Privacy Policy

RECED ("we," "our," or "us") operates the RECED pre-launch landing page. This Privacy Policy explains how we collect, use, and protect your personal information when you interact with our website and sign up for early access to the RECED marketplace.

Entity: Redeemers Center for Entrepreneurship Development (RECED), 123 Innovation Drive, Dallas, TX 75201

This policy applies to all visitors and users of the RECED website and services. By providing your personal information, you acknowledge that you have read and understood this policy.

We collect the following categories of information:

• Identifiers — email address, provided by you when signing up for early access
• User preferences — whether you identify as a business owner or customer (user type selection)
• Internet activity information — IP address and browser information, collected automatically for security and spam prevention
• Marketing attribution data — UTM parameters from the URL, used to understand how you found us
• Consent records — record that you consented to receive communications by signing up

Under the California Consumer Privacy Act (CCPA/CPRA), the categories above correspond to: Identifiers (Cal. Civ. Code § 1798.80(e)), Internet or Other Electronic Network Activity, and Inferences.

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Consent (Art. 6(1)(a)) — for sending marketing emails and launch notifications. You provide consent by submitting your email through our signup form, which states that we will send you updates. You may withdraw consent at any time by unsubscribing.
• Legitimate Interest (Art. 6(1)(f)) — for collecting IP addresses and browser information for security, fraud prevention, and aggregate analytics. Our legitimate interest in maintaining a secure service does not override your fundamental rights.
• Performance of a Contract (Art. 6(1)(b)) — for processing your email signup request and delivering the early access information you requested.

Your information is used to:

• Send you pre-launch updates and launch notifications about the RECED marketplace
• Segment communications by user type (business owner vs. customer) so you receive relevant content
• Send automated email sequences via our email service provider, Brevo
• Generate aggregate analytics (total signups, segment breakdown) to help us plan the marketplace launch
• Migrate your data to a full user profile upon marketplace launch, if you choose to create an account

By submitting your email through our signup form, you consent to receive email communications about RECED, including pre-launch updates and launch notifications. We use Brevo as our email service provider, which processes your data on our behalf as a data processor.

• Consent via signup — by providing your email and signing up for early access, you consent to receive relevant communications. Our signup form clearly states that we will send you updates.
• Unsubscribe — every email contains an unsubscribe link. We honor opt-out requests within 10 business days as required by CAN-SPAM.
• Email tracking — our emails may contain tracking pixels to measure open rates and engagement. You can disable image loading in your email client to prevent this tracking.
• No third-party marketing — we will never share your email with third parties for their marketing purposes.

We use the following third-party services to operate our pre-launch page. These providers act as data processors on our behalf and are contractually bound to protect your data:

• Brevo (email automation) — Brevo Privacy Policy
• Supabase (database hosting) — Supabase Privacy Policy
• Vercel (website hosting) — Vercel Privacy Policy

We do not sell your personal information to any third party. We do not share your data with third parties for their own marketing purposes.

Our third-party service providers (Brevo, Supabase, Vercel) may process your data in the United States or other countries outside the European Economic Area (EEA). When your data is transferred internationally, we ensure adequate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with each provider that include GDPR-compliant transfer mechanisms
• Provider certifications and compliance programs (where applicable)

We retain your data according to the following schedule:

• Lead data (email, user type) — retained for the pre-launch period. Leads who create marketplace accounts at launch will have their data migrated to full user profiles. Leads who do not create accounts within 12 months of marketplace launch will have their data deleted.
• IP addresses and browser information — deleted after 90 days. This data is only used for security and spam prevention.
• UTM and referrer data — retained in aggregate form only; individual-level attribution data is deleted after 90 days.

You can request early deletion of your data at any time by contacting us.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit (TLS/HTTPS) for all data transmitted between your browser and our servers
• Encryption at rest for data stored in our database
• Access controls limiting data access to authorized personnel only
• Regular security reviews of our third-party service providers

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal data:

Under GDPR (EEA residents):

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Restrict processing — request that we limit how we use your data
• Data portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — withdraw your consent for marketing communications at any time, without affecting the lawfulness of prior processing
• Lodge a complaint — file a complaint with your local data protection authority

For all users:

• Unsubscribe from emails at any time using the link in every email we send
• Request deletion of your data by emailing support@reced.com

To exercise any of these rights, contact us at support@reced.com. We will respond within 30 days (or sooner where required by law).

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know — you may request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete — you may request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out of Sale — we do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination — we will not discriminate against you for exercising any of your CCPA rights

To submit a verifiable consumer request, email us at support@reced.com with the subject line "CCPA Request." We will verify your identity before processing your request.

Our service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@reced.com.

We use minimal cookies. Our site does not use tracking cookies or third-party advertising cookies. Only essential cookies required for website functionality may be used.

• Email tracking pixels — our email service provider (Brevo) may embed small images in emails to track whether messages are opened. You can disable this by blocking image loading in your email client.
• Global Privacy Control (GPC) — we recognize and honor the GPC browser signal as a valid opt-out preference signal.
• Do Not Track (DNT) — we also honor DNT browser signals where technically feasible.

Our website may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

If we make significant changes to this privacy policy, we will notify you via the email address you provided when signing up. We encourage you to review this policy periodically.

For privacy inquiries or to exercise any of your rights, contact us at:

• Email: support@reced.com
• Address: 123 Innovation Drive, Dallas, TX 75201