Privacy Policy — Nexi ARC

1. Overview

This Privacy Policy explains what information Nexi ARC collects, how we use it, and the choices you have. It applies to everyone who visits the site and to vendor and client account holders. Using the site means you accept this policy along with our Terms of Service.

2. Information We Collect

Vendor account: organization name, vendor number, email, password (hashed), service details, contact preferences, and any content you post (listings, Bulletin events, replies to contact requests).
Client account: email, password (hashed), UCI number, and your first and last initials. UCI and full account email are stored privately and never shown publicly.
Reviews: star rating, optional review text, and your first/last initial. The rest of your profile is never attached to a public review.
Usage data: page visits, referrer, browser/user-agent string, and a per-session identifier. This helps us understand site usage and improve features.
Communications: contact-request forms you submit to vendors are shared with that vendor only.

3. What Is Public vs. Private

Public: vendor listings, vendor Bulletin posts, and the star rating, review text, and initials of any review you submit.
Private: client profiles, UCI numbers, saved-vendor lists, account emails, and contact-request submissions. Client profiles never appear in search results or in any public listing.

4. How We Use Information

Operate the directory, authenticate accounts, and route users to the correct experience (vendor dashboard vs. client account).
Send vendors periodic reminder emails (per their chosen frequency) to keep listings accurate.
Display public reviews and Bulletin posts.
Monitor for abuse, debug issues, and improve the product.

5. Sharing

We do not sell personal information. We share information only with: (a) the vendor a client contacts via a contact request; (b) service providers (hosting, email delivery, authentication) that process data on our behalf under confidentiality obligations; or (c) where required by law.

6. Security

The site is served over HTTPS. Passwords are stored hashed. Database access is restricted by row-level security so that, for example, only you can read your client profile or saved vendors. No system is perfectly secure — please use a strong, unique password.

7. Your Rights and Choices

Access and update: manage your profile, listings, or reviews from your account page at any time.
Delete: use the "Delete account" option in your account page to permanently remove your account and associated data.
Email reminders: vendors can set reminder frequency to "Off" in the dashboard.
California residents have additional rights under the CCPA/CPRA, including the right to know, delete, and not be discriminated against for exercising those rights.

8. Children

Nexi ARC is not directed to children under 13. Adults (typically parents, guardians, or the client themselves if 18+) create and manage client accounts. Do not post identifying information about minors.

9. Retention

We keep account information for as long as your account is active. When you delete your account, we remove your profile, saved vendors, and reviews. Aggregated, non-identifying analytics may be retained.

10. Changes

We may update this policy from time to time. Material changes will be communicated by email or via an on-site notice.

11. Contact

For privacy questions or requests, contact us via the options listed in your account dashboard.