Privacy Policy

1. Scope of this Policy

Hajj Media is a development and consulting organization. We build and operate software, civic technology, AI-native knowledge systems, and publishing work, and we provide services to brands, nonprofits, DAOs, and partner organizations. This Policy covers information we handle as a business operating our own websites and Services.

For some engagements — such as the Learn & Earn civic pilot with Homewood Children's Village — we process information on behalf of a partner organization that decides how the data is used. In those cases the partner is the "controller" of the data, we act as a service provider/processor under our agreement with them, and that partner's own privacy notice may also apply.

2. Information We Collect

Information you provide

• Contact & inquiry details — your name, email address, phone number, organization, and the contents of messages when you email us, fill out a form, or request a demo or partnership.
• Program enrollment data — for pilots such as Learn & Earn, this may include a participant or staff name, role, organization-issued system ID, site assignment, mobile phone number, and (for minors) a guardian contact.
• Service-engagement information — details you share when working with us on a consulting or development project.

Information collected automatically

• Usage & device data — such as IP address, browser type, pages viewed, and timestamps, collected through standard web server logs and any analytics we use.
• Cookies & similar technologies — see Cookies & Analytics below.

Information from third parties

We may receive information from partner organizations (for example, attendance or program events from a civic partner's systems) and from service providers such as our messaging and hosting vendors (for example, message delivery status).

We do not intentionally collect sensitive personal information (such as government ID numbers, health, or financial account data) through this website. Please do not send us sensitive information by email or text.

3. SMS / Text Messaging Program

Hajj Media operates an SMS notification service used by programs we support — for example, attendance and program notifications for the Learn & Earn youth workforce pilot. This section describes that program.

Mobile information is never shared with third parties or affiliates for marketing or promotional purposes. Phone numbers and consent collected for the SMS program are used only to deliver the messages described above. We share mobile information only with the vendors that help us deliver the messages (such as our SMS provider) and with the program or organization on whose behalf the messages are sent. We do not sell mobile opt-in data or phone numbers. No mobile information is shared with third parties for their own marketing.

4. How We Use Information

• Respond to inquiries and provide consulting, development, and pilot services.
• Operate, maintain, and improve our websites, products, and pilots.
• Deliver program notifications and SMS messages to enrolled, consenting recipients.
• Communicate about projects, partnerships, demos, and support.
• Protect the security and integrity of our Services, prevent abuse, and comply with legal obligations.

5. Legal Bases for Processing

Where the EU/UK General Data Protection Regulation (GDPR) or similar laws apply, we process personal information on the basis of: your consent (for example, SMS enrollment); the performance of a contract (delivering services you or a partner requested); our legitimate interests (operating and improving our Services and securing them); and compliance with legal obligations. You may withdraw consent at any time without affecting processing already carried out.

6. How We Share Information

We share information only as described in this Policy, including:

• Service providers. Vendors that host our sites and process data on our behalf — for example, Netlify (hosting and storage) and Twilio (SMS delivery) — under contracts that limit their use of the information to providing services to us.
• Partner organizations. Where we operate a program on a partner's behalf, we share relevant data with that partner as the controller of the program.
• Legal & safety. When required by law, legal process, or to protect the rights, safety, and security of people, our partners, or our Services.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information, and we do not share mobile opt-in information with third parties for their marketing.

7. Cookies & Analytics

Our website uses minimal cookies or similar technologies needed for essential functionality and, where applicable, to understand aggregate site usage. You can control or disable cookies through your browser settings; disabling some cookies may affect site functionality. If we use analytics services, they collect usage data subject to their own privacy practices.

8. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy, to deliver and audit our Services, to comply with legal, accounting, or reporting obligations, and to resolve disputes. SMS delivery and audit records are retained for a limited period to operate the program and demonstrate consent and compliance, then deleted or de-identified. Retention periods for partner programs follow our agreement with the partner.

9. Data Security

We take reasonable administrative, technical, and organizational measures to protect information from unauthorized access, use, alteration, or disclosure, including access controls, encryption in transit, and reputable hosting providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's & Youth Privacy

Our website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through this website.

Some programs we support — such as the Learn & Earn youth workforce pilot — necessarily involve minors. For those programs we process youth information only under the direction of the operating partner organization and only with consent obtained from a parent, guardian, or otherwise as permitted by law. SMS messages involving a minor are sent to the consenting participant and/or their designated guardian contact. If you believe a child's information has been provided to us without appropriate consent, contact us and we will delete it.

11. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to opt out of certain processing, and to not be discriminated against for exercising these rights. Residents of California (CCPA/CPRA), the EU/UK (GDPR), and other jurisdictions may have specific rights.

• SMS opt-out: reply STOP to any message at any time.
• Other requests: contact us using the details below. We may need to verify your identity before acting, and for partner programs we will route your request to the appropriate controller.

12. Third-Party Links & Services

Our sites and materials may link to third-party websites and products (for example, UrbanGriotz/LoreForge, the Faith & Cryptocurrency book site, and Substack). We are not responsible for the privacy practices of those third parties; review their policies directly.

13. International Users

Hajj Media is based in the United States, and we process and store information in the United States. If you access our Services from outside the U.S., you understand your information may be transferred to and processed in the U.S., where data protection laws may differ from those in your country.

14. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised Policy.

15. Contact Us

For privacy questions or to exercise your rights, contact Hajj Media, LLC:

• Email: Show email address

See also our Terms & Conditions.