Privacy Policy

This page explains, in plain English, what information the BMC Directory collects, why we collect it, how we store it, and the choices you have. The BMC Directory is operated by the Richmond County Black & Minority Chamber of Commerce, a nonprofit organization (“RCBMC,” “we,” or “us”).

What we collect

• Account information. If you create an account, we store your email address, display name, and (optionally) avatar image. You can change or remove these any time from your dashboard.
• Business listing data. If you list a business, we store the information you provide: name, category, address, phone, photos, owner story, and operating hours.
• Reviews and favorites. Reviews you publish are tied to your account and visible to the public. Favorites are private to your account.
• Location. If you grant location permission, your browser shares an approximate position so we can sort results by distance. We do not store your location after the session ends.
• Usage analytics. We use PostHog to understand which features people use so we can improve the directory. These events are aggregated and do not include personally identifying information beyond a randomly generated identifier.

Where it's stored

Account data, listings, photos, reviews, and favorites are stored in Supabase, a Postgres database with role-based access controls. Photos are stored in Supabase Storage. Authentication is handled by Supabase Auth.

We use industry-standard security practices. Database access is controlled by row-level security policies that prevent users from reading or modifying data that isn't theirs.

What we never do

• We never sell your personal information.
• We never share your information with third-party advertisers.
• We never read your direct messages or favorites for the purposes of advertising.

Your privacy rights

BMC is operated from Staten Island, New York. Even though no New York or federal law currently requires it of a directory our size, we voluntarily extend the strongest consumer privacy rights available to every member of the community, regardless of where you live. You have the right to:

• Know what information we hold about you.
• Request a copy of your data.
• Request deletion of your account and associated data.
• Opt out of analytics tracking.
• Correct inaccurate information about you or your business.

To exercise any of these rights, email info@bmcstatenisland.org. We respond within 30 days.

Data retention

Account information is retained as long as your account is active. Business listings stay in the directory while the business is operating. If you delete your account, we remove your profile, favorites, and personal information within 30 days. Reviews are retained but disassociated from your name to preserve the public record for the businesses involved.

Cookies

We use cookies for two things: keeping you signed in, and understanding which features are used (via PostHog analytics). We do not use advertising cookies. You can disable analytics by using your browser's “Do Not Track” setting or by emailing us to opt out.

Children

The directory is not directed to children under 13. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will remove it.

Changes to this policy

We will update the “Last updated” date at the top of this page when we make material changes. For significant changes that affect how we use your data, we will email account holders.