Privacy Policy

Our commitment

JOI Denver respects your privacy. We collect only the information we need to run our programs and stay connected with your family, we protect it using reputable, security-audited service providers, and we never sell your information or share it for advertising.

Information we collect

• Contact details: name, email address, phone number, and (when you provide it) mailing address.
• Family / household information: the family members you choose to add, so we can register your household for events in one step.
• Children’s information: for children you enroll in our programs, a parent or guardian provides the child’s name, date of birth, grade, and any allergies or accommodations. This is always provided by an adult, never collected from a child directly.
• Participation: the events you register for and attend.
• Giving history: the date, amount, and program for donations you make. We never see or store your credit-card number (see “Payments”).
• Communications: messages you send us and your contact preferences.

How we use your information

We use it to register you for events, communicate with you (by email or, with your consent, text message), run our educational programs, process and acknowledge donations, understand and improve community engagement, and keep accurate nonprofit records. We contact you about JOI programs and community life — never for third-party advertising.

What we do — and don’t do — with your information

What we do with it: we use your information only to run JOI’s own programs and stay in touch with you — registering you and your household for events, sending confirmations and reminders, processing and acknowledging your donations, running our educational programs, keeping accurate nonprofit records, and learning how to serve our community better. That is the full extent of how it is used.

What we never do with it: we never sell, rent, trade, or lease your personal information to anyone. We never share it with advertisers or use it for third-party marketing, and we do not use advertising or cross-site tracking. We never disclose it to outside organizations — the only parties who ever touch it are the trusted service providers listed below who help us operate (each bound by their own privacy and security obligations), and any disclosure the law requires of us. We never make your information public, and our staff and volunteers may access it only as needed for their JOI roles.

You stay in control of your information: you can review, correct, or ask us to delete your household’s details at any time, and opt out of emails or texts whenever you like (see “Your choices and rights” below).

Where your information is stored and how it’s protected

Your information is held in a secure, managed database provided by Supabase, which runs on Amazon Web Services (AWS) infrastructure in the Canada (Central) region. Your data is encrypted both while stored (AES-256) and while transmitted (TLS), and access is restricted by database-level security rules and staff role permissions, so members can only see their own household’s information.

AWS maintains industry-leading, independently audited security and privacy standards (including SOC 2 and ISO 27001). You can review the AWS Privacy Notice and its compliance program, and our database provider’s statements at Supabase Security and Supabase Privacy.

Payments

Donations and payments are processed by Zeffy using Stripe, a PCI-DSS Level 1 certified payment processor. Card details are entered directly with Stripe and are never stored on our systems — we retain only a record that a payment was made (amount, date, and program). See Zeffy’s privacy policy.

The service providers we rely on

We share limited information only with the providers that help us operate, each bound by their own privacy and security obligations:

• Supabase — our secure database / member system (hosted on AWS, Canada).
• Vercel — hosts our website; serves the site and does not store a copy of your data.
• Zeffy / Stripe — payment processing.
• Resend — sends our automated emails (confirmations, receipts).
• Google Workspace — our staff email and calendars.

We do not sell, rent, or trade your personal information.

Text messages

Some reminders and invitations are sent by text message from Rabbi Lehrfield’s phone. Standard message and data rates may apply, and you can opt out at any time by replying or letting us know.

Children’s privacy

Information about children is provided and consented to by a parent or guardian, for the purpose of enrolling them in our programs. We do not knowingly collect information directly from children. Parents may review, update, or request deletion of their child’s information at any time by contacting us.

Your choices and rights

You may review and update your household’s information at any time through your My JOI account, or by contacting us. You can ask us to correct or delete your information, and you can opt out of emails or texts at any time. We’ll honor these requests promptly, subject to records we’re required to keep as a nonprofit.

Cookies

Our website uses a small number of cookies that are necessary for it to work (for example, to keep you signed in to your member account). We do not use advertising or cross-site tracking cookies.

Data retention

We keep your information for as long as you are part of the JOI community and as needed for our nonprofit records, and we delete or anonymize it on request where we are not legally required to retain it.

Changes to this policy

We may update this policy from time to time. We’ll post the new version here with a revised effective date.

Contact us

Questions about your privacy or this policy? Email info@joidenver.com or call (720) 900-4420.