Privacy Policy — Senior Comfort Center

1. Overview, Application Purpose & Scope

Senior Comfort Center ("SCC," "we," "our," or "us") is a registered 501(c)(3) public charity based in Tacoma, Washington and serving older adults across Tacoma and Pierce County. We operate https://seniorcomfortcenter.org to connect older adults (ages 60+) and their caregivers in Tacoma and Pierce County with 100% free non-medical household chore assistance, mobilize vetted volunteers and youth interns, coordinate our Collaborative Cause Market (TCCM) partner events, and provide transparent grant and donor information. All public pages on our website are accessible without logging in. This Privacy Policy explains in detail what personal data and Google user data we collect, how we use, store, and protect that data, whether we share it, and how users can access or delete their data.

2. Information We Collect Through Public Community Forms

• Senior & Family Chore Assistance Intake Forms: Name, telephone number, optional email address, Tacoma/Pierce County service address or neighborhood, and descriptions of requested non-medical household or yard safety tasks.
• Volunteer & Youth Internship Submissions: Name, email address, phone number, availability, school or civic affiliation, emergency contact information, logged service reflections, and background-check clearance status (such as Washington State Patrol WATCH verification).
• Collaborative Cause Market & Business Partnership Inquiries: Organization name, 501(c)(3) EIN or community status, primary coordinator name and title, email, phone number, mailing address, requested Swap & Shop market dates, setup window, and electronic partner MOU signature.
• Donations & Event Ticketing (Handled Externally by Zeffy): Charitable donations and Swap & Shop booth payments are processed directly on Zeffy's secure external platform. Senior Comfort Center never collects, views, processes, or stores credit card numbers, debit card numbers, or bank account credentials on our servers.

3. Google User Data Accessed via Google Sign-In (OAuth 2.0)

Our optional internal Staff, Operations, and Youth Internship portal (/portal) uses Google Sign-In via Firebase Authentication solely to authenticate approved Senior Comfort Center administrators, operations coordinators, and registered youth interns. When an authorized user chooses to sign in with Google, our application requests only standard, non-sensitive OpenID Connect identity scopes (openid, email, and profile) and receives only:

• Your Google account email address and email-verification status;
• Your basic Google display name and profile picture URL (if configured on your Google profile); and
• Your unique Google / Firebase authentication identifier (UID).

No Sensitive or Restricted Google Scopes: Senior Comfort Center does not request access to, read, modify, or store data from Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, or any other private Google Workspace APIs.

4. How We Use Personal Information & Google User Data

We use collected information strictly to carry out our nonprofit mission:

• Google User Data Usage: Used exclusively to verify user identity during sign-in at /portal, match the verified email address against our authorized staff/operations/intern allowlist, enforce role-based Firestore security rules, and associate intern journal entries with the signed-in intern's account.
• Program Delivery & Safety Triage: Review senior chore requests, confirm tasks meet youth/volunteer safety guidelines, and schedule vetted volunteer squads.
• Partner & Event Coordination: Confirm 3-Day Donation Swap & Shop canopy/table/heater reservations and communicate load-in instructions.
• Nonprofit Accountability: Compile anonymized, aggregate impact statistics (such as total households assisted or hazards mitigated) for public reporting—never disclosing individual senior names or street addresses publicly.

5. Google API Services User Data Policy & Limited Use Compliance

Senior Comfort Center's use and transfer to any other app of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements:

• We limit our use of Google user data strictly to providing user-facing authentication and role-based portal access for Senior Comfort Center.
• We never sell, license, rent, or trade Google user data or any personal data to third parties, advertisers, or data brokers.
• We never use or transfer Google user data for serving advertisements, retargeting, personalized advertising, creditworthiness checks, or training generalized artificial intelligence / machine-learning models.
• Human review of Google user data occurs only by authorized Senior Comfort Center administrators administering portal access, to comply with applicable law, or with the user's affirmative consent.

6. Data Sharing & Third-Party Service Providers

Senior Comfort Center does not sell or rent personal information. Information is shared only in the following narrow operational contexts:

• Cloud Infrastructure & Authentication: Google Cloud Platform and Google Firebase host our web application, authenticate portal users, and store operational records in an isolated database.
• Operational Email Notifications: SendGrid is used to send internal operational alerts to our Executive Director when an authorized coordinator broadcasts a new chore dispatch.
• Donation & Event Payment Processing: Zeffy processes voluntary donations and Swap & Shop booth registrations directly under Zeffy's privacy and PCI-DSS security standards.
• Vetted Service Dispatch & Legal Obligations: Senior task locations are shared only with screened SCC team leads assigned to perform the requested chore, or when disclosure is required by law or necessary to protect physical safety.

7. Data Storage, Security & Protection Mechanisms

We implement industry-standard administrative and technical safeguards to protect all personal data and Google user data:

• Encryption in Transit & at Rest: All website traffic and API requests are encrypted in transit using HTTPS / TLS 1.2+. All database records in Google Cloud Firestore are encrypted at rest using AES-256 encryption.
• Role-Based Access Control (RBAC): Strict server-side Firestore Security Rules and Firebase ID token verification restrict read/write access to sensitive intake records solely to verified Senior Comfort Center administrators and operations coordinators.

8. Data Retention, Access & Deletion Rights

We retain community intake forms, partner registrations, and portal records only for as long as necessary to coordinate services, certify youth volunteer/internship hours, and satisfy Washington State and IRS 501(c)(3) recordkeeping obligations, after which personal identifiers are securely deleted or anonymized.

How to Request Access, Correction, or Deletion: Any individual—including any Google Sign-In portal user—may request a copy of their personal data, ask us to correct inaccurate details, or request permanent deletion of their account and associated records by emailing contact@seniorcomfortcenter.org or calling (253) 282-1841. We verify and complete verified deletion requests within 7 business days. Google Sign-In users may also revoke Senior Comfort Center's authentication access at any time from their Google Account Permissions page.

9. Youth Safeguards, Policy Updates & Contact Information

We do not knowingly collect personal information online from children under 13. Youth interns ages 16–24 participate with appropriate adult supervision and guardian consent where under 18. If we update this Privacy Policy, we will post the revised text and updated effective date at https://seniorcomfortcenter.org/privacy-policy.

Contact Senior Comfort Center:
Vesey Whitaker, Founder & Executive Director
Senior Comfort Center • Serving Tacoma & Pierce County, WA
Email: contact@seniorcomfortcenter.org • Phone: (253) 282-1841

Return to Home Page • View Terms of Service