Publisher: Chemmo Holdings, LLC, a Florida limited liability company.
Summary
Chemmo Holdings, LLC operates Troop Connect as an adults-only communication platform for youth-organization leaders and parents. We collect the information you give us at signup (name, email, date of birth, password), the content you share within your troop, and standard device and usage telemetry. We process this data to provide the Service, for safety and moderation, for billing, and for legitimate operational purposes. We do not sell your data and we do not share it with advertisers.
1. Who we are
Chemmo Holdings, LLC (“Chemmo Holdings,” “we,” “us,” or “our”) operates Troop Connect, a communication platform for adult leaders and parents in youth organizations. This Privacy Policy explains what personal information we collect, how we use and share it, and what rights you have. Troop Connect is not affiliated with any youth organization.
2. Information we collect
2.1 Information you give us
- Account information: your legal name, email address, password (stored only as a cryptographic hash), date of birth, and phone number if you choose to provide one.
- Profile information: optional avatar image, display name, and role in the troop.
- Consent records: a log of your acceptance of these documents (Terms of Service, Privacy Policy, auto-renewal disclosure, ESIGN consent, age attestation), including timestamp, IP address, and user-agent string.
- Troop content: messages, images, documents, calendar events, and RSVPs you post to a troop.
- Signatures: for permission slips and other e-signed documents, the signature image, the document hash, and an audit record.
- Support and contact correspondence you send us.
- Payment information provided by the Billing Contact through Stripe. We do not store full payment card numbers; Stripe does.
2.2 Information collected automatically
- Device and usage information: IP address, device type, operating system, browser, app version, crash logs, and interactions within the Service.
- Identifiers: Firebase installation IDs and push-notification tokens.
- Cookies and similar: see our Cookie Notice.
2.3 Information about minor children
Other users may submit information about minor children to the Service in the ordinary course of running a troop — for example, a roster that includes a child’s name, a permission slip with medical information, or a photograph of an event. When this happens, we process that information to provide the Service. We do not knowingly allow children under 13 to create Troop Connect accounts. If we learn that an account is operated by a child under 13, we will disable that account and delete its data. If you are a parent or guardian and you believe a Troop Connect account is operated by your child, contact us at privacy@troop-connect.com.
3. How we use personal information
- To provide, operate, maintain, and improve the Service.
- To authenticate users and protect the security of accounts.
- To process subscription payments, billing, and related support.
- To moderate content and enforce our Acceptable Use Policy.
- To comply with legal obligations, including mandated reporting under 18 U.S.C. § 2258A.
- To communicate with you — transactional notifications, product announcements, and (with separate consent where required) marketing messages.
- To maintain audit trails for electronic signatures and compliance records.
- For aggregated analytics about the operation of the Service that do not identify individual users.
4. Legal bases for processing (summary)
We process personal information because (a) it is necessary to provide the Service you requested, (b) it is necessary to comply with our legal obligations, (c) it is necessary for our legitimate interests in operating and securing the Service, or (d) you have given us consent (which you can withdraw). Where a U.S. state privacy law requires a specific purpose or legal basis, that law’s rules apply.
5. Sensitive personal information
California, Colorado, Connecticut, Virginia, Texas, Oregon, and several other state privacy laws treat certain categories of information as “sensitive” — including information concerning a known minor, health information, and precise geolocation. We process these categories only for the specific purposes listed in Section 3, restrict access to those staff and users who need it, and do not use sensitive information for cross-context behavioral advertising.
6. How we share personal information
- With other members of your troop, as appropriate to the content you submit (e.g., a message you post in a channel is visible to that channel’s members).
- With our service providers (see Subprocessors), who process information on our behalf under written agreements that restrict their use of it.
- With law enforcement and other authorities when compelled by valid legal process, when necessary to protect safety or property, or to comply with the National Center for Missing & Exploited Children (NCMEC) CyberTipline reporting obligation under 18 U.S.C. § 2258A.
- In connection with a merger, acquisition, or sale of all or substantially all of our assets, in which case we will require the buyer to honor this Privacy Policy.
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.
7. Data retention
We retain personal information only as long as necessary to provide the Service or meet the retention periods shown below:
- Consent records and signed documents: at least seven (7) years after signing.
- Account data for active accounts: for the duration of the relationship plus ninety (90) days after account deletion, except as legally required.
- Moderation logs: three (3) years.
- Content preserved under 18 U.S.C. § 2258A or 18 U.S.C. § 2703(f): at least ninety (90) days from preservation, extendable as permitted by statute.
- Billing records: seven (7) years.
After the retention period expires, we delete or de-identify the information. Deletion of troop messages may leave a placeholder (“Message removed”) to preserve the integrity of the channel history.
8. Your rights
Depending on where you live, you may have rights under applicable law, including:
- The right to know what personal information we hold about you.
- The right to access and receive a copy of your personal information.
- The right to correct inaccurate personal information.
- The right to delete personal information (subject to exceptions required for legal compliance, fraud prevention, or audit).
- The right to opt out of the sale or sharing of personal information for cross-context behavioral advertising (we do not engage in either).
- The right to non-retaliation when exercising these rights.
- The right to appeal a denied privacy request (in some states).
To exercise these rights, use the self-service tools in your account settings or contact privacy@troop-connect.com. We will respond within the statutory period (typically 45 days, with one 45-day extension where permitted). We verify the identity of the requester before acting. You may designate an authorized agent to submit a request on your behalf; we may require a signed authorization.
9. California-specific disclosures
Categories of personal information collected and disclosed. In the preceding twelve (12) months, we have collected and disclosed (to service providers performing functions on our behalf) the categories of personal information described in Section 2. We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information except for the purposes permitted by Cal. Civ. Code § 1798.121(a). Financial incentives: we do not offer financial incentives tied to the sale, sharing, or processing of personal information.
Shine the Light. California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not make such disclosures.
10. Universal opt-out preference signals
We honor the Global Privacy Control (GPC) opt-out signal on our web Service as a valid opt-out of the sale, sharing, or cross-context behavioral advertising of personal information. We do not currently engage in these activities, but we will continue to honor GPC if our practices ever change.
11. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS) and at rest, access controls based on the principle of least privilege, audit logging of administrative actions, and regular review of our service providers’ security controls. No safeguard is perfect; you use the Service at your own risk. If we learn of a breach involving your personal information, we will notify you as required by applicable state breach-notification laws.
Important — messages are not end-to-end encrypted. Troop Connect encrypts your messages and content in transit and at rest, and we restrict employee access through least-privilege controls. However, Troop Connect is not an end-to-end encrypted service. Authorized Chemmo Holdings personnel and automated systems can access message content where necessary to operate the Service — specifically for content moderation, CSAM hash scanning under 18 U.S.C. § 2258A, abuse investigations, customer support that you initiate, and response to lawful legal process. You should treat messages on Troop Connect the way you would treat email at work: appropriate for the purpose of running your organization, and not the place to share material you would not want a moderator, administrator, or court to see. Members of your organization with appropriate permissions (such as channel admins) may also see messages you post in shared channels.
12. International data transfers
Troop Connect is a U.S.-only service. All personal information is stored and processed in the United States. If you access the Service from outside the United States, you are accessing it in violation of our Terms and your data will still be processed in the United States.
13. Children under 13
We do not knowingly collect personal information from children under 13. Troop Connect accounts are for adults only. If you believe a child under 13 has provided us with personal information through a Troop Connect account, contact privacy@troop-connect.com and we will delete the information.
14. Third-party links and integrations
The Service may link to third-party websites or integrate with third-party services (for example, calendar imports or payment processing). This Privacy Policy does not cover those third parties. Review their privacy policies before using them.
15. Subprocessors
See our subprocessors list for the current set of vendors that process data on our behalf, including Google LLC (Firebase/Google Cloud), Stripe, Inc. (payment processing, web only), and Google Jigsaw (Perspective API content moderation).
16. Contact
To exercise your rights, ask questions, or submit a complaint about our privacy practices, contact:
privacy@troop-connect.com
Chemmo Holdings, LLC
Attn: Privacy
7901 4th St N, STE 300
St. Petersburg, FL 33702
If you are not satisfied with our response, you may lodge a complaint with your state attorney general or, where applicable, the California Privacy Protection Agency.
17. Changes
We may update this Privacy Policy. Material changes will be notified by email or through the Service at least fourteen (14) days before they take effect. The “Last updated” date at the top of this Privacy Policy reflects the date of the most recent change.