Privacy policy

The short version

We collect the least we can. You can use every public page of this site without telling us anything at all — you do not need an account to find an organization, a resource, or a meeting.

If you choose to create an account, we hold your email address, the name you give us, and the things you choose to save. We never sell your information, we do not advertise to you, and we run no third-party analytics or tracking on these sites.

If you tell us you are a person in recovery, that is optional, it is stored apart from everything else, and it is never shown to the organizations listed in our directory.

Who we are

Recovery Epicenter Foundation operates its own website at recoveryepicenterfoundation.org, the Recovery Roundtable website at recoveryrt.com, and the Recovery Recorded website at recoveryrecorded.com, along with the accounts service that signs you in to any of them. The Roundtable and Recovery Recorded are programs of the Foundation, so one account covers the Foundation's sites and this one policy governs all of them.

For anything in this policy — a question, a correction, or a request to delete your information — contact us by email or phone. Both reach a person at the Foundation.

What we collect, and when

Nothing on our public pages requires an account, and we do not ask you to identify yourself to read them.

• When you sign in: your email address, the name you give when you sign in, and an account identifier created for you. We never see or store a password, because there isn't one — signing in sends a one-time code to your email instead.
• Your profile, if you fill one in: a display name, your county, how you are involved in recovery, and how you prefer to be contacted. Every one of these is optional.
• What you save: if you save a round table to your account, we store which one and when. Saving is a private bookmark — it is not a registration, and the organization hosting the meeting is not told.
• If you claim an organization: the organization you are claiming, the email address you claim it with, and any note you send with the request, so our staff can decide whether to approve it.
• When you use a form: whatever you enter — typically your name, email address, and message, plus county, organization and interests on the membership form.
• Technical information: a sign-in cookie that lasts seven days, and ordinary server logs including IP address, kept briefly for security and troubleshooting.

Recovery status gets particular care

On a substance-use recovery directory, being identified as a person in recovery is the sensitive part. We treat it that way rather than as one more field.

Telling us how you are involved is always optional, and declining is a complete answer that costs you nothing — no feature is withheld for leaving it blank. It is stored separately from the rest of your account, and it is deliberately unavailable to the organizations in our directory: when an organization's administrator views its own member list, that information is not something they can request, because the list they are shown cannot return it.

If you enter it on the membership form instead, it reaches the Foundation as part of your message, along with everything else you wrote there.

What we do not do

• We do not sell, rent, or trade your information.
• We do not show you advertising, and we do not share your information with advertisers.
• We run no third-party analytics, tracking pixels, or social media trackers on these sites.
• We do not track you across other websites.
• We do not send marketing text messages.
• We do not store passwords, because the sign-in does not use one.

Who else handles your information

We use a small number of service providers to run the sites. They process information on our instructions and for no purpose of their own.

• An identity provider (WorkOS) sends your sign-in code and verifies it. It holds your email address and name.
• Cloudflare hosts the sites and the accounts service, and stores the account and saved-item databases.
• reddysite, operated by OppKo, builds and maintains the sites. Messages you send through a form are delivered to the Foundation and also recorded in reddysite's system so the Foundation can see and answer them in one place.

How long we keep it

Your account and anything you have saved are kept until you ask us to delete them. Sign-in sessions expire after seven days. Messages sent through a form are kept as part of the Foundation's correspondence. Server logs are kept briefly.

Your choices

You are in control of your account and you do not need our help for most of it.

• See and change what we hold: sign in and open your account page.
• Delete your profile: you can do this yourself from your account page.
• Delete your account entirely, or ask what we hold about you: email us and we will action it.
• Sign out everywhere: use the sign-out link, which ends the session on the site and at the accounts service.
• Stop hearing from us: reply to any email from us and ask, or use the unsubscribe link where one appears.

Children

These sites are intended for adults and we do not knowingly collect information from children under 13. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

If we change how we handle your information, we will change this page and update the date at the top. If a change is significant and we hold your email address, we will tell you.

Contact us

For any question about this policy, or to ask us to correct or delete what we hold, email admin@recoveryepicenterfoundation.org or call 727-223-3453.