Privacy · staging draft

Privacy notice

Brio is designed to collect only the information needed to review applications, operate membership, and arrange private events.

What we collect

We collect the application details you provide, account and approved profile information, administrative decisions, event registrations, operational email metadata, security records, and normalized Stripe Sandbox transaction status. We do not ask for identity documents or sensitive-category information.

Why we use it

Application and membership processing is necessary to take steps toward, and perform, the community agreement. Security and limited audit records support our legitimate interest in operating a safe service. There is no automated decision-making or scoring.

Who can see it

Authorized Brio administrators can review applications and profile changes. Service providers process only what their role requires. Event joining details are disclosed only to confirmed registrants. The PoC has no public member directory.

How long we keep it

Pending, rejected, and withdrawn applications are retained for up to 90 days; accepted screening answers for up to 90 days after onboarding; event-attendance details for 90 days after an event; security logs for 90 days; and audit history for up to 12 months. Staging mail is deleted after seven days. Legal financial retention will be defined before production.

Your choices and rights

Members can immediately download a machine-readable subset of core Brio application data. A complete access package, including relevant administrator and provider-held identity, delivery, billing, and audit context, is available through the assisted export request in Account → Privacy. Members can also request correction, account closure, or deletion there. Some records may be retained where law requires it. Requests are reviewed by a person and targeted for response within one month.

International processing and contact

Provider locations, processor agreements, subprocessors, safeguards, and the production privacy contact are pending legal review. The prototype must not be promoted to production until those details are complete.

Document version: staging-2026-09-04 · Last updated 4 September 2026