Help › Privacy
Privacy (draft)
What the service holds about a society and its people, and who can see it.
Last updated 2026-11-07 · Version draft-1
What the service holds
The service holds two kinds of facts. Its routing facts stand in the service’s registry: a society’s name, its address in the service, its province, its standing, the first person’s name and email as given at sign-up, and the record of the society’s agreement. A society’s books — its entries, its people, its documents — stand in that society’s own database, and nowhere else but its backups.
Who can see what
A society’s books are open to that society’s own people, under the roles the society itself hands out, and to no one else: no other society, and not the operator, whose console holds routing facts and no road into a book. The backup copies the service keeps are for safekeeping and restore, and are opened for nothing else.
Email the service sends
The service sends four kinds of email, and no others: a claim link to a society's founder when the society signs up, a sign-in link to a person who asks for one at their society's sign-in page, a link to a person who asks to see the societies standing under their address, and an invitation to a person a society adds. Every email the service sends names its sender, SocietySpark, and carries the operator's line at its foot: By MemberSpark, a BC non-profit, #132 - 328 Wale Rd, Colwood, BC🇨🇦. The mail is sent through the shared mail service the operator runs for its services. A link proves one thing only — that the person who opened it controls that inbox — and the service's registry learns, at a claim and at an invitation's enrolment, which societies stand under a proven email address. That one fact exists for the person's own switching between their societies, and for nothing else: it opens no society's books to anyone, and it is never a road in for the operator.
Asking, and erasing
A society can ask what routing facts the service holds about it, and the answer is the registry’s own record. Closing a society erases as the terms state: its backups deleted, its database deleted, and only the record that it stood here — its name and the date it closed — kept.