Privacy Policy

Effective date: March 18, 2026

This Privacy Policy explains how Mansfield Computing Technologies, operating as Community Infrastructure ("we," "us," or "our"), collects, uses, and protects information when you use our community crisis response SMS services, including FrenchtownHelps, HunterdonCares, HunterdonHelps, FlemingtonHelps, FlemingtonCares, WarrenCares, WarrenHelps, SomersetHelps, SomersetCares, and related services.

1. Information We Collect

When you text our help numbers, we collect:

Phone number — Your phone number is received by our SMS provider (Twilio) as part of the text message. We store your phone number in encrypted form (AES-256-GCM) and reference it internally using a one-way cryptographic token. Your full phone number is never displayed to volunteer responders; they see only the last four digits.
Message content — The text of messages you send and receive, used solely to connect you with community resources and respond to your request.
Metadata — Timestamps, message delivery status, and conversation state, used for service reliability and quality.

We do not collect your name, location, email address, or any other personal information unless you voluntarily provide it in your messages.

2. How We Use Your Information

To connect you with trained volunteer responders who can help with your request
To route your messages to the appropriate community service area
To provide translation services if you communicate in a language other than English
To generate anonymized, aggregate reports on community service usage (no individual data is included)
To maintain service reliability and troubleshoot technical issues

3. How We Protect Your Information

Phone numbers are encrypted at rest using AES-256-GCM encryption
All communications between our systems use TLS encryption in transit
Volunteer responders never see your full phone number — only a masked identifier (last 4 digits)
Our systems run on infrastructure with full-disk encryption (LUKS)
Access to systems and data is restricted to authorized administrators through role-based access controls and multi-factor authentication

4. Information Sharing

We do not sell, rent, or share your personal information with third parties for marketing or commercial purposes. We may share information only in these limited circumstances:

SMS delivery — Your phone number and message content are transmitted through Twilio, our SMS service provider, which is required for message delivery. Twilio's privacy practices are governed by their own privacy policy.
Translation — If translation is needed, message text (without your phone number) may be processed by Google Cloud Translation API.
Legal obligation — If required by law, court order, or legal process.
Safety — If we believe disclosure is necessary to prevent imminent harm to a person.

5. Data Retention

Conversation records are retained for the duration needed to provide community services and for audit purposes. Encrypted phone numbers and conversation logs are stored on encrypted infrastructure. You may request deletion of your data by texting "DELETE" to any of our help numbers or by contacting us at privacy@community-infra.org.

6. Your Rights

You may stop receiving messages at any time by replying STOP
You may request information about the data we hold about your phone number
You may request deletion of your data
You may contact us with any privacy concern at privacy@community-infra.org

7. Children's Privacy

Our services are available to anyone in the community who needs help. We do not knowingly collect additional personal information from children under 13. If a minor texts our help numbers, we will respond to their request for assistance without collecting information beyond what is described in this policy.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated effective date.

9. Contact Us

For privacy questions or data requests:

Email: privacy@community-infra.org

Last updated: March 18, 2026