Privacy Policy

Who we are

The New England Volunteer Organization ("NEVO", "we") operates the website at www.ne-vo.org and the NEVO mobile apps for iOS and Android. The apps show the same service as the website. Questions about this policy can be sent to privacy@ne-vo.org.

Information we collect

• Account information. Your email address, password (stored hashed by our authentication provider), name, and whether you registered as an individual volunteer or as an organization.
• Organization profiles. Organization name, description, location and website for accounts that post opportunities.
• Sign-ups. The opportunities you apply to, your status (pending, approved, rejected, waitlisted) and any withdrawal.
• Service hours. Dates, hours, the activity described, the organization that reviews them, and review notes.
• Proof uploads. Files you attach to an hour entry are stored in a private bucket. Only you and the reviewing organization can open them, through short-lived signed links.
• Push notification tokens. In the mobile apps, a device token so we can send you notifications. Tokens are deleted when you sign out or delete your account.
• Basic usage counts. A view counter per opportunity, so organizations can see interest. This is not tied to your identity.

How we use it

We use this information only to run the service: to create and secure your account, to match volunteers with opportunities, to let organizations review sign-ups and approve hours, and to send transactional email and push notifications about your sign-ups and hour approvals. We do not sell personal information, and we do not use your data for advertising or third-party tracking.

What organizations can see

When you sign up for an opportunity, the posting organization sees your name and the contact email on your account so they can coordinate the shift, along with any hours you submit to them for approval and the proof you attach. Other volunteers cannot see your information.

Service providers

We use Supabase for database, authentication and file storage, Resend for transactional email, and Firebase Cloud Messaging to deliver push notifications to mobile devices. These providers process data on our behalf only.

Retention and deletion

We keep your information for as long as your account exists. You can delete your account at any time from the app: open your dashboard (organizations: the organization portal), scroll to Delete your account, and confirm. Deleting removes your profile, sign-ups, logged hours, uploaded proof files, notification tokens, and — for organization accounts — the organization profile and its postings. Deletion is immediate and cannot be undone.

Children

NEVO is aimed at youth volunteering. Members under 13 should have a parent or guardian create and supervise the account. We collect no more information from a young member than from any other member, and a parent or guardian may email us to request deletion.

Security

All traffic is encrypted over HTTPS. Database access is protected by row-level security so members can only read and write their own records, and proof files are stored privately rather than on public URLs.

Changes

If this policy changes, we will update the date at the top of this page and, for material changes, notify members by email.