Privacy Policy

We collect information you provide directly when using Alvin TX Directory:

Account information: Name, email address, password (hashed, never stored in plain text).

Business listing information: Business name, address, phone number, website, description, hours, services, photos, social media links, and tags. This information is publicly displayed on your listing when you have an active paid subscription.

Payment information: We do not store credit card numbers. All payment processing is handled by Stripe, our payment processor. We store your Stripe customer ID and subscription status.

User-generated content: Reviews, recommendations, community event posts, networking group listings, and vendor listing details.

Claim verification data: Business ownership verification information submitted during the claim process.

When you use Alvin TX Directory, we automatically collect:

Log data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps.

Analytics data: Page views, click patterns, and feature usage to improve the platform. Business listing analytics (views, phone clicks, website clicks) are collected and displayed to listing owners with paid subscriptions.

Security data: IP addresses are logged for rate limiting and security purposes. Repeated failed login attempts or abusive behavior may result in temporary IP blocking. This data is used solely for platform security.

Cookies: We use cookies for authentication sessions, preferences, and analytics. See our Cookie Policy for details.

We use your information to:

• Operate and maintain your account and business listing
• Process subscription payments and vendor listing payments through Stripe
• Display your business information in the public directory (paid subscribers only)
• Provide analytics about your listing's performance
• Send account-related emails (verification, password reset, claim status)
• Send newsletter and platform updates (if you opted in — you can unsubscribe anytime)
• Moderate reviews, events, and community content
• Protect the platform from abuse, fraud, and security threats
• Improve the platform based on usage patterns

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

The following information is publicly visible when applicable:

Paid business listings: Business name, description, address, phone, website, hours, services, photos, social media links, tags, reviews, and recommendations. Free-tier listings are not publicly visible.

Reviews and recommendations: Your display name and the content of reviews and recommendations are publicly visible on business profiles.

Community events and groups: Event and group details, including the author name, are publicly visible once approved.

Event vendor listings: Vendor name, description, booth number, contact info, category, and tags are publicly visible on the event page after payment.

Your email address and account password are never publicly displayed.

We use the following third-party services to operate Alvin TX Directory. Each has their own privacy policy:

Supabase — Authentication and database hosting. Your account data and business listing data is stored in Supabase's infrastructure.

Stripe — Payment processing for subscriptions and vendor listings. Stripe collects and processes payment card information directly — we never see or store your card number.

Vercel — Website hosting and content delivery.

Google reCAPTCHA — Form spam protection. Google may collect usage data as described in their privacy policy.

We may also use error tracking (Sentry) and logging (Axiom) services for platform reliability when enabled.

We retain your data as follows:

Account data: Retained as long as your account is active. You may request account deletion at any time.

Business listing data: Retained as long as the listing is active. Removed from the public directory when a subscription ends or listing is deleted.

Reviews and recommendations: Retained as long as the associated business listing exists, unless removed by the author or moderated.

Payment records: Retained as required by tax and financial regulations (typically 7 years for transaction records).

Security logs: IP addresses and rate limiting data are retained for up to 30 days. Blacklisted IPs are retained for 24 hours (temporary bans) or until manually removed.

Vendor listings: Retained for the duration of the associated event, then archived.

We take security seriously. Measures include:

• Passwords are hashed — we never store them in plain text
• All data transmitted over HTTPS/TLS encryption
• Content Security Policy (CSP) headers on all pages
• Rate limiting on authentication endpoints to prevent brute force attacks
• Automatic IP blocking for repeated abusive behavior
• Row-level security on all database tables
• Admin access restricted to environment-configured email addresses only

No method of transmission over the Internet is 100% secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security.

You have the right to:

• Access your personal data — view your account and listing information in your dashboard
• Correct inaccurate data — edit your listing and profile at any time
• Delete your data — request account deletion by contacting us
• Export your data — request a copy of your personal data
• Opt out of marketing emails — unsubscribe link in every email
• Withdraw consent for cookies — use the cookie preference center

To exercise any of these rights, contact us at info@alvintxdirectory.com. We will respond within 30 days.

California residents have additional rights under the CCPA. You have the right to know what personal information we collect and how we use it, request deletion of your personal information, and opt out of the sale of personal information. We do not sell personal information to third parties. To exercise your CCPA rights, contact us at info@alvintxdirectory.com.

Alvin TX Directory is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users or through a notice on the platform. The "last updated" date at the top of this page indicates when the policy was last revised. Continued use of Alvin TX Directory after changes take effect constitutes acceptance.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at info@alvintxdirectory.com or through our contact page.