Privacy Policy
Last updated: September 11, 2026
This Privacy Policy explains how PondBridge ("we," "us," or "our") collects, uses, and shares information when you use our website and related services (the "Service").
If you have questions or requests about privacy, contact us at [email protected].
1) Information We Collect
A. Information You Provide
When you create an account or use the Service, you may provide:
- Account information: name, email, password (stored in encrypted/hashed form)
- Profile information: phone number, city/state, camp role, high school, colleges, graduation years, jobs, industry, social links, and other details you add
- User content: photos you upload, posts/comments, messages, and other content you submit
- Communications: messages to support, feedback, and other communications
B. Information Collected Automatically
We may automatically collect:
- Device and usage data: IP address, browser type, device identifiers, pages viewed, timestamps, referring URLs
- Logs and diagnostics used for security and troubleshooting
C. Cookies and Similar Technologies
We may use cookies and similar technologies to:
- keep you logged in
- remember preferences
- understand usage and improve the Service
You can control cookies through your browser settings. Some features may not work properly without cookies.
2) How We Use Information
We use information to:
- provide, maintain, and improve the Service
- create and manage accounts and profiles
- enable community features (search, profile viewing, messaging, forums)
- process uploads and display content you choose to share
- send service-related messages (e.g., account verification, password resets, security alerts)
- send announcements or newsletters (where applicable and permitted)
- monitor, prevent, and address fraud, abuse, and security issues
- comply with legal obligations
3) How We Share Information
A. With Other Users (Community Visibility)
The Service is an alumni network, and your profile information and content may be visible to other users of the Service. For example:
- your name, camp role, and profile details you provide
- photos/posts you upload or share
- messages you send to other users (visible to recipients)
Important: Please do not share information you do not want other members to see.
B. With Service Providers
We may share information with vendors who help operate the Service (for example: hosting, databases, storage, email delivery, analytics). These providers are authorized to use your information only as necessary to provide services to us.
C. For Legal, Safety, and Security Reasons
We may disclose information if we believe it is necessary to:
- comply with law, regulation, or legal process
- enforce our Terms of Service
- protect the rights, safety, and security of the Service, our users, or others
- prevent fraud or abuse
D. Business Transfers
If we're involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.
4) Your Choices and Rights
A. Edit Your Information
You can update many profile details through your account/profile settings.
B. Delete Your Account
You may request account deletion by contacting [email protected]. We'll take reasonable steps to delete your account and associated profile information, subject to legal and security requirements.
C. Email Preferences
You can opt out of non-essential emails by using an unsubscribe link (if provided) or by contacting us.
Note: We may still send essential service emails (password resets, security alerts, account notices).
5) Data Retention
We retain information for as long as needed to provide the Service and for legitimate business purposes (such as security, dispute resolution, and enforcement), unless a longer retention period is required by law.
6) Security
We use reasonable safeguards designed to protect information. However, no system is 100% secure, and we cannot guarantee absolute security.
7) Children's Privacy
The Service is intended for users 14 years of age or older. We do not knowingly collect personal information from anyone under 14. If you believe someone under 14 has provided personal information, contact [email protected] and we will take steps to delete it.
8) International Users
If you access the Service from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.
9) Third-Party Links
The Service may contain links to third-party sites (for example, social profiles). We are not responsible for the privacy practices of third parties.
10) Changes to This Policy
We may update this Privacy Policy from time to time. We'll update the "Last Updated" date and may provide additional notice where appropriate.
11) Contact Us
For privacy questions or requests, contact: [email protected]
Google connected email
How PondBridge uses Google account data
PondBridge allows an authorized camp administrator to connect a Google account and explicitly send one personal email at a time from that Gmail address.
Google permissions
PondBridge requests openid and email to verify and display the connected account, and https://www.googleapis.com/auth/gmail.send to submit the email chosen by the administrator. PondBridge does not request permission to read or search the mailbox, access contacts or drafts, manage Gmail settings, or delete Gmail data.
The connection is not used for bulk, scheduled, background, or account-security email.
What PondBridge stores and shares
When an administrator connects Gmail, PondBridge stores the account’s verified email address, Google account identifier, token-expiration information, and encrypted OAuth access and refresh tokens.
When the administrator sends an email, including its self-test, PondBridge transfers the selected recipient address and message content to Google for delivery. PondBridge stores submitted subject, message content, recipient, delivery outcome, and related camp email history. A separate send-safety ledger stores identifiers, timestamps, recipient-address hash, and Google message identifier when returned.
OAuth credentials are encrypted and are not returned to the browser. Access to connection and email records is limited to authorized camp administrators, PondBridge systems, and service providers that host or protect the service. Human access to Google user data is limited to uses allowed by Google’s Limited Use requirements, such as support with your specific permission, security, or legal compliance.
Limited use and choices
PondBridge does not sell Google user data or use it for advertising, credit or lending decisions, surveillance, or training generalized AI or machine-learning models. PondBridge handles information received from Google APIs in accordance with the Google API Services User Data Policy, including its Limited Use requirements.
Disconnecting Gmail removes the connection and its active OAuth credentials and Google account identifiers from this camp in PondBridge. It does not remove PondBridge’s permission in your Google Account. To revoke that permission, remove PondBridge from Google Account connections; this also affects any other camps using the same Google account. Sent history and the send-safety ledger remain camp communications records subject to this Privacy Policy’s general retention terms.
For Google account data questions or requests, contact [email protected].
