Privacy Policy

1. Who we are

CommonGround is operated by Futur1st LLC. If you have privacy questions, contact us at steve@futur1st.com.

2. What we collect

When you join a garden on CommonGround, we collect:

• Name — to identify you to other members of your garden
• Email address — to send sign-in links and (if you choose) notifications
• Plot number — if you claim a plot, this is visible to members of your garden
• What you grow — optional, visible to members of your garden
• Resources you list — name, category, description, and availability, visible to garden members
• Event RSVPs — which events you've said you're coming to, visible to garden members
• Contact preferences — whether you prefer messages in the app, email, or phone

We do not collect payment information. We do not build advertising profiles. We do not sell your data.

3. How we use it

We use your data only to operate the app:

• Sign-in — we use your email to send magic-link sign-in emails via Resend.com
• Garden coordination — your name, plot, and RSVPs are shown to members of your garden only
• Notifications — we send notification emails if you've opted in, and only for events in your garden

We do not use your data for any purpose beyond running the app.

4. Who can see your data

• Other members of your garden can see your name, plot number, what you grow, resources you've listed, and your RSVPs
• Garden organisers can see the same information as members
• No one outside your garden can see your personal information
• We (the operator) can access data as needed to run and maintain the service

We do not share data with third parties except:

• Resend.com — used to send transactional emails (sign-in links and notifications). Resend processes your email address under their own privacy policy.

5. How long we keep it

We keep your data for as long as you are a member of an active garden. If you ask us to delete your account, we will remove your personal data within 30 days.

6. Security

Passwords are not used — we use magic-link sign-in only. Session tokens are short-lived and stored in secure, HTTP-only cookies.

7. Your rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Object to processing

To exercise any of these rights, contact us at steve@futur1st.com.

If you are in California, you have additional rights under the CCPA. If you are in the EU or UK, you have rights under the GDPR.