Add privacy policy

catalystbook/privacy.md

@@ -0,0 +1,80 @@
+# Privacy Policy
+
+This Privacy Policy explains how the Catalyst Project uses the personal data we collect from you when you use our website.
+
+“We/us/our” refers to the Catalyst Project partners, which includes:
+
+- [2i2c](https://2i2c.org/)
+- [The Carpentries](https://carpentries.org/)
+- [Center for Scientific Collaboration and Community Engagement](https://www.cscce.org/)
+- [Centro de Computación de Alto Desempeño](https://ccad.unc.edu.ar/)
+- [Invest in Open Infrastructure](https://investinopen.org/)
+- [MetaDocencia](https://www.metadocencia.org/)
+- [Open Life Science](https://openlifesci.org/)
+
+## What data do we collect?
+
+We may collect the following data
+
+- name
+- email address
+- job title
+- field of work
+- feedback from training events
+- GitHub username
+- free form text written into real-time collaborative documents during Hub Champion Training
+- support requests
+
+## How do we collect data?
+
+You can directly provide us with data when you
+
+- submit data through online forms such as AirTable on the website and Google Forms during training events
+- write free-form text into real-time collaborative documents, such as CodiMD, during training events
+- submit a support desk ticket via FreshDesk
+- email us
+
+## How do we use your data?
+
+We collect your data so that we can
+
+- provide services as outlined in the Service Agreement
+- contact you about service notices and updates
+- organize training events
+- improve training events based on feedback
+- provide user support
+
+Data may be shared among Catalyst Project partners.
+
+We Never Sell Personal Information: We will never sell, rent or otherwise provide your personal information to any third party for marketing purposes.
+## How do we store your data?
+
+Data is stored through third-party service providers, such as
+
+- AirTable
+- CodiMD
+- GitHub
+- Google Forms and Google Drive
+- FreshDesk
+We share your information with our third-party service providers and any subcontractors as required to offer you our service. For example, we use AirTable for operations, CodiMD for training events, GitHub as a platform for open source development, Google Forms to collect feedback from training events, Google Drive for internal team documents and FreshDesk to track support tickets.
+
+## What are your data protection rights?
+
+We would like to make sure that you are aware of your basic data protection rights according to the [CCPA](http://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5).
+
+- *right to know* about the personal information we collect and how it is used and shared
+- *right to delete* personal information collected
+- *right to opt-out* of the sharing of personal information
+- *right to non-discrimination* for exercising CCPA rights.
+
+Additional rights and protections may be afforded by other jurisdictions, e.g. GDPR in the EU.
+
+If you would like to make a request and exercise any of your rights, we will respond to you within one month. Please email us at [[email protected]](mailto:[email protected]).
+
+## Privacy Policies of other websites
+
+Our website contains external links to other websites. Our privacy policy applies to our website only. If you click a link to another website, you should read their privacy policy.
+
+## Changes to our Privacy Policy
+
+We may review our Privacy Policy and will place any updates on this website. This privacy policy was last updated on March 22, 2024.