privacy policy

1. introduction

Intention Driven ("we", "us", "our", or "the Application") is a community platform operated by Intention Driven that connects automotive enthusiasts through events, content, and a community gallery. Our website and services are available at intentiondriven.net (the "Service"). This Privacy Policy describes the types of personal information we collect, how we collect, access, use, store, share, transfer, and disclose that information — including Google user data accessed through our integration with Google APIs — and the rights and choices you have regarding your information.

This Privacy Policy applies to all visitors, users, subscribers, event registrants, community members, and others who access or use our Service. By accessing or using our Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with these practices, you should not use our Service.

2. information we collect

Our application will access the data you have provided to us, including the following categories of personal data when you use or interact with our products and services. We may collect, or process on behalf of our community, the following categories of personal data:

2.1 information you provide directly

• Account and contact details — your name and email address when you subscribe to our mailing list, join the community, register for an event, or submit a partnership inquiry.
• Event registration data — when you register for an event such as Drive for Hope, the Heroes Appreciation Car Show, or ModWash events, we collect your name, email address, vehicle information (year, make, model), license plate, and any additional details you provide on the registration form.
• Community profile details — your Instagram handle, vehicle type, and other preferences you choose to share when joining the community through our /join page.
• Submission content — photos, videos, captions, and vehicle details you submit to our community gallery or for consideration as Intention Driver of the Month.
• Partnership inquiries — business name, contact name, email address, phone number, tier of interest, and message when a business submits a partnership inquiry.
• Communications — any information you provide when you contact us, including the contents of your message.

2.2 information collected automatically

• Usage and analytics data — anonymized or pseudonymized information about how you interact with our Service, including pages visited, time spent, click events, referral source, and device type.
• Device and browser information — IP address, browser type, operating system, and screen resolution, collected from your device when you visit our site.
• Cookies and local storage — we use cookies and local storage to remember your preferences, such as language selection and whether you have dismissed the subscription popup, and to gather analytics. See Section 8 for details.

2.3 information from payment processing

When you make a purchase through our Service (such as a partnership subscription or sticker order), payment processing is handled by Stripe. We do not store your full credit card number on our servers. Stripe may collect and process billing details, card information, and transaction data. We receive a confirmation of the transaction and, where relevant, your email address for order fulfillment. See Section 6 for more on third-party processors.

3. google user data — access, scope & purpose

Intention Driven integrates with certain Google APIs to provide features of our Service. When the account administrator authorizes the Google integration on behalf of the Service, our application requests access to limited Google user data. The table below describes each Google API scope we request, the specific data accessed, and the purpose for which we access it.

We will use your Google user data to provide you with the services you requested, including managing event registrations, syncing community contact records, organizing operational tasks, and communicating with you about events and community activity. Our use of Google user data complies with theGoogle API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for personalized advertising, we do not train AI models on your Google user data, and we do not transfer Google user data to any third party except as necessary to provide the features of our Service, as required by law, or with your explicit consent.

Google user data accessed through these scopes is stored in the connected Google account's own spreadsheets and task lists, and a copy may be retained in our application database where needed to provide the Service. You may revoke our access to your Google account at any time through your Google Account security settings, which will prevent our application from accessing additional Google user data going forward.

4. how we use your information

We will use your data to provide you with the services you requested. Specifically, we use the information we collect for the following purposes:

• To register you for events and send you event reminders, updates, and confirmations.
• To send you newsletters, community spotlights, and marketing communications you have consented to receive; you can opt out at any time using the unsubscribe link in any email.
• To process and respond to partnership inquiries, event registrations, and contact form submissions.
• To display approved community-submitted content (photos, captions, vehicle details) on our website and, where you have authorized, on our social media channels.
• To maintain records in Google Sheets spreadsheets and Google Tasks lists that support our event operations and community management.
• To process payments and fulfill sticker orders and partnership subscriptions.
• To moderate user-submitted content to keep our community safe and aligned with our guidelines.
• To analyze usage trends, measure the reach of our content, and improve our events, website, and user experience.
• To detect, prevent, and address fraud, abuse, and violations of our Terms of Service.
• To comply with legal obligations and protect our rights and the safety of our community.

We will not sell your data to third parties, but we may share it with our partners who help us provide our services, as described in Section 6. We process your personal information based on your consent, our legitimate interests in operating the Service, and where necessary to comply with legal obligations.

5. legal basis for processing (gdpr)

For users in the European Economic Area, United Kingdom, and Switzerland, we process personal information under the following legal bases: (a) your consent to the processing of your personal data for one or more specific purposes; (b) the performance of a contract you have with us or to take steps at your request before entering into a contract; (c) compliance with a legal obligation to which we are subject; and (d) our legitimate interests in operating and improving our Service, where those interests are not overridden by your rights. You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. sharing, transfer & disclosure of your information

We do not transfer or disclose your information to third parties for purposes other than those described in this policy without your consent. We do not sell your personal information, including Google user data, to any third party. We may share, transfer, or disclose your information with the following categories of recipients:

6.1 service providers and processors

• Google LLC — We use Google Sheets and Google Tasks APIs to store and manage event registrations, community contacts, and operational tasks. Google processes this data as described in the Google API Services User Data Policy and Google's Privacy Policy.
• Stripe, Inc. — We use Stripe to process payments for partnership subscriptions and sticker purchases. Stripe collects and processes payment card and transaction data in accordance with its own privacy and security policies.
• Resend, Inc. — We use Resend to deliver transactional and marketing emails (event reminders, newsletters, confirmations). Resend receives the recipient email address and message content necessary to deliver the email.
• ImgBB — We use ImgBB to host images you upload (vehicle photos, community gallery submissions, sticker product images). ImgBB receives and stores the image files you submit.
• Behold — We use Behold to display our Instagram feed on our website. Behold retrieves publicly available Instagram content.

These service providers process data only as needed to deliver their services to us and are bound by their own privacy and security obligations. We share only the information necessary for them to perform their functions.

6.2 other disclosures

• With your consent — We may share information with third parties when you authorize or request us to do so, such as featuring your vehicle on our social media.
• Legal requirements — We may disclose information when required by law, regulation, court order, or legal process, or to protect our rights, property, safety, or the safety of our users and others.
• Business transfers — In connection with a merger, acquisition, reorganization, or sale of all or part of our assets, information may be transferred as part of that transaction. We will notify you via email or prominent notice on our site of any change in ownership or use of your personal information.
• Aggregated or de-identified data — We may share aggregated or de-identified information that cannot reasonably be used to identify you.

We do not share Google user data with any third party except as necessary to provide the features of our Service, as required by law, or with your explicit consent. We do not transfer Google user data to any third party for the purpose of that party independently accessing or using the data.

7. data storage, retention & deletion

Your information, including Google user data accessed through our integration, is stored securely. Data is stored in the following locations:

• Application database — Entity records (events, subscribers, registrations, submissions, etc.) are stored in our application's secure database.
• Google Sheets — Event registration records, community contacts, and Car of the Month entries are stored within spreadsheets owned by the connected Google account.
• Google Tasks — Operational task data is stored within task lists owned by the connected Google account.
• Image hosting — Uploaded images are stored on ImgBB's public hosting service.
• Email delivery — Email delivery records may be retained by Resend for the purpose of delivery tracking and abuse prevention.

We retain your personal information for as long as your account is active or as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically: subscriber and community contact records are retained until you request deletion; event registration records are retained for the duration of the event and a reasonable period thereafter for record-keeping; and payment records are retained as required by applicable tax and financial regulations.

You may request deletion of your data at any time by contacting us through our contact page. Upon your request, we will delete your personal information from our active systems, except where we are required to retain it for legal, accounting, or dispute resolution purposes.

8. cookies & local storage

We use cookies, local storage, and similar technologies to operate and improve our Service. Specifically, we use:

• Essential storage — to remember your language preference and whether you have dismissed the subscription popup, so we do not show it to you repeatedly.
• Analytics — to understand how visitors use our site so we can improve content and performance.

You can control or delete cookies through your browser settings. Disabling cookies may limit some site functionality, such as remembering your language preference. We do not use cookies for personalized advertising.

9. your rights & choices

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Rectification — request correction of inaccurate or incomplete information.
• Erasure — request deletion of your personal information, subject to legal retention requirements.
• Restriction & objection — request that we restrict or stop processing your information in certain circumstances.
• Data portability — request that we provide your information in a structured, machine-readable format.
• Withdraw consent — withdraw your consent to processing at any time, including opting out of marketing emails using the unsubscribe link in any message we send.
• Disconnect Google — revoke our access to your Google account at any time through your Google Account security settings, which will prevent our application from accessing additional Google user data.

To exercise any of these rights, contact us through our contact page. We will respond to your request within a reasonable timeframe and in accordance with applicable law. If you are located in the European Economic Area, United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

10. data security

We take reasonable administrative, technical, and physical measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit, access controls, and regular review of our data handling practices. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

11. international data transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers are located. Where we transfer personal information outside the European Economic Area, United Kingdom, or Switzerland, we rely on appropriate safeguards such as standard contractual clauses approved by the European Commission, or another lawful transfer mechanism. By using our Service, you acknowledge that your information may be transferred and processed in such countries.

12. children's privacy

Our Service is not directed to children under the age of 13 (or the minimum age required by applicable law in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete such information.

13. links to third-party sites

Our Service may contain links to third-party websites or services that we do not control, such as Instagram, Stripe checkout pages, and partner websites. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the features of our Service. If we make material changes to how we use Google user data or your personal information, we will notify users through our Service, by email where we have your address, or by other means. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically. Continued use of our Service after changes are posted constitutes acceptance of the updated policy.

15. contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, including Google user data, you can reach us through our contact page. We are committed to working with you to obtain a fair resolution of any privacy-related concern.