Privacy Policy

BFP Team is the internal team portal at team.bridgesforpeace.com, operated by Bridges for Peace for volunteers, staff, and other people the organization has authorized, including a limited number of National Office users.

Bridges for Peace is committed to maintaining your trust and confidence. This page applies that commitment to BFP Team. The organization-wide privacy policy is published at bridgesforpeace.com/privacy-policy. Read that policy together with this one. This page adds how the team portal handles Google sign-in and team records.

In line with the Bridges for Peace privacy policy, we:

• do not sell or rent your personal information
• do not share your personal information with other organizations
• do not share your information with third parties for marketing
• do not send you communication you have not agreed to receive

Staff who can see your information have a duty of confidentiality under the ethical standards this charity is required to follow. Trusted service providers who operate the portal, listed below, are the same kind of providers described in the organization privacy policy: they may store information only to provide their service to Bridges for Peace.

When you choose Sign in with Google, BFP Team requests only:

• your Google account email address
• your basic profile: name and profile photo

We do not use this sign-in to read Gmail, Google Drive, Google Calendar, Contacts, or any other Google data. We request these two pieces of information because they are what the app needs to recognize you.

We use your email, name, and profile photo only to:

• sign you in and keep you signed in
• show your name and photo inside BFP Team
• match you to your Bridges for Peace records

We do not sell, rent, or share Google user data with other organizations. We do not use it for advertising, retargeting, credit, lending, or to train generalized artificial-intelligence models. We do not transfer it to data brokers or advertising platforms. We limit use of Google user data to the practices described on this page and in the Bridges for Peace privacy policy.

Sign-in tokens are stored in an encrypted session cookie in your browser so you can stay signed in. Those tokens can only be used for the email and profile permissions above. Signing out ends that session in this browser.

Your email, and the name we display, are also saved in Bridges for Peace records in Kintone so the portal can connect you to your profile, roles, and team tasks. The profile photo is shown from your Google account during the session.

After you sign in, the portal shows and stores organizational records needed to run volunteer and staff work. Depending on your role, that can include profile details, roles, schedules, leave and other requests, event attendance, and messages you submit in the app. Those records are kept in Kintone for Bridges for Peace.

If you allow notifications, we store a device notification token so we can send the alerts you turned on. You can turn notifications off in the app, your browser, or your device.

Bridges for Peace does not share your personal information with other organizations. We use trusted third-party service providers to operate BFP Team, as the organization privacy policy describes for its website. They are obligated to safeguard the information and use it only for the service they provide to us:

• Google, to sign you in
• Kintone (Cybozu), to store organizational records
• Vercel, to host the application
• Firebase Cloud Messaging, to deliver notifications you allow

Bridges for Peace staff and volunteers can see a record only when their role requires it.

We may also disclose information when the law requires it, or when it is necessary to investigate abuse, protect security, or protect Bridges for Peace and the people who use this portal.

The Google session cookie lasts until you sign out or the session ends. Organizational records stay while you are connected to Bridges for Peace and for as long as the organization needs them for its volunteer and staff programs.

We review and correct information we hold about you. You can withdraw consent and ask us to delete information, as stated in the Bridges for Peace privacy policy. Email intl.office@bridgesforpeace.com for that request. For a question about this portal, email bfp-it@bridgesforpeace.com.

BFP Team uses a session cookie so we can recognize you while you are signed in. That is the same kind of use described in the organization privacy policy: recognizing you when you return. Signing out ends the session in this browser. If you block cookies, sign-in cannot be kept.

We may collect an IP address for security and to limit abuse. We do not use it for marketing, and we do not link it to you for that purpose.

BFP Team is served over an encrypted connection (HTTPS / SSL). A security breach that affects online users is handled under the Bridges for Peace privacy policy, including its commitment to inform you within 72 hours.

BFP Team is for adult volunteers and staff. It is not directed at children.

Comments or questions about Bridges for Peace policies: intl.web@bridgesforpeace.com. Corrections or withdrawal of consent: intl.office@bridgesforpeace.com. BFP Team itself: bfp-it@bridgesforpeace.com.

If this policy changes, we will update this page and the effective date. This is the privacy policy URL for the BFP Team Google sign-in screen. The organization-wide policy remains bridgesforpeace.com/privacy-policy.