Privacy Policy

This Privacy Policy describes how Mr. Green's Agency List ("Company", "we", "us", "our") collects, uses, shares, and protects personal information when you access or use the websites, applications, and services we operate under the Mr. Green's Agency List name (collectively, the "Service"). The Service is currently offered as a free founding beta. Capitalized terms not defined here have the meanings in our Terms of Service.

1. Information we collect

We collect the following categories of personal information (mapped to CCPA categories where applicable):

We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it.

Sensitive personal information. Date of birth (which can imply age) is the only category that could be considered "sensitive personal information" under California law. We collect it only to confirm eligibility (18+) and to support age-appropriate features. We do not use sensitive personal information to infer characteristics about you.

2. How we use information

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA).

3. Who can see what

4. How we share information

We share personal information only with:

RecipientPurpose
SupabaseAuthentication, database, file storage (hosting infrastructure).
CloudflareSite hosting (Pages, Workers), DNS, CDN, CAPTCHA (Turnstile).
ResendTransactional email delivery.
StripePayment processing for paid features if paid features launch.
Other usersAs described in Section 3 (Who can see what).
Legal and law enforcementWhen required by law, court order, or to protect rights, safety, or property.
Business transfersIn connection with a merger, acquisition, financing, reorganization, or sale of assets (subject to this Policy).

Each service provider is contractually limited to using personal information only to provide services to us, with appropriate confidentiality and security obligations. We do not sell or share personal information for advertising purposes.

5. Cookies, local storage, and tracking technologies

We use cookies and browser local storage to keep you signed in, remember your preferences, and prevent abuse (e.g., CAPTCHA tokens). We do not use third-party advertising cookies, cross-site advertising pixels, or behavioral retargeting. We do not knowingly allow third parties to track users across other sites for advertising.

Do Not Track. Some browsers send a "Do Not Track" or Global Privacy Control (GPC) signal. Because we do not sell or share personal information for cross-context behavioral advertising, these signals do not change how we collect or process data. We treat any GPC signal as a valid opt-out request for the categories of processing it covers.

6. Your choices

7. Data security

We use industry-standard authentication, encryption in transit (HTTPS), and row-level access policies at the database layer. Passwords are stored only as one-way hashes. Sensitive operations are protected by rate limits and CAPTCHA. We restrict internal access on a need-to-know basis. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute protection. If we become aware of a security incident affecting your personal information, we will notify you and applicable authorities as required by law.

8. Data retention

We keep personal information for as long as your account is active and for the period reasonably necessary to operate the Service, comply with legal obligations, resolve disputes, prevent fraud or abuse, and enforce our agreements. When you delete your account, we remove your profile, uploaded media, applications, messages, and associated platform data. Some records may persist:

9. Children

The Service is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Your California privacy rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (Cal. Civ. Code § 1798.100 et seq.), as amended by the California Privacy Rights Act ("CCPA/CPRA"):

How to make a request. Submit a request through Support or by email to support@mrgreenagencylist.com. We will verify your identity using information already associated with your account before responding. We will respond within 45 days, with a possible 45-day extension if reasonably necessary. You may use an authorized agent to make a request on your behalf — the agent must provide written permission and we may require you to verify your identity directly.

Notice of financial incentives. We do not offer financial incentives in exchange for personal information.

11. California "Shine the Light" disclosure

California Civil Code § 1798.83 permits California residents to request information regarding our disclosure of personal information to third parties for those third parties' direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes. Requests for this disclosure may be sent to support@mrgreenagencylist.com.

12. Canadian privacy (PIPEDA)

If you are a resident of Canada, you have rights under the Personal Information Protection and Electronic Documents Act ("PIPEDA") and applicable provincial laws to access, correct, and request the deletion of personal information we hold about you, and to withdraw consent for certain uses. Submit requests through Support or at support@mrgreenagencylist.com.

13. International users

The Service is offered to residents of the United States and Canada. Personal information is processed and stored in the United States. If you access the Service from another jurisdiction, you do so at your own initiative, and you consent to the transfer and processing of your personal information in the United States, which may have different data-protection rules than your jurisdiction.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date. If we make material changes, we will provide additional notice (by email or in-product). Your continued use of the Service after the effective date constitutes your acceptance of the updated Policy.

15. Contact us

Privacy questions, requests, or complaints: support@mrgreenagencylist.com or through Support. We do not publish a personal mailing address during the free founding beta; if a legally required mailing address is needed, contact us by email first.