Privacy Policy

This Privacy Policy describes how The Change Lab (operating through its fiscal sponsor, Impact Hub Houston), its digital platform The Change Engine (www.changeengine.us), and the Change Engine (collectively, “we,” “us,” or “our”) collect, use, and protect information when you use our websites, applications, and services.

We are committed to transparency and to safeguarding the information entrusted to us by the communities we serve.

1. Who We Are

The Change Lab is a nonprofit initiative operating under the fiscal sponsorship of Impact Hub Houston, located at 4201 Main St., Suite L055-C, Houston, Texas 77002, USA. Change Engine is our civic discovery platform at changeengine.us, connecting Houston residents with resources, services, and civic participation opportunities. The Change Engine is the underlying technology infrastructure that powers the platform.

2. Information We Collect

Information You Provide

• Name, email address, phone number, and mailing address
• Account registration details
• Payment information (processed securely through third-party payment processors)
• Content you submit, such as community feedback or suggested edits
• Communication preferences and survey responses

Information Collected Automatically

• IP address, browser type, and device information
• Pages visited, time spent, and navigation patterns
• Language and location preferences
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

• Provide, maintain, and improve our programs, services, and platforms
• Personalize your experience, including language preferences and neighborhood-relevant content
• Communicate with you about programs, events, and community opportunities
• Analyze usage patterns to improve accessibility and relevance
• Fulfill legal and regulatory obligations
• Support fundraising and organizational sustainability

4. How We Share Your Information

We do not sell your personal information to third parties.

We may share information with:

• Impact Hub Houston -- our fiscal sponsor, for administrative and compliance purposes
• Service providers -- including hosting (Vercel, Supabase), analytics (Google Analytics), and email communication platforms, who process data on our behalf
• Payment processors -- to securely handle donations and transactions
• Government or legal authorities -- when required by law, subpoena, or legal process

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5. Data Security

We implement industry-standard measures to protect your information, including:

• Secure data transmission using SSL/TLS encryption
• Role-based access controls for internal systems
• Regular security assessments of our platforms
• Secure, encrypted data storage through our cloud providers

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and exercise caution when sharing personal information online.

6. Your Rights and Choices

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information, subject to legal retention requirements
• Opt out of marketing communications at any time
• Request portability of your data in a common format
• Withdraw consent for data processing where consent is the legal basis

To exercise any of these rights, contact us at hello@thechangelab.net.

7. Cookies and Tracking

We use cookies and similar technologies to remember your preferences (such as language selection), analyze traffic, and improve site performance. You can manage cookie preferences through your browser settings. Disabling cookies may affect certain features of our platforms.

We use the following categories of cookies:

• Essential cookies -- required for core functionality such as authentication and language preferences
• Analytics cookies -- help us understand how visitors interact with our platforms

8. Children’s Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can promptly remove it.

9. Third-Party Links

Our platforms may contain links to external websites, services, and resources. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any external site you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by posting the updated policy on our platforms with a revised effective date. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: