Privacy Policy

1. Introduction

The Michigan Odia Society of America ("MI-OSA," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our member portal website and services.

2. Information We Collect

Personal Information

When you register for an account or use our services, we may collect:

• Name and contact information (email, phone number)
• Mailing address (street, city, state, zip code)
• Family information (spouse name and contact)
• Profile picture (if provided or via Google OAuth)
• Membership type and payment information
• Event RSVP and attendance records
• Volunteer preferences and participation history
• Donation records

Authentication Information

We collect authentication data including email addresses, encrypted passwords, and OAuth tokens when you sign in with Google. We use BetterAuth for secure authentication management.

Automatically Collected Information

When you access our portal, we may automatically collect certain information including IP addresses, browser type, device information, and usage patterns through cookies and similar technologies.

3. How We Use Your Information

We use the collected information to:

• Create and manage your member account
• Process membership dues and event payments
• Send important announcements and event notifications
• Manage event RSVPs and attendance
• Coordinate volunteer activities
• Process donations and provide receipts
• Maintain our member directory (with your consent)
• Improve our services and user experience
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell your personal information

MI-OSA will never sell, rent, or lease your personal information to third parties.

Limited Sharing

We may share your information only in these circumstances:

• Member Directory: Basic contact information may be shared with other members through our member directory, only if you opt-in
• Service Providers: With trusted third-party services that help us operate our portal (e.g., email services, payment processors)
• Legal Requirements: When required by law or to protect our rights and safety
• Board Members: With MI-OSA board members and administrators for organizational purposes

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted password storage using industry-standard hashing
• Secure HTTPS connections for all data transmission
• Regular security updates and monitoring
• Access controls limiting data access to authorized personnel only
• Secure cloud hosting with reputable providers

6. Third-Party Services

Our portal integrates with the following third-party services:

• Google OAuth: For optional sign-in with Google accounts
• Email Services: For sending notifications and newsletters
• Payment Processors: For processing membership dues and donations (Stripe/Zelle)

These services have their own privacy policies, and we encourage you to review them.

7. Your Rights and Choices

You have the right to:

• Access and update your personal information through your profile
• Opt-out of non-essential communications
• Control your visibility in the member directory
• Request deletion of your account and associated data
• Withdraw consent for data processing where applicable

To exercise these rights, please contact us at ourosa@gmail.com

8. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Upon account deletion, we will remove your personal information within 30 days, except where retention is required by law.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction. By using our services, you consent to such transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: