Privacy Policy

1. Information We Collect

a. Information You Provide

• Account & Profile: Name, email address, and optional profile details when you create an account.
• Waitlist: Your full name, phone number, and email address, which are required; and your location and birth information (date, time, and place of birth), which are optional. Birth information is used only to place you within the community's astrological and human-design work — leave it blank and nothing else about your membership changes.
• The LoreQuest Declaration: If you sign the Declaration, we record your full name, typed legal name, email address, phone number, location, optional birth information, the image of the signature you draw, the version of the Declaration text you signed, your signatory number, and the date and time you signed. See Section 9 for the electronic signature record.
• Questionnaire Responses: Answers you submit through our community questionnaire, including personal interests, skills, location, and any other information you choose to share.
• Event Registration: Name, contact information, emergency contacts, dietary needs, and liability waiver acknowledgments when you register for events.
• Communications: Messages you send us via email, contact forms, or social media.

b. Information Collected Automatically

• Usage Data: Pages visited, time spent, referral source, UTM parameters, and interaction events (e.g., form submissions, button clicks).
• Device Data: Browser type, operating system, screen resolution, and IP address.
• Cookies & Tracking: We use session identifiers and anonymous visitor tracking to understand site usage. We do not use third-party advertising cookies.

2. How We Use Your Information

• To add you to the community waitlist and contact you when there is a place, an event, or a next step for you.
• To record and deliver your signature on the LoreQuest Declaration, and to keep the signed record for as long as the Declaration stands.
• To process your community questionnaire and evaluate alignment.
• To register you for events and manage event logistics.
• To send transactional emails (confirmations, updates, approvals).
• To send marketing emails about events and community updates, only with your explicit consent.
• To improve our website, services, and community programs.
• To perform analytics and understand how our community engages with our platform.
• To resolve your anonymous browsing session to your identity when you later identify yourself (e.g., by submitting a form).
• To comply with legal obligations.

3. Email Communications

We use Resend as our email service provider. When you provide your email and consent to communications, your email address and relevant profile data are shared with Resend to deliver transactional and marketing emails.

Every marketing email includes an unsubscribe link. You may also unsubscribe at any time by visiting your personalized unsubscribe link or emailing us at community@joinnewearthcollective.com. Unsubscribe requests are processed immediately.

4. Text Messages (SMS)

We ask for a phone number on the waitlist and the LoreQuest Declaration so we can reach you about gatherings, and about your place in the community, when email is too slow. Consent to text messages is always a separate, optional checkbox — never bundled with anything else, and never a condition of joining, of signing the Declaration, or of any purchase.

If you opt in, you may receive occasional messages about community events and updates. Message frequency varies. Message and data rates may apply. Reply STOP to any message to stop receiving them, or HELP for help. You can also withdraw consent at any time by emailing community@joinnewearthcollective.com.

We do not sell or share phone numbers with third parties for their own marketing. Numbers are shared only with the provider that delivers our messages on our behalf (see Section 6).

5. Data Storage & Security

Your data is stored in a PostgreSQL database hosted by Neon. Signed Declaration copies (PDFs) are stored in Vercel Blob under unguessable URLs. We use industry-standard security measures including:

• Encrypted connections (HTTPS/TLS) for all data in transit.
• Encryption at rest for both the database and stored documents.
• Authentication via Better Auth, with administrative access limited to approved team accounts and role-based permissions.
• Secure, unique unsubscribe tokens for email preference management.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Sharing & Third Parties

We do not sell your personal information. We share data only with:

• Resend — email delivery, including the signed copy of your Declaration.
• Neon — database hosting.
• Vercel — website hosting, deployment, and document storage.
• Klaviyo — marketing email and text message sequences, if you opt in.
• Legal compliance — when required by law, regulation, or legal process.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data (“right to be forgotten”).
• Withdraw consent for email or SMS communications at any time.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing of your data for certain purposes.

To exercise any of these rights, email community@joinnewearthcollective.com. We will respond within 30 days.

8. Consent & Compliance

We track consent for email and SMS communications in compliance with CAN-SPAM, the TCPA, and GDPR requirements. Email and SMS consent are collected as separate choices, and each is recorded with its own timestamp. When you submit a form with consent, we record:

• The date and time each consent was granted.
• Your IP address at the time of consent.
• The specific communication channels you consented to.

Withdrawing one consent does not withdraw the other, and withdrawing either has no effect on your membership or on a Declaration you have already signed.

9. Electronic Signatures

Signing the LoreQuest Declaration creates a legally binding electronic signature under the U.S. Electronic Signatures in Global and National Commerce Act (15 U.S.C. § 7001). To make that record verifiable, we retain an audit trail alongside your signature:

• Your typed legal name and the signature image you drew.
• The exact version of the Declaration text that was on screen when you signed.
• The date and time of signing, and the separate timestamp of each consent you gave.
• Your IP address, browser user agent, and the page that referred you.
• Your signatory number and your signed PDF copy.

A copy of the signed Declaration is emailed to you at the address you provide. You may request another copy at any time. Because this is a signature record rather than a marketing record, we keep it even if you later withdraw email or SMS consent — but you can still ask us to delete it, and Section 7 applies.

You are not required to accept electronic records to be part of this community. If you would prefer to sign on paper or receive your copy another way, write to us at community@joinnewearthcollective.com.

10. How Long We Keep Your Data

• Waitlist and questionnaire entries: kept while you are part of the community or waiting to be, and deleted on request.
• Declaration signature records: kept for as long as the Declaration stands, because the signature is the point of the record.
• Analytics and session data: kept in aggregate; identifiable session records are pruned as they age out of usefulness.
• Consent records: kept as long as we hold the underlying contact, because they are our proof of the permission you gave.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of our services after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at community@joinnewearthcollective.com.