Privacy Policy

Greenboks LLC ("Greenboks," "we," "us," or "our") operates the Greenboks platform, including our website at greenboks.com, our web application at app.greenboks.com, and related services (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

When you create an account or use our Service, we collect information you provide directly:

• Account Information: Your name, email address, and date of birth.
• Address Information: Street addresses (including house number, street, city, state, ZIP code, and optional apartment/unit number) for households and businesses you register.
• Business Information: Business name and, optionally, website URL for businesses you associate with your account.
• Household Information: A name for each household you create.
• Payment Information: If you are a business user purchasing campaign services, we collect payment information such as credit card or billing details. Payment processing is handled by a third-party payment processor—we do not store your full payment card information on our servers.
• Rewards Program Information: If you participate in our rewards program, we collect information related to your program activity and redemptions.

1.2 Information Collected Automatically

When you interact with our Service, certain information is collected automatically:

• Authentication Data: We use a third-party identity provider for authentication. When you sign in, authentication tokens are generated and stored temporarily in your browser's session storage. We do not store your password—it is managed entirely by our authentication provider.
• Session Data: We store a limited set of session identifiers (such as your account ID) in your browser's session storage, which is cleared when you close your browser.
• Email Engagement Data: When we send you emails, we may collect information about whether the email was delivered, opened, bounced, or resulted in a complaint. We also track whether you click links within our emails.

1.3 Information We Do Not Collect

• We do not use cookies, analytics tools, or tracking pixels on our website or application.
• We do not collect your browsing behavior, device information, or IP address at the application level.
• We do not request access to your device's geolocation. All location data is provided by you through address entry.
• We do not use advertising networks or retargeting services.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To create and manage your account, associate your households and businesses with addresses, and deliver location-relevant local news, events, and community information.
• Address Validation and Geocoding: To verify addresses you enter and determine their geographic coordinates so we can serve locally relevant content.
• Demographic Insights: To provide aggregate demographic information about geographic areas (such as census block groups) near your registered addresses. This data comes from the U.S. Census Bureau and is aggregate-level—it is not about you personally.
• Email Communications: To send you curated local content digests, including news, events, and business-related information relevant to your registered addresses.
• Campaign Delivery: Businesses use our platform to create and manage campaigns that target audiences based on aggregate demographic data associated with geographic areas. Targeting is based on census-level demographics of a location (such as age ranges, income levels, or household composition for a census block group)—it is not based on your individual personal information.
• Payment Processing: To process payments from business users who purchase campaign services through the platform.
• Rewards Program: To operate our rewards program, including tracking program activity and facilitating redemptions at participating businesses.
• Service Improvement: To understand how the Service is used at an aggregate level and to improve its functionality.

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

3.1 Service Providers

We use third-party service providers to operate and support the Service. These providers process data on our behalf and are contractually obligated to protect your information:

• Cloud Hosting and Infrastructure Providers: We use cloud services for hosting, database storage, file storage, and message processing. Data is stored and processed in the United States.
• Authentication Providers: We use a third-party identity provider to manage user sign-in, passwords, and authentication tokens.
• Email Delivery Providers: We use a third-party email service to send email communications and track delivery status.
• Address Validation and Mapping Services: We use mapping APIs for address autocomplete and geocoding. When you search for an address, the search text is sent to our mapping provider. No personal account information is shared with this provider.
• Content Processing and AI Services: We use AI services to process and summarize publicly available news and event content from websites. No personal user data is sent to these providers.
• Web Search Services: We use search services to find publicly available local news content. No personal user data is sent to these providers.
• Payment Processors: We use a third-party payment processor to handle business subscription and campaign payments. Payment card details are collected and processed directly by the payment processor and are not stored on our servers.

3.2 Businesses on the Platform

Businesses use our platform to deliver campaigns to users in relevant geographic areas. When a business runs a campaign:

• Campaigns are generally targeted based on aggregate demographic data associated with geographic areas (e.g., census block groups), not your individual personal information.
• Certain campaign types, such as birthday promotions, may use limited personal information (e.g., your birth month or date) to deliver timely, relevant offers. Businesses do not receive your date of birth—only Greenboks uses this information to determine campaign eligibility.
• Businesses may receive aggregate, anonymized reporting on campaign performance (such as total impressions and click rates). Businesses do not receive your name, email, address, or other personally identifiable information through campaign reporting.
• If you redeem rewards at a participating business, limited information necessary to complete the redemption may be shared with that business.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

3.4 Business Transfers

If Greenboks is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change.

4. Email Communications and Your Choices

We may send you email digests containing local news, events, and other content relevant to your registered addresses. Each email includes an unsubscribe link that allows you to opt out of future emails.

When we send emails, our email delivery provider may track:

• Whether the email was delivered
• Whether the email was opened
• Whether links were clicked
• Bounce and complaint information

We maintain an email suppression list to honor unsubscribe requests and to stop sending to addresses that have bounced or generated complaints.

5. Data Retention

• Account Data: We retain your account information for as long as your account is active. If you request deletion of your account, we will mark your data as deleted in our systems. Due to our data architecture, deleted data may be retained in a deactivated state in our database but will not be accessible through the Service.
• Email Records: We retain email delivery records for operational purposes, including compliance with CAN-SPAM and to manage our suppression list.
• Payment Records: Payment transaction records are retained as required for accounting, tax, and legal compliance purposes.
• Rewards Data: Rewards program activity is retained for the duration of your account and as required for program administration.
• Session Data: Session data stored in your browser is automatically cleared when you close your browser.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• All data transmitted between your browser and our Service is encrypted using HTTPS/TLS.
• Database credentials and API keys are stored securely using encrypted secrets management.
• Authentication is handled through a third-party identity provider using industry-standard OAuth 2.0 / OpenID Connect protocols.
• Our API uses token-based authentication, and unauthorized requests are rejected at the gateway level before reaching our application.
• We do not store passwords—all credential management is handled by our authentication provider.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: You can view your account information, household, and business data through the Service at any time.
• Correction: You can update your account and address information through the Service.
• Deletion: You can request deletion of your account by contacting us at support@greenboks.com. We will deactivate your account and associated data.
• Unsubscribe: You can opt out of email communications at any time using the unsubscribe link in any email we send.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at support@greenboks.com. We will verify your identity before processing your request.

8. Third-Party Links

Our Service may contain links to third-party websites, including local news sources and event pages. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal information.

9. Children's Privacy

The Service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information and terminate the associated account. If you believe someone under 18 has provided us with personal information, please contact us at support@greenboks.com.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: