PRIVACY
POLICY.

This Privacy Policy applies only to information processed through the Services. It does not apply to third-party websites, platforms, advertisements, or services that we do not control, even when they are linked to or embedded in the Services.

The Services are intended only for adults who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that a person under 18 has provided personal information, we may delete the information and terminate the related account. A parent or guardian who believes a minor has submitted information should contact us at Admin@TruthResilienceGrace.com.

3.1 Information You Provide

1. Account information, such as your name, display name, username, email address, profile information, account preferences, and authentication information managed by us or our login provider.
2. Private membership application details, including your required legal first name, legal last name, city, and state. Farah uses these details to personally review and approve or deny membership applications. Your legal name and location are not displayed to other members; your community username is used for comments and discussions.
3. Optional birthday information, consisting only of your birthday month and day and a record of whether you chose to receive an annual birthday email. TRG does not request or store your birth year for this feature, and your birthday is not displayed to other members.
4. Contact and newsletter information, including your email address, the contents of messages you send, newsletter preferences, and records of your consent or unsubscribe request.
5. Community content, such as comments, replies, reactions, profile content, forum posts, reports, and other material you choose to make available through public or community areas.
6. Story submissions, including narratives, titles, photographs, documents, recordings, background information, publication preferences, and any other material you voluntarily submit for review.
7. Support, safety, and moderation information, including reports about content or users, appeals, correspondence, and information needed to investigate suspected violations or security concerns.
8. Survey, feedback, or event information if we later offer surveys, virtual events, or other voluntary activities through the Services.

3.2 Sensitive Information

Because TRG addresses abuse, trauma, healing, faith, and resilience, information you voluntarily share may reveal sensitive matters, including physical or mental health, religious beliefs, sexuality, race or ethnicity, immigration or citizenship status, precise location, or deeply personal experiences. Please share only what is necessary and what you are comfortable entrusting to the applicable feature.

Do not submit Social Security numbers, government identification numbers, financial account information, passwords, full medical records, unredacted legal files, exact home addresses, or identifying information about minors. Unless TRG expressly requests it through a secure process, do not submit another person's private information, contact details, medical information, photograph, or legal documents.

Where applicable law requires consent to process sensitive personal data, TRG will request that consent separately and clearly. Consent to process sensitive information will not be inferred solely from your acceptance of general terms. You may withdraw consent by contacting Admin@TruthResilienceGrace.com subject to lawful retention needs and actions already completed with your permission.

3.3 Information Collected Automatically

8. Device and connection information, such as IP address, browser type, operating system, device identifiers, language, referring page, approximate location derived from IP address, and network information.
9. Usage information, such as pages viewed, links selected, dates and times of access, session duration, navigation patterns, referring and exit pages, and interactions with content, messages, or site features.
10. Cookie and similar technology information, including identifiers stored through cookies, pixels, tags, local storage, software development tools, and similar technologies.
11. Security logs and fraud-prevention data used to maintain account integrity, prevent abuse, troubleshoot errors, and protect the Services and their users.

3.4 Information from Third Parties

We may receive information from service providers that support hosting, authentication, email delivery, analytics, advertising, content moderation, security, and similar functions. If social sign-in or account linking is offered, we may receive the profile information you authorize that third party to provide. Third parties process information under their own terms and privacy practices as well as their agreements with us.

12. Provide, operate, maintain, personalize, and improve the Services.
13. Create and manage accounts; authenticate users; and remember settings and preferences.
14. Respond to questions, contact requests, story submissions, reports, appeals, and support needs.
15. Send newsletters and other communications requested by you, and maintain suppression records so we can honor unsubscribe choices.
16. Send one annual birthday email if you specifically request it, record and honor your birthday-email preference, and prevent future birthday emails if you opt out.
17. Review, edit, moderate, publish, or remove content in accordance with the Terms of Use and any separate story-publication consent.
18. Understand how the Services are used; measure performance; troubleshoot problems; and develop new content or features.
19. Protect users, TRG, and others; prevent spam, fraud, harassment, security incidents, or unlawful activity; and enforce our policies. Private member reports include the reporting account, the selected reason, any explanation provided, and a saved copy of the reported message for administrative review. Reports are not displayed to other members. Notification emails link to the private review queue without including the report details or member identities.
20. Comply with legal obligations, preserve evidence, respond to lawful requests, and establish, exercise, or defend legal claims.
21. Carry out another purpose disclosed when information is collected or another purpose for which you give consent.

The Services may use the following categories of cookies and similar technologies:

22. Strictly necessary technologies that support security, authentication, fraud prevention, network management, and essential site functions.
23. Functional technologies that remember preferences and improve usability.
24. Analytics technologies that help us understand traffic, performance, and how visitors interact with the Services.
25. Advertising technologies that may measure campaigns, limit repeated ads, or support interest-based or targeted advertising.

Nonessential analytics and advertising technologies are not currently enabled through the Services. You may manage browser- or device-level cookies through your browser or device settings. Disabling strictly necessary technologies may affect site functionality. If nonessential technologies are enabled in the future, we will provide appropriate cookie controls and, where required, will not activate them until you make a choice.

We do not sell personal information for money, and we do not sell sensitive personal data. Some privacy laws may define certain disclosures through advertising or measurement technologies as a "sale," "sharing," or processing for targeted advertising even when no money changes hands. Where those laws apply, you may exercise your choices through the Your Privacy Rights and Choices section, any cookie controls we make available, or a legally recognized browser-based opt-out signal such as Global Privacy Control. We do not intentionally use sensitive personal information from private messages, story submissions, or community content to personalize advertising.

Because there is no universal technical standard for browser "Do Not Track" signals, the Services may not respond to those signals. We will honor legally recognized opt-out preference signals where required.

We may disclose personal information in the following circumstances:

26. Service providers and processors. We may provide information to vendors that perform hosting, cloud storage, authentication, email delivery, analytics, advertising, security, technical support, content moderation, and other services for us. They may use information only as permitted by their agreements and applicable law.
27. Public and community areas. Information you intentionally post in a public profile, comment, forum, or other public area is disclosed at your direction and may be viewed, copied, indexed, quoted, or shared by others.
28. Analytics and advertising partners. If enabled, these partners may receive online identifiers, device information, usage data, and similar information through cookies and related technologies, subject to your choices and applicable law.
29. Legal, safety, and policy purposes. We may disclose information when we reasonably believe disclosure is required by law or legal process; necessary to protect the rights, safety, or security of a person, TRG, or the public; needed to investigate fraud, abuse, threats, or policy violations; or appropriate to establish, exercise, or defend legal claims.
30. Business transition. Information may be transferred as part of a proposed or completed sale, reorganization, financing, merger, transfer of assets, or similar transaction. Any recipient will be required to handle personal information consistently with applicable law.
31. With your direction or consent. We may disclose information for another purpose that we clearly explain and you authorize.

If you request birthday emails, service providers supporting TRG may process the limited information necessary to schedule and deliver those messages, such as your name, email address, birthday month and day, and communication preference. This information is not displayed to other members or intentionally made public.

A story sent through a private submission channel will not be published or intentionally disclosed to the public merely because it was submitted. TRG will obtain separate, affirmative permission before publishing or featuring that story. We may still use or disclose limited information as necessary to review the submission, maintain safety and security, comply with law, or enforce our policies.

Public posts are not confidential. Before posting, consider whether the content could identify you, another survivor, a child, a family member, an alleged abuser, an employer, a medical provider, or a person involved in a legal matter. Even if you later delete content or an account, copies may remain in screenshots, search results, messages, quotations, backups, or records kept by other people.

TRG may remove or redact identifying information to protect privacy or safety, but we cannot guarantee that public content will remain within the Services or that another user will not copy or misuse it.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining accounts and community integrity, honoring communication choices, resolving disputes, enforcing agreements, protecting safety and security, and meeting legal, tax, accounting, or recordkeeping obligations.

Retention periods depend on the type of information, the feature involved, the sensitivity of the information, the risk of harm from continued retention, and legal requirements. We may retain limited records after account or content deletion when reasonably necessary for fraud prevention, legal compliance, dispute resolution, safety, security, or backup integrity. When information is no longer needed, we will take reasonable steps to delete, deidentify, or securely dispose of it.

We retain your birthday month and day only while you remain enrolled in birthday emails or until you ask us to remove that information or delete your account, subject to limited legal, security, and backup-retention needs. We may retain a limited record of an opt-out request so we can continue honoring your choice.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No website, transmission method, storage system, or security control is guaranteed to be completely secure. Please protect your email account, sign-in links, authenticated sessions, and devices, and promptly notify us at Admin@TruthResilienceGrace.com if you believe your account or information may have been compromised.

The contact form, story-submission tools, comments, and community features are not emergency or privileged communication channels. Do not use them to send information requiring immediate intervention.

Depending on where you live and subject to applicable exceptions, you may have the right to:

32. Confirm whether we process your personal information and request access to it.
33. Correct inaccurate personal information.
34. Request deletion of personal information.
35. Receive a portable copy of certain information you provided.
36. Opt out of targeted advertising, the sale or sharing of personal information, or certain profiling.
37. Withdraw consent to processing when processing is based on consent, including consent involving sensitive personal data.
38. Appeal a decision we make about a privacy request.
39. Exercise privacy rights without unlawful discrimination or retaliation.

To submit a request or appeal, email a Privacy Request. Describe the request and the account or email address involved. We may take reasonable steps to verify your identity and authority before acting. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct identity verification.

Where the Texas Data Privacy and Security Act or a similar law applies, we will respond without undue delay and generally within 45 days, subject to a permitted extension. If we deny a request, we will explain the decision and how to appeal. If an appeal is denied, Texas residents may submit a complaint to the Texas Attorney General. Requests are generally free, although applicable law may allow a reasonable charge for unfounded, excessive, or repetitive requests.

You may unsubscribe from marketing or newsletter emails by using the unsubscribe link in the message or contacting Admin@TruthResilienceGrace.com. We may still send nonmarketing messages that are reasonably necessary for account administration, security, policy updates, requested services, or legal compliance. Unsubscribe requests may take a short period to process, and we may retain a suppression record so we do not add the address back to marketing lists.

Birthday emails are optional and separate from membership, security, and other necessary account communications. You may turn off birthday emails at any time through the preference link in the message, through your account settings, or by contacting TRG. Choosing not to provide a birthday or opting out of birthday emails will not affect your membership application, approval, or account access.

The Services may contain links to third-party websites, embedded content, social-media features, advertisements, or resources. TRG does not control and is not responsible for the privacy, security, accuracy, or practices of those third parties. Review their policies before providing information or using their services.

TRG is operated from the United States. If you access the Services from another country, your information may be transferred to, stored in, or processed in the United States or other places where our service providers operate. Data-protection laws in those locations may differ from the laws where you live. Where required, we will use an appropriate legal basis and safeguards for cross-border processing.

We may update this Privacy Policy as the Services, our practices, or legal requirements change. The revised version will be posted with a new "Last Updated" date. If a change materially affects how we use information already collected, we will provide additional notice or seek consent when required by law.