Privacy Policy

This Privacy Policy explains how Rotational Program List ("we," "us," or "our") collects, uses, discloses, and protects personal information from visitors, subscribers, and users of our website and services ("you" or "your"). It also describes your rights under applicable laws, including U.S. federal and state laws, California privacy regulations, and international data protection frameworks such as the EU's GDPR.

1. Information We Collect

1.1 Information You Provide

We collect personal information you voluntarily submit when you:

• Subscribe to our newsletter (email address only)
• Contact us through our contact form (name, email address, and message content)

1.2 Automatically Collected Information

When you visit our website, we automatically collect technical and usage information, including your IP address, browser type, operating system, referring URLs, pages viewed, and timestamps of your interactions. This information is collected through server logs and may be used with analytics services.

1.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enable core website functionality and understand how visitors use our site. Specifically, we use Google Analytics to track website usage, visitor behavior, and performance metrics. These tools may set cookies to track usage patterns across sessions. You can control cookie preferences through your browser settings, though disabling some cookies may affect website functionality.

2. Use of Information

2.1 Service Delivery and Communications

We use your personal information to:

• Send newsletter confirmation and welcome emails via Resend (our email service provider)
• Deliver periodic newsletters containing rotational program updates, deadlines, and related content
• Respond to inquiries submitted through our contact form
• Operate and maintain the Service

2.2 Sponsored Content and Featured Listings

Our newsletters and website may include sponsored content, featured program listings, or advertisements from companies offering rotational programs or related services. When we include such content, we clearly label it as "Sponsored," "Featured," or "Advertisement" to maintain transparency. Currently, sponsors do not receive direct access to subscriber email addresses or personal data, and all sponsored communications are sent by us.

2.3 Analytics and Improvement

We analyze aggregated and de-identified usage data to understand how visitors use our website, which programs are most viewed, and how we can improve our content and service. This may include using third-party analytics tools that collect information about your browsing behavior on our site.

2.4 Legal Compliance and Security

We process your information to comply with legal obligations, enforce our Terms of Use, prevent fraud or abuse, and protect our rights and the safety of our users. We implement security measures including encryption of data in transit and at rest, access controls, and use of secure database services (Supabase) to safeguard your data.

3. Disclosure of Information

3.1 Service Providers

We share personal information with the following categories of trusted third-party service providers:

• Email Service: Resend (for sending newsletters, confirmation emails, and transactional messages)
• Database and Authentication: Supabase (for storing subscriber data and managing website data)
• Hosting and Infrastructure: Vercel or similar services (for hosting our website)
• Analytics: Google Analytics (to understand website usage and visitor behavior)

These service providers are contractually obligated to use your information only for the specific services they provide to us and to maintain appropriate security measures. They do not have permission to use your personal information for their own purposes.

3.2 Sponsors and Advertisers

We do not currently sell or rent your email address or personal information to third parties for their independent marketing purposes. When we feature sponsored content in our newsletters or on our website, sponsors do not receive direct access to subscriber information. All sponsored communications are sent by us, not by sponsors directly.

We reserve the right to share aggregated, anonymized data (such as newsletter open rates or demographic statistics) with sponsors and advertisers to demonstrate the reach and effectiveness of advertising placements. Such aggregated data does not identify individual users.

3.3 Legal Requirements

We may disclose your personal information if required to comply with applicable laws, regulations, legal processes, or government requests. This includes complying with court orders, subpoenas, or requests from law enforcement. We may also disclose information when necessary to protect our rights, property, safety, or the safety of our users, or to prevent fraud or abuse.

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will require the acquiring entity to honor the terms of this Privacy Policy or provide you with notice and an opportunity to opt out.

4. Your Rights and Choices

4.1 Newsletter Unsubscribe

You can unsubscribe from our newsletter at any time by:

• Clicking the "Unsubscribe" link in the footer of any newsletter email
• Sending an email to newsletter@rotationalprogramlist.com with "Unsubscribe" in the subject line

Upon unsubscribing, we will mark your subscription as inactive and you will no longer receive newsletters. Your email address may be retained for a limited time to honor your unsubscribe request and prevent re-subscription.

4.2 U.S. and California Privacy Rights

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to:

• Know what personal information we collect, use, disclose, and sell (if applicable)
• Request deletion of their personal information, subject to certain legal exceptions
• Opt out of the sale or sharing of personal information (note: we do not sell personal information)
• Correct inaccurate personal information
• Not be discriminated against for exercising these rights

4.3 EU and UK (GDPR) Rights

If you reside in the European Union or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request confirmation of what personal data we hold about you
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request that we limit how we use your data
• Right to Object: Object to our processing of your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw consent at any time (does not affect prior processing)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

4.4 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@rotationalprogramlist.com. We will verify your identity and respond within the timeframes required by applicable law (typically 30-45 days). For newsletter unsubscribe requests, processing is immediate.

5. Sponsored Content and Transparency

We are committed to transparency in how we monetize our service. When companies pay to sponsor or feature their programs on our website or in our newsletters, we clearly label such content as "Sponsored" or "Featured." This helps you distinguish between organic content and paid placements. However, all programs listed on our site—sponsored or not—meet our quality standards and are genuine rotational program opportunities.

Sponsorships do not influence our editorial decisions about which programs to list, and sponsors do not gain access to subscriber information. If you wish to unsubscribe from all newsletters (including those with sponsored content), you can do so at any time using the unsubscribe link in any email.

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our policies. Specific retention periods include:

• Active Newsletter Subscribers: Until you unsubscribe or request deletion
• Unsubscribed Email Addresses: Retained for up to 90 days to honor unsubscribe requests and prevent accidental re-subscription
• Contact Form Submissions: Up to 2 years or until resolved
• Email Send Logs: Up to 24 months for compliance and troubleshooting purposes
• Analytics Data: Aggregated and anonymized data may be retained indefinitely

You may request deletion of your personal information at any time by contacting us at privacy@rotationalprogramlist.com, subject to legal retention requirements. We will make reasonable efforts to honor deletion requests while maintaining data necessary for legal compliance.

7. Security Measures

We implement industry-standard technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of data at rest in our database (Supabase)
• Row-level security policies to restrict data access
• Secure authentication mechanisms
• Regular monitoring and security updates
• Limited access to personal data on a need-to-know basis

While we implement reasonable security measures, no system is completely secure. We cannot guarantee absolute security of information transmitted over the internet.

8. Children's Privacy

Our services are intended for individuals seeking career opportunities and are not directed to children under the age of 16. We do not knowingly collect personal information from anyone under 16 years of age. If you are a parent or guardian and believe we have inadvertently collected information from a child under 16, please contact us immediately at privacy@rotationalprogramlist.com so we can delete the information.

9. International Data Transfers

Our service providers (including Supabase and Resend) may store and process data in the United States and other countries. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in countries with data protection laws that may differ from those in your country of residence. By using our service, you consent to such transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this policy. For material changes, we may provide additional notice such as an email to newsletter subscribers or a prominent notice on our website. We encourage you to review this policy periodically.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: privacy@rotationalprogramlist.com or hello@rotationalprogramlist.com
• Mail: Rotational Program List, PO Box 720041, San Francisco, CA 94172

We will respond to your inquiry within 30 days or as required by applicable law.

Legal Framework

This Privacy Policy is designed to comply with applicable data protection and privacy laws, including:

• CAN-SPAM Act (United States)
• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
• EU General Data Protection Regulation (GDPR)
• UK Data Protection Act 2018
• Children's Online Privacy Protection Act (COPPA)