Privacy Policy

1Who we are

ConexBoxes is a community emergency-supply project of the Oregon Chinese Coalition, an Oregon nonprofit (“we,” “us,” or “our”). This policy covers the public website at conexboxes.org, the team dashboard at app.conexboxes.org, the ConexBoxes mobile app, and the service behind them (together, the “Service”).

The public website is open to everyone. The team dashboard and mobile app are for staff and volunteers we invite to look after supply boxes. There is no public sign-up, no advertising, and no social feed.

2Information we collect

If you only browse the public website, we do not ask you for any personal information. If you are invited to the team, we handle the following.

• Account information. Your name, email address, optional profile photo, role (member or administrator), the boxes you are assigned to, and whether your account is active. Invitations record the invited email address, the person who sent it, and when it was accepted.
• Sign-in information. A hashed version of your password (we never store the password itself), session tokens, password-reset requests, and for each session the IP address and browser or device description it came from.
• Inventory activity. Supply counts, checkouts, and returns, together with the name of the person who recorded them, the person who borrowed an item, and when it happened. These records keep a reliable history of each box.
• Photos. Profile, box, and item photos you choose to upload. We resize them and convert them to a standard web format, which also removes embedded metadata such as the location where a photo was taken.
• Box information. Each box’s name, address or location description, map coordinates, description, and photo.
• Camera. The mobile app asks for camera access so you can scan item barcodes and take photos, and photo library access so you can choose an existing photo. It does not record audio. A scanned barcode is used only to find the matching item; camera images are kept only when you upload a photo on purpose.
• Technical logs. Our servers keep standard request logs, which include IP addresses, browser details, pages requested, and times, as well as records of emails we sent.

The mobile app does not request your device’s location. We do not collect payment information, and we do not use analytics, advertising, or crash-reporting services.

3The public website

On the box locations page you can choose “Use my location” to sort boxes by distance. Your browser asks for permission first. Your approximate location stays in your browser to calculate distances and is never sent to or saved by us. Because the map then centers on your area, the map service described below receives requests for map images of that area.

The public website does not set cookies. It remembers your language choice in your browser’s local storage. Some pages load content from other providers, who receive your IP address and browser details when they do:

• OpenStreetMap provides the map images on the box locations page.
• unpkg delivers the open-source map software that page uses.
• YouTube plays the introduction video, using its privacy-enhanced mode, only after you choose to play it.
• Google supplies the small site icons shown next to links in the emergency guides.

“Get directions” links open Google Maps, and the emergency guides link to government and nonprofit websites. Those sites have their own privacy policies.

4How we use information

We use information to:

• create and secure accounts, sign you in, and give you access to the boxes you help with;
• keep accurate counts and an accountable record of what was checked out, by whom, and when;
• send invitation and password-reset emails, which are the only emails the Service sends;
• show the public where boxes are located and how to reach them;
• prevent abuse, investigate problems, and keep the Service working; and
• meet legal obligations.

We do not sell personal information, use it for advertising, or use it to make automated decisions about people.

5Who can see it

• The public. Box names, locations, coordinates, descriptions, and box photos are published on the website. Nothing about team members is public.
• Other team members. Signed-in members can see inventory and activity for the boxes they work with, including the names attached to counts, checkouts, and returns. Administrators can see and manage all accounts, invitations, and boxes. Profile photos are visible only to you and administrators.
• Service providers. Our hosting provider runs the servers and our email provider delivers invitation and password-reset emails. They handle information only to provide those services to us.
• Legal and safety reasons. We may disclose information when required by law or when reasonably necessary to protect people, the Service, or the Coalition.

6Your choices and rights

You can change your profile photo or remove it at any time. Depending on where you live, you may also ask us to:

• tell you what personal information we hold about you;
• correct information that is wrong;
• deactivate your account or delete your information; or
• give you a copy of information you provided.

Email info@pdxchinese.org with your request and the email address on your account. We may need to confirm your identity first. When you ask us to delete your information, we remove your account and photo; names in past inventory records may be kept or replaced with a placeholder so each box’s history stays accurate.

If we decline a request, you can appeal by replying to our answer with “Privacy appeal” in the subject line. We will not treat you differently for exercising these rights.

7Children

The public website is for general audiences. Team accounts are not meant for children under 13. If a younger volunteer needs an account, a parent or guardian must contact us first so we can obtain any consent the law requires.

A parent or guardian may ask what we hold about their child and have it corrected or deleted. If we learn that we collected a child’s information without required consent, we will delete it.

8Storage, retention, and security

Information is stored on servers in the United States. We keep account information while your account is active. When an account is deactivated, its sessions and password-reset requests are removed. Inventory history is kept so each box keeps an accurate record, and server logs are kept only as long as needed to operate and secure the Service. Information we delete may remain in backup copies until those copies are replaced.

The team dashboard uses one essential cookie to keep you signed in, and remembers display preferences, such as the color theme, in your browser. The mobile app keeps your sign-in in your device’s secure storage.

We protect information with encrypted connections, hashed passwords, role-based access, limits on repeated sign-in attempts, and short-lived password-reset links. No system is perfectly secure, so please use a password you do not use elsewhere.

9Changes and contact

We will update this policy when the Service or the law changes, and change the effective date above. If a change significantly affects how we use your information, we will let team members know before it takes effect.

A Chinese translation of this policy is provided for convenience. If the two versions differ, the English version applies.

1关于我们

ConexBoxes 是俄勒冈华人联盟（一家俄勒冈州非营利组织，以下称“我们”）发起的社区应急物资项目。本政策适用于公共网站 conexboxes.org、团队管理平台 app.conexboxes.org、ConexBoxes 移动应用以及支持它们的服务（统称“本服务”）。

公共网站向所有人开放。团队管理平台和移动应用仅供我们邀请的、负责照管物资箱的工作人员和志愿者使用。本服务不开放公开注册，没有广告，也没有社交动态。

2我们收集的信息

如果您只是浏览公共网站，我们不会要求您提供任何个人信息。如果您受邀加入团队，我们会处理以下信息。

• 账户信息。您的姓名、电子邮箱、可选的头像照片、角色（成员或管理员）、分配给您的物资箱，以及账户是否处于启用状态。邀请记录包括受邀邮箱、发出邀请的人以及接受邀请的时间。
• 登录信息。经过哈希处理的密码（我们从不保存密码原文）、会话令牌、密码重置请求，以及每个会话来源的 IP 地址和浏览器或设备信息。
• 库存活动。物资盘点、借出和归还记录，以及记录人、借用人的姓名和发生时间。这些记录为每个物资箱保留可靠的历史。
• 照片。您选择上传的头像、物资箱和物品照片。我们会调整照片尺寸并转换为标准网页格式，这一过程也会移除照片中嵌入的元数据，例如拍摄地点。
• 物资箱信息。每个物资箱的名称、地址或位置描述、地图坐标、简介和照片。
• 相机。移动应用会请求相机权限，以便您扫描物品条形码和拍摄照片；还会请求相册权限，以便您选择已有照片。应用不会录制音频。扫描的条形码仅用于查找对应物品；只有当您主动上传照片时，相机图像才会被保存。
• 技术日志。我们的服务器会保留标准请求日志，包括 IP 地址、浏览器信息、访问的页面和时间，以及我们发送邮件的记录。

移动应用不会请求您设备的位置。我们不收集付款信息，也不使用分析、广告或崩溃报告服务。

3公共网站

在物资箱地点页面，您可以选择“使用我的位置”，按距离排列物资箱。浏览器会先征求您的许可。您的大致位置仅保留在您的浏览器中用于计算距离，绝不会发送给我们或由我们保存。由于地图随后会以您所在区域为中心，下文所述的地图服务会收到该区域地图图像的请求。

公共网站不会设置 Cookie。它会在浏览器本地存储中记住您的语言选择。部分页面会从其他服务商加载内容，这些服务商在加载时会获得您的 IP 地址和浏览器信息：

• OpenStreetMap 提供物资箱地点页面上的地图图像。
• unpkg 提供该页面使用的开源地图软件。
• YouTube 以隐私增强模式播放介绍视频，且仅在您选择播放后才会加载。
• Google 提供应急指南中链接旁显示的小图标。

“获取路线”链接会打开 Google 地图，应急指南中也有指向政府和非营利组织网站的链接。这些网站有各自的隐私政策。

4我们如何使用信息

我们使用信息来：

• 创建并保护账户、让您登录，并为您开放您协助照管的物资箱；
• 保持准确的库存数量，并如实记录借出的物品、借用人和时间；
• 发送邀请和密码重置邮件，这是本服务发送的仅有两类邮件；
• 向公众展示物资箱的位置和前往方式；
• 防止滥用、排查问题，并维持本服务正常运行；以及
• 履行法律义务。

我们不会出售个人信息，不会将其用于广告，也不会用它对任何人做出自动化决策。

5谁可以看到这些信息

• 公众。物资箱的名称、位置、坐标、简介和照片会在网站上公开。团队成员的信息不会公开。
• 其他团队成员。已登录的成员可以看到其参与的物资箱的库存和活动记录，包括盘点、借出和归还记录中的姓名。管理员可以查看和管理所有账户、邀请和物资箱。头像照片仅您本人和管理员可见。
• 服务提供商。我们的托管服务商负责运行服务器，邮件服务商负责发送邀请和密码重置邮件。他们只为向我们提供这些服务而处理信息。
• 法律和安全原因。在法律要求或为保护他人、本服务或联盟而合理必要时，我们可能会披露信息。

6您的选择与权利

您可以随时更换或删除头像照片。根据您所在地区的法律，您还可以要求我们：

• 告诉您我们持有哪些关于您的个人信息；
• 更正不准确的信息；
• 停用您的账户或删除您的信息；或
• 提供一份您所提供信息的副本。

请将您的请求和账户使用的邮箱发送至 info@pdxchinese.org。我们可能需要先核实您的身份。当您要求删除信息时，我们会删除您的账户和头像；过往库存记录中的姓名可能会被保留或替换为占位名称，以确保每个物资箱的历史记录准确。

如果我们拒绝了您的请求，您可以回复我们的答复并在主题中注明“Privacy appeal”提出申诉。我们不会因您行使这些权利而区别对待您。

7儿童

公共网站面向一般大众。团队账户不适用于 13 岁以下的儿童。如果年龄较小的志愿者需要账户，其父母或监护人须先联系我们，以便我们取得法律要求的同意。

父母或监护人可以询问我们持有哪些关于其孩子的信息，并要求更正或删除。如果我们发现在未取得必要同意的情况下收集了儿童的信息，我们会将其删除。

8存储、保留与安全

信息存储在位于美国的服务器上。账户启用期间，我们会保留账户信息。账户停用后，其会话和密码重置请求会被删除。库存历史会被保留，以便每个物资箱保持准确记录；服务器日志仅在运行和保护本服务所需的期限内保留。我们删除的信息可能会在备份副本中保留，直到这些副本被替换。

团队管理平台使用一个必要的 Cookie 保持您的登录状态，并在您的浏览器中记住显示偏好，例如配色主题。移动应用将您的登录信息保存在设备的安全存储中。

我们通过加密连接、密码哈希、基于角色的访问控制、限制重复登录尝试以及短时有效的密码重置链接来保护信息。任何系统都无法做到绝对安全，因此请使用未在其他地方使用过的密码。

9政策变更与联系方式

当本服务或法律发生变化时，我们会更新本政策并修改上方的生效日期。如果变更会显著影响我们使用您信息的方式，我们会在变更生效前通知团队成员。

本政策的中文译本仅供参考。如两个版本有任何不一致，以英文版本为准。