts for children under 13. If a school needs student-level records, the school is the controller of that data.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Platform and update the "Last Updated" date above. Material changes will be communicated to users where required by law.

17. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: support@holdatime.com

Mailing Address: OrgWisely, 5759 Lakeshore Grove Pl, Sanford, FL 32771