Skip to content

Commit

Permalink
Update privacy policy
Browse files Browse the repository at this point in the history 
Reference: https://docs.google.com/document/d/1-NQLpZT5qqYKrwwm4VX1cFghaB9RG7w4AcTE59q-cNc/edit?usp=sharing
Co-Authored-By: Amy <apark0006@student.cerritos.edu>
  • Loading branch information
@karnikaavelumani @amyipdev
karnikaavelumani and amyipdev committed Sep 12, 2023
1 parent e23db9e commit e88bee5
Show file tree
Hide file tree
Showing 3 changed files with 141 additions and 59 deletions.
9 changes: 2 additions & 7 deletions src/routes/(site)/privacy/+page.svelte
View file
Original file line number Diff line number Diff line change
Expand Up @@ -7,13 +7,8 @@
<Spacing --min="175px" --med="200px" --max="200px" />

<Block>
<h1 slot="headline" class="size-lg">Privacy Policy</h1>
<p slot="text" class="size-sm">
Our privacy policy describes how our Discord bot collects, uses, and shares your personal data.
<br />
<br />
Last updated January 16th, 2022
</p>
<h1 slot="headline" class="size-lg">Privacy Policy for ACM at CSUF</h1>
<p slot="text" class="size-sm">Last updated September 19th, 2023</p>
</Block>

<Spacing --med="64px" />
Expand Down
2 changes: 1 addition & 1 deletion src/routes/(site)/privacy/page.test.ts
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4,5 +4,5 @@ test.describe.configure({ mode: 'parallel' });

test('privacy page has expected h1', async ({ page }) => {
await page.goto('/privacy');
expect(await page.textContent('h1')).toBe('Privacy Policy');
expect(await page.textContent('h1')).toBe('Privacy Policy for ACM at CSUF');
});
189 changes: 138 additions & 51 deletions src/routes/(site)/privacy/policy.svelte
View file
Original file line number Diff line number Diff line change
@@ -1,83 +1,169 @@
<main>
<section id="welcome">
<h2 class="headers">Welcome to ACM!</h2>
<section id="introduction">
<h2 class="headers">Introduction</h2>

<p>
acmCSUF provides a social online platform, Discord, that brings passionate Titans together to
engage in multiple conversations regarding our community, the tech field, and many more. Our
Privacy Policy safeguards the privacy of all members to our server. This notice describes our
privacy policy by respecting information that is collected from said members to our server.
This privacy policy is an agreement between you, the user of our services (the “User”), and
the Association for Computing Machinery chapter at California State University, Fullerton
(henceforth “ACM”). By registering for access to all channels in the ACM Discord server (the
“Discord”), you hereby agree to all the terms of this agreement. The terms and conditions
described in this policy shall apply exclusively to usage and management of Discord bots made
by ACM (the “services”), and shall not apply to the general distribution of data from Discord
by other users or by members of ACM. The distribution of data through other means is regulated
by the Discord Terms of Service <a href="https://discord.com/terms"
>(https://discord.com/terms)</a
>
and the Discord Privacy Policy
<a href="https://discord.com/privacy"> (https://discord.com/privacy)</a>. The valid, working
version of this privacy policy shall exclusively be hosted on the ACM website (the “Website”)
at <a href="https://acmcsuf.com/privacy"> https://acmcsuf.com/privacy</a>. This information
details the data which we collect about you, basic rights as recognized under the laws
covering the jurisdiction where ACM resides, and how to exercise your rights.
</p>
</section>

<section id="collected-info">
<section id="information-we-collect">
<h2 class="headers">Information we collect</h2>

<p>
<span class="brand-med">Information you provide</span>: We collect information that you
voluntarily provide, such as when you interact with our discord bot. Information that we
collect may include, but not be limited to, your email address, discord ID, first and last
name, status, and class subjects.
We may collect any information that is submitted over Discord, including but not limited to
messages sent in the ACM discord, forms submitted through ACM discord bots, Discord profile
information, and other communications made over Discord. This data may be associated with your
identity through any identifying information you provide over any channels. Any personal
information provided to another person may enter our data collections in the event that they
distribute the data over Discord or through some other means of interaction with our Discord
bots; this data shall be considered their data, but we may, at our discretion, honor requests
by a user to delete their personal information when submitted by another individual.
</p>
</section>

<section id="our-info-usage">
<h2 class="headers">Our use of your information</h2>
<section id="authority">
<h2 class="headers">Authority</h2>

<p>
<span class="brand-med">Data we collect automatically</span>: When you interact with any of
our discord bots, we receive and store the given information within our database maintained by
our officers. Our officers may use such information to pool it with others in order to track
the number of members within our club, the number of members with similar classes, etc.
The right to handle requests under this agreement shall generally, as well as when explicitly
stated, be given to General Board members of ACM, as defined by ACM’s Constitution (in its
latest revision). However, at any time when General Board members have jurisdiction over an
action, they may choose (either recurring or for a specific instance) to designate authority
over a request to another member of ACM, who shall have the full authority to handle the
request(s) and action(s) as per the provisions of this policy.
</p>
</section>

<section id="data-sale-and-distribution">
<h2 class="headers">Data sale and distribution</h2>

<p>
ACM shall not, under any circumstances, sell your data in any way through bots created by ACM
in the Discord. This does not limit any other rights of distribution of messages directly
through Discord; ACM simply agrees not to sell data directly from collections made by our
Discord bots. We may aggregate and entirely anonymize data, and use that data for ACM
promotional purposes; we will take all reasonable measures to ensure that no data from among
our collected data with personally identifiable information is distributed. Under certain
circumstances, we may need to distribute lists of event attendees as collected by the services
to California State University, Fullerton; by registering for an event, you agree to this
distribution. We also reserve the right to distribute Discord messages using Discord bots for
ACM projects and in support of projects by students and alumni of California State University,
Fullerton. Further, the ACM Discord is considered a public forum, and all messages in it are
(to the extent allowed by law) public domain; as such, individuals may use data for purposes
outside the scope of this policy, and ACM may use the data for purposes determinable in its
sole discretion.
</p>
</section>

<section id="accessing-your-data">
<h2 class="headers">Accessing your data</h2>

<p>
You have a right to know what data we have collected about you. In addition to the categories
listed in this document, you may directly access your data by submitting a request to a
General Board member of ACM. We will comply with this request within 45 days, or within limits
specified by local law, whichever is shorter.
</p>
</section>

<section id="disclosure-to-law-enforcement">
<h2 class="headers">Disclosure to law enforcement</h2>

<p>
Except where bound by valid court order or by other enforceable, legal order from within the
United States, or as where bound by California laws requiring disclosure, we will not disclose
any information under any circumstances to any law enforcement agency, including limited
jurisdiction enforcement agencies such as the U.S. Immigration and Customs Enforcement. We
will not enforce the disclosure laws of any other jurisdiction without an order certified by a
court residing within California, whether state or federal, demanding the disclosure of the
documents, and we reserve the right to confer with legal or other counsel prior to disclosing
any data we have collected.
</p>
</section>

<section id="right-of-correction">
<h2 class="headers">Right of correction</h2>

<p>
You have the right to correct any information which you deem to be incorrect stored on our
servers or other databases owned by ACM. You must submit a request listing what information is
incorrect, and what it should be changed to, to a General Board member of ACM. We will comply
with the request within 45 days, or within limits specified by local law, whichever is
shorter.
</p>
</section>

<section id="data-retention">
<h2 class="headers">Data retention</h2>

<p>
We plan to retain personal data for as long as necessary to fulfill the purposes for which it
was collected. Data will persist in our database for however long our bot continues to
operate. Such data shall never be retrieved for distribution purposes.
We reserve the right to retain any data collected indefinitely, unless it must be deleted by
applicable laws, you request to delete it, or we lose the data. If the services are
discontinued by ACM, users will be given a 14-day notice during which they may request copies
of their data, after which point the data will be deleted.
</p>
</section>

<section id="data-rights-and-choices">
<h2 class="headers">Your data rights and choices</h2>
<section id="amendments">
<h2 class="headers">Amendments</h2>

<p>
As CSUF students ourselves, we understand that users should be respected and treated equally,
and so we are giving you full control of what information you would like to provide for us. If
you would like to completely opt out of interacting with the bots, you can choose to do so. If
you would like certain information updated, then you may contact us for changes.
We may, at our sole discretion, amend the terms of this privacy policy. Changes which do not
affect the actual effects of the policy may be made at any time, without any advance notice.
Changes which affect manners of substance shall be given 14 days notice, both on the Website
and on the Discord. By continuing to use the services after the termination of the notice, you
agree to any changes made to this policy.
</p>
</section>

<section id="changes-to-this-policy">
<h2 class="headers">Changes to this privacy policy</h2>
<section id="in-state-info-access">
<h2 class="headers">Information for users accessing from California and other U.S. states</h2>

<p>
We reserve the right to make updates and modifications on this Policy document at any time and
from time to time with no prior notice. Please review this document frequently and, most
importantly, before you provide us any information. The latest update will be indicated at the
top of the document. Your continued use after the changes made shall indicate your agreement
with the terms provided.
Laws in California and other U.S. states may give you extra rights and protections than laws
in other states. As we are registered and organized in California, we will extend the rights
of those accessing our services from California to all users of our services. While we are not
bound by all of the conditions of the California Consumer Privacy Act (and successor
legislation), we will generally (with the ability to, at our discretion, reduce our actions to
only those required by law) comply with it as if we were bound by it. If you would like to
exert your rights as provided by the laws of another state, you must contact us with a request
to exert those rights, as well as citations to the applicable laws for your jurisdiction.
</p>
</section>

<section id="contacting-us">
<h2 class="headers">Contacting us</h2>
<section id="out-of-state-info-access">
<h2 class="headers">
Information for users accessing from the European Union, European Economic Area, United
Kingdom, Switzerland, and Brazil
</h2>

<p>
Please feel free to contact us if you have any questions about acmCSUF&rsquo;s Privacy Policy
by reaching out to any of our Officers via Discord or email us at <a
href="mailto:acmcsufullerton@gmail.com"
class="brand-med"
target="_blank"
rel="noopener noreferrer"
>
acmcsufullerton@gmail.com</a
>.
We will fully respect all rights under the European Union’s General Data Protection Regulation
(GDPR), Brazil’s Lei Geral de Proteção de Dados (LGPD), and any other applicable local laws
regarding data privacy. We are not incorporated, registered, or organized in any of these
territories, and thus laws applying to local organizations do not apply to us; however, you
still reserve your rights as would be applied to foreign organizations, including but not
limited to the right to access, rectify, erase, limit the processing, disseminate, object, and
withdraw consent over the usage of your data. We do not hold registration with any data
protection agencies, or have a designated data protection officer. We may, at our discretion,
allow users from outside these territories to exercise the same rights as users from these
territories.
</p>
</section>
</main>
Expand All @@ -92,19 +178,20 @@
section {
width: min(800px, 80vw);
margin-bottom: 50px;
margin-bottom: 25px;
h2 {
text-align: center;
padding-bottom: 1em;
}
a {
text-decoration: none;
transition: 0.25s ease-in-out;
p {
line-height: 3ch;
text-indent: 5ch;
}
&:hover {
color: var(--acm-blue);
}
a {
color: var(--acm-blue);
}
}
}
Expand Down

0 comments on commit e88bee5

Please sign in to comment.