Here is the honest truth: Ktown Team is a small, community-focused organization. We do not hit the revenue or data-volume thresholds that would legally require us to comply with CCPA or CPRA. But we have chosen to follow these standards anyway, because our neighbors deserve the same respect that big-company customers get. It is the right thing to do.

What We Believe About Your Data

  • Be straight with you: We tell you what we collect, why we collect it, and what happens to it. No fine print games.
  • Take only what we need: If we do not need a piece of information to help you, we do not collect it.
  • You are in charge: It is your data. You decide what stays, what goes, and how it gets used.
  • We will never sell your information: Period. We do not sell or share personal data for commercial purposes. That is not our business model and it never will be.
  • Keep it locked down: We use real security measures to protect everything you trust us with.

What We Collect and Why

When you use our platform, we may collect the following kinds of personal information:

  • Contact info — your name, email, phone number, or mailing address, so we can actually reach you.
  • Demographic info — things like age, gender, or income range, but only when you volunteer it and only when it helps us figure out which services you qualify for.
  • Device info — your IP address, browser type, and operating system. This helps us keep the platform running smoothly.
  • Profile info you submit — background, housing situation, and other details needed to process applications or referrals on your behalf.
  • Usage data — which parts of the platform you use, when, and for how long. This helps us improve what we build for you.

How Long We Keep It

We do not hang on to your data forever. Here is our schedule:

  • Active accounts: We keep your data as long as your account is active.
  • Inactive accounts: If you have not used your account in 24 months, we delete or anonymize your personal data.
  • Application data: Kept for 36 months from when you submitted or last updated it, then removed.
  • Usage data: Stays in identifiable form for 12 months, then gets aggregated and anonymized so it cannot be traced back to you.

Your Rights Under California Law

CCPA and CPRA give California residents a specific set of rights. We honor all of them for every user, regardless of where you live:

  • Right to Know: You can ask us what personal data we have about you, where we got it, and what we are doing with it. We will tell you.
  • Right to Delete: You can ask us to delete your personal information, and we will — unless there is a legal reason we have to keep it.
  • Right to Correct: If something in your data is wrong, tell us and we will fix it.
  • Right to Opt Out: You can opt out of certain data collection practices at any time. We make it easy, not buried in a settings maze.
  • Right to Limit Use: You can ask us to limit how we use sensitive personal information, and we will respect that.
Want to exercise any of these rights? Visit our User Rights Portal, email us at [email protected], or call our privacy hotline. We will get back to you — no runaround.

How We Protect Your Data

Trust means nothing without follow-through. Here is what we actually do to keep your information safe:

  • Encryption everywhere: All data is encrypted in transit and at rest using AES-256, the same standard banks use.
  • Strict access controls: Only the people who need access to your data get it, and they go through multi-factor authentication to get there.
  • Regular security audits: We bring in outside experts to test our systems and find weaknesses before anyone else can.
  • Team training: Everyone on our team goes through privacy and security training. This is not optional.
  • Incident response plans: If something ever goes wrong, we have a detailed plan to contain it, fix it, and tell you about it.

Community Data Done Right

When we work with data at the community level — to understand trends, measure impact, or improve services — we follow strict rules:

  • All community-level data is aggregated and anonymized. Individual people are never identifiable.
  • We are upfront about why we use data and what we learn from it.
  • We regularly ask for your feedback on how we handle data, because this should be a conversation, not a monologue.

Get in Touch

Have questions? Concerns? Just want to know more? Reach out:

We do not treat privacy as a legal checkbox. It is a promise we make to our community — and we intend to keep it.