LEGAL

Privacy Policy

Effective date: October 22, 2026

This Privacy Policy explains how FreeHumans LLC, operating Commune (“Commune,” “we,” “us,” or “our”), handles personal information in connection with the Commune website and services (the “Service”). It applies to visitors, account holders, and people whose information is included in a Commune. This policy describes current practices and, where applicable, how information would be handled if additional account, payment, or group features are made available.

1. The current site and future features

The “Join a Commune” form saves your name, email address, city or region, joining or hosting preferences, asset contribution, approximate asset value when you have an asset to share, selected interests, and description to our waitlist. We use these details to follow up about Commune and understand what you want to share or find. Cloudflare processes the submission and Neon hosts the waitlist database in the United States. The login form is not connected to an account system and does not submit or save login details. Both forms use score-based Google reCAPTCHA Enterprise for spam prevention; a verification token is sent to our server and verified with Google before continuing. The city or region field uses Google Places to suggest locations as you type. If that service is unavailable, you can enter your location manually. If you contact us by email, we receive the address and message you choose to send.

Google receives location search text when you use Places and processes browser, device, and interaction information through reCAPTCHA, which may set a necessary cookie. Google's Privacy Policy and Terms of Service apply. We do not save reCAPTCHA tokens or scores in the waitlist database.

2. Information we may collect

The information we handle depends on how you interact with the Service and may include:

• Contact and account information: name, email address, login credentials, profile details, and preferences.
• Commune information: group membership, invitations, roles, votes, decisions, schedules, bookings, and communications.
• Records and files: asset descriptions, agreements, manuals, receipts, expense entries, reimbursements, contributions, tasks, and documents you or another member submit.
• Payment-related information: subscription, dues, transaction, billing, and payment-status details if payment features are offered. Payment-card or bank credentials are handled by the payment provider and are not intended to be stored by Commune.
• Support communications: messages, feedback, and information you provide when requesting help.
• Technical information: browser and device details, IP address, access times, pages or features requested, diagnostics, and security logs generated to deliver and protect the Service.

We do not ask for government identification, precise location, or sensitive personal information through the current landing page. Do not upload consumer health information, government identifiers, children's sensitive information, or other sensitive data unless a feature expressly requests it and provides appropriate notice and safeguards.

3. Information from other sources

If group features are made available, other members may provide information about you, such as invitations, group roles, shared expenses, decisions, or bookings. We may receive transaction status or fraud-prevention information from a payment provider if you use a payment feature. We do not currently use identity-verification or advertising data providers for the landing page.

4. How we use information

We may use personal information to:

• operate, maintain, secure, and provide the Service and features you request;
• create and administer accounts, groups, invitations, access controls, and records;
• process subscriptions or transactions through a payment provider if those features are enabled;
• respond to questions, send service notices, and provide support;
• detect misuse, prevent fraud, enforce our terms, and protect users and the Service;
• understand and improve the Service, subject to applicable law and your choices; and
• comply with legal obligations and establish, exercise, or defend legal claims.

If we introduce AI-assisted features, we will describe their operation before they are used. We will not use private Commune content to train a general-purpose AI model without the required notice and consent. AI output may be incomplete or inaccurate and should be reviewed by people; it is not a legal, financial, or dispute determination.

5. How information may be shared

We may disclose information in the following circumstances:

• Within your Commune: group information is made available to members or administrators as needed for the features used and according to access controls. Review what you submit and who can see it.
• Service providers: vendors that provide hosting, security, communications, support, analytics, or payment processing may process information for us under appropriate contractual or legal restrictions.
• At your direction: we share information when you choose to invite another person, connect a service, or direct us to disclose it.
• Legal and safety purposes: we may disclose information when reasonably necessary to comply with law or legal process, protect rights and safety, investigate fraud or security incidents, or enforce agreements.
• Business changes: information may be transferred as part of a merger, financing, reorganization, or sale of all or part of our business, subject to applicable law and appropriate notice.

We do not sell personal information for money or share it for cross-context behavioral advertising. We do not disclose text-message opt-in consent to third parties for their own marketing. We do not currently use third-party advertising cookies on the landing page.

6. Cookies and similar technologies

The current landing page does not intentionally use advertising or analytics cookies. Browsers and hosting infrastructure may process technical data needed to deliver pages, protect the site, or diagnose errors. If we introduce optional analytics, advertising, or preference technologies, we will update this policy and provide any consent or opt-out controls required by law.

7. Retention

We keep information only for as long as reasonably needed for the purposes described in this policy, including providing the Service, maintaining records, resolving disputes, meeting legal obligations, and protecting security. Retention periods depend on the type of information and the context in which it was collected. When information is no longer needed, we will delete it, de-identify it, or securely dispose of it, subject to lawful backups and retention obligations.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect information appropriate to its nature. No system, transmission, or storage method is completely secure, and we cannot promise absolute security. You are responsible for protecting your credentials and for using appropriate care when sharing records with other members.

9. Your choices and privacy rights

Depending on where you live and applicable law, you may have the right to request access to, correction of, deletion of, or a copy of personal information, or to object to or restrict certain processing. You may also withdraw consent where processing depends on consent. We will verify requests as required and respond within the time prescribed by law. Some information may need to be retained or may be visible to other Commune members as part of shared records, legal obligations, or dispute records.

To make a privacy request, contact us at the address below. If you are acting for another person, include evidence of your authority. You may appeal a decision where applicable law provides an appeal right. You may also contact your state attorney general or privacy regulator.

10. Children

The Service is intended for adults and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Account holders must be at least 18. Do not create an account for a child or submit a child's information unless you are legally authorized and the feature expressly permits it. Contact us if you believe a child has provided personal information directly to Commune.

11. Location and international processing

Commune is operated from the United States. Information may be processed or stored in the United States or other locations where our service providers operate, subject to applicable law. Privacy protections in those locations may differ from those where you live.

12. Third-party sites and services

The Service may link to websites or services operated by others. Their privacy practices are governed by their own notices, not this policy. Review those notices before sharing information with a third party.

13. Changes to this policy

We may revise this policy as our practices or legal obligations change. We will update the effective date and provide additional notice for material changes where required. The revised policy applies from its effective date.

14. Contact

Commune is operated by FreeHumans LLC. For privacy questions or requests, use the contact link below. Please do not include sensitive information in an email unless it is necessary to process your request.

Questions or requests? Email legal@commune.so