Privacy Policy

V.H. Green Directory operates a community directory that helps people discover and support Black-owned businesses. In this policy, “V.H. Green Directory,” “we,” “us,” and “our” refer to the operator of the directory, mobile application, website, and related services.

Questions or privacy requests may be sent to support@syndicate.ac.

Depending on how you use the service, we may collect:

• Account information: email address or phone number, authentication records, first and last name, account status, and sign-in timestamps.
• Directory activity: businesses you save, business verification activity, notification read state, and actions needed to operate and secure your account.
• Community reviews: star ratings, written reviews, review photos, submission timestamps, and a public display name made from your first name and last initial.
• Business submissions: business names, descriptions, addresses, contact details, operating hours, websites, ownership attestations, supporting statements, photos, proposed edits, and review history.
• Location: with permission, the app may read your foreground device location once to identify a supported state or area. We do not save the coordinates used for this lookup.
• Notifications and device data: app installation identifiers, Expo and native push tokens, platform, app version, permission status, delivery status, and notification preferences.
• Attribution and analytics: device and advertising identifiers, install and session information, campaign attribution, and related diagnostics collected through AppsFlyer, subject to platform permissions and your tracking choices.
• Technical information: IP address, browser or device type, request metadata, security logs, and error information generated when the service is used.

We use information to:

• create, authenticate, secure, and support accounts;
• operate search, maps, saved businesses, submissions, verification, community reviews, and directory features;
• review, publish, correct, and protect business listings;
• send requested authentication codes, service notices, and opted-in notifications;
• understand app adoption and improve reliability, usability, and community reach;
• prevent fraud, abuse, unauthorized access, and violations of our Terms; and
• comply with legal obligations and enforce our rights.

We do not sell personal information. We may disclose information in the following circumstances:

• Public directory content: published business information, community reviews, reviewer display names, and public photos are visible to anyone using the directory.
• Service providers: Supabase supports authentication, databases, and file storage; Expo and Apple or Google support app delivery and notifications; our SMS provider delivers phone codes; Mapbox supports map display; and AppsFlyer supports attribution and analytics.
• Imported business data: directory staff may use sources such as Google Places, Yelp, business websites, or other public information to create or verify listings.
• Legal and safety reasons: we may disclose information when reasonably necessary to comply with law, protect people or the service, investigate misuse, or establish and defend legal claims.
• Business changes: information may transfer as part of a merger, financing, reorganization, or sale, subject to applicable privacy obligations.

On platforms that require permission, the app requests authorization before using information for cross-app tracking. You can change tracking, location, and notification permissions in your device settings. Disabling a permission may limit the related feature but does not prevent you from browsing the public directory.

We retain account information while your account is active and as reasonably necessary to provide the service, meet legal obligations, resolve disputes, and protect the directory. Retention periods vary by record and purpose. Security logs, provider records, and backups may remain for a limited period after deletion before they are overwritten or removed.

You may permanently delete a consumer account in the app under Profile → Delete account, or at the public Delete account page after verifying your identity. Deletion removes your profile, authentication account, community reviews and their photos, drafts, saves, verification activity, private submissions, targeted notifications, and account-linked device tokens.

Deletion also removes your published uploads, contributions, and account-created listings. Independently sourced business information may remain after your contributions and account associations are removed. We retain a non-identifying deletion receipt for up to 25 hours to safely confirm retried requests.

We use administrative, technical, and organizational measures intended to protect information, including authentication, access controls, encrypted network transport, database authorization policies, and restricted service credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, or a copy of personal information, and to appeal certain decisions. You may also update available profile fields, remove saved businesses, change permissions, opt out of promotional notifications, or delete your account. We may need to verify your identity before completing a request.

Accounts are intended only for people who are at least 18 years old. We do not knowingly permit minors to create accounts. If you believe a minor has provided personal information, contact us so we can investigate and take appropriate action.

Our providers may process information in the United States and other countries. Those locations may have privacy laws different from those where you live. Where required, we use appropriate safeguards for these transfers.

We may update this policy as the service or law changes. We will post the revised policy with a new “Last updated” date and provide additional notice when required.