Legal
Privacy Policy
This document is a starting point, not finished legal advice. A Florida attorney must review it before the site launches, and every highlighted placeholder below needs a real value before this page is relied on.
- Effective date
- EMPTY
What we collect, and why
Visitors never need an account, and the site does not run analytics or advertising scripts. The directory, industry pages, member profiles, and the About, Visit and Contact pages can be read and searched without anything being sent to a server — search of the member directory runs in your own browser. If you use the contact form, we collect what you type into it (your name, email, phone if you give it, and your message) so someone from the group can respond to you. We do not collect anything else about visitors.
Member listings and consent
Each member profile lists information the member has agreed to publish: their name, business, category, and the contact details they have chosen to share. A member controls what appears in their own listing and can ask for it to be corrected or removed by contacting the group.
Member accounts
LEO members can sign in to update their own listing. For each member account we keep: the email addresses and phone numbers they sign in with (these are private and never shown on the site), their password as a one-way scrambled hash (never the password itself), their two-step sign-in setting (an email address for codes, or an encrypted authenticator-app key), and, if they link one, the ID Google gives their Google account. We keep a log of sign-ins, failed attempts and account changes, with the time and network address, to protect accounts. When a password is set, we check it against a public list of passwords known from data breaches; only the first five characters of a scrambled form of the password are sent, never the password. These services process this data for us: Vercel (hosting), Upstash (account storage), Resend (sending codes by email), Google (only if a member uses Sign in with Google) and GitHub (where listing changes are saved).
We do not sell data
We do not sell, rent or trade visitor or member information to anyone.
Cookies
Reading the public site sets no cookies. Signing in as a member sets small, strictly necessary cookies that keep you signed in and protect the sign-in forms; they expire within eight hours, or when you sign out, and are never used for tracking. The only outside request a public page makes is to Google Fonts, to load the site's typefaces. No advertising or tracking scripts run here.
How long we keep it
Contact form submissions are kept only as long as it takes to respond to them. A member's listing is kept for as long as they are part of the group, and removed on request after they leave. A fixed retention period beyond that is EMPTY.
Your choices
You can ask to see, correct, or remove information we hold about you by contacting us using the details below. A member can ask to have their listing changed or taken down at any time.
Children
This site is a business directory, aimed at business owners and the public looking for one. It is not directed at children, and we do not knowingly collect information from anyone under 13.
Security
We take reasonable steps to protect the information we hold, but no method of storage or transmission is completely secure.
Changes to this policy
We may update this policy as the site or the group's practices change. The version on this page is the current one.
Contact
Questions about this policy can be sent to EMPTY or EMPTY.