Quorum is a board management platform for PTOs, HOAs, and nonprofits. This policy explains what is public, what is private, and how we handle your data.

The following information may be visible to anyone on the internet without logging in:

• On Quorum's landing page: your organization's logo appears in a cycling display of organizations that use Quorum.
• On your organization's public page: your org name, logo, mission statement, and board officer names and roles (if configured) are shown at your public URL.
• Meeting agendas: when you share an agenda link with members, it is accessible to anyone with that link.
• Published meeting minutes: minutes you publish are accessible to anyone with the link.
• Sponsor banners: if your organization has active sponsors, their banner images and website links appear on your public pages.

The following is only accessible to authenticated board members and administrators:

• User account email addresses and passwords
• Budget lines, spending records, and financial data
• Reimbursement submissions and receipts
• Draft meeting content and unpublished minutes
• Annual officer statements and signed PDFs
• Sponsor contact information and pricing

When an organization registers, we collect the org name, org type, EIN (optional), and the admin's name and email. Additional information (logo, mission statement, officer roles, timezone, and appearance settings) is provided voluntarily through the settings page.

Board members invited by an admin provide their name and email. Reimbursement submitters provide their name, email, amount, description, and receipt files. Sponsors provide their business name, contact email, website, banner image, and selected tier.

When a local business sponsors an organization through Quorum, we collect business name, contact email, website URL, banner image, tier, and payment amount. This information is shared with the organization's board so they can review and approve the application.

Card payments are processed by Stripe. Quorum does not store credit or debit card numbers. Stripe may collect billing details according to its own privacy policy. We retain payment status, amounts, and Stripe transaction identifiers for fulfillment, refunds, and records.

We use a single HttpOnly, Secure session cookie scoped to your organization's URL path to keep you signed in. It expires after 12 hours of inactivity. We do not use tracking or advertising cookies.

Quorum is hosted on Amazon Web Services (AWS). Your data is stored in AWS DynamoDB and S3, both in the US East region. Authentication is handled by AWS Cognito. Email notifications are sent via AWS Simple Email Service. Stripe processes sponsorship payments and Connect payouts. We do not sell your data or share it with third parties beyond what is necessary to operate the service.

Organization administrators can remove their logo, mission statement, and officer information from settings at any time, which will remove it from the public page. To opt out of your logo appearing on Quorum's landing page, or to request deletion of your organization's data, contact us at the address below.

Questions or requests regarding your privacy can be sent to:

quorum-support@makergully.com