Rally Point (therallypoint.co and the Rally Point mobile app) is operated by Sentinel Vendor Risk Group LLC, a veteran-owned company based in Pennsylvania ("Rally Point," "we," "us"). This policy explains what we collect, why, and the choices you have.
1. Information We Collect
Account info: name, email, phone, and password. Passwords are securely hashed and never stored in plain text.
Business listing info: business name, category, description, address, phone, website, social links, hours, logo and photos, and verification status.
Proof of military service: if you upload a document to verify your service (such as a VA ID, a state ID with a Veteran designation, or a redacted DD-214), only Rally Point reviewers can see it. It is never shown publicly, and we delete the file permanently once we make a decision. Please black out your Social Security number and address before uploading.
Affiliate program (optional): who signed up through your referral link, the rewards you've earned, your payout choice, and the PayPal email you give us for payouts.
Job applications: if you apply to a job, the business receives your name, email, phone, experience, availability, message, portfolio link, and any resume or resume summary you choose to include.
Reviews: your name and review are publicly visible on the business's page.
Events: events you post, including name, date, location, and description, are publicly visible.
Location: if you use "Near you" search, your browser or device asks permission first. We use your location only to calculate distance and do not store it.
Usage data: we log page views and contact-button clicks (phone, website, directions) per business so owners can see stats for their own listing. To measure overall use, we also record anonymous visits: the page, the referring website, device type, and approximate city and state. These records are tied only to a random ID stored in your browser. We store no name, email, or IP address with them, and we delete them after 90 days. We also save your activity in features like Daily Muster, such as streaks, so they carry over between visits.
Payment info: payments are processed by Stripe. We never see or store your full card number.
2. How We Use Information
We use your information to: run your account; display listings, events, and reviews; deliver job applications; verify veteran-owned businesses; process subscriptions, track affiliate referrals, and send payouts; show business owners stats for their own listings; send account and billing emails, such as receipts, verification updates, and policy changes; and prevent fraud and abuse and keep the service working. We do not use your information for third-party advertising.
3. Who We Share Information With
Service providers: Stripe (payments), Supabase (database, login, and file storage), Netlify (website hosting), Cloudflare (cookie-free site analytics), Google Maps (address lookup and maps), and PayPal (affiliate payouts). They handle data only to provide their services to us.
Businesses you contact: when you apply to a job, the business receives your application.
The public: business listings, reviews, and events are visible to anyone.
Legal requirements: we may disclose information if required by law or to protect the safety of our users or others.
Business transfer: if Rally Point is sold or merged, your information may transfer to the new owner under this policy.
We do not sell or rent your personal information.
4. Data Retention
We keep account and listing data while your account is active. You can delete your account and its data at any time from your profile or at therallypoint.co/delete-account.html. Deletion is completed within 30 days. We may keep limited records longer where the law requires, such as tax and payment records. Proof-of-service files are deleted once reviewed, and anonymous visit data is deleted after 90 days.
5. Your Choices
You can edit or delete your listing, photos, profile, and saved favorites at any time. You can decline location access and still use everything except "Near you" search. You can ask us what information we hold about you, or ask us to correct or delete it, by emailing us (Section 10). Depending on your state, you may have additional privacy rights, and we will honor them.
6. Cookies and Browser Storage
We use browser storage to keep you signed in, remember your settings, and generate the anonymous visit ID described above. We do not use advertising or cross-site tracking cookies.
7. Children
Rally Point is not intended for anyone under 13, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
8. Security
We use industry-standard infrastructure: Supabase for authentication and encrypted data storage, and Stripe for payments. New passwords are checked against known data-breach lists without your password ever being sent. Access to user data, including proof-of-service files, is limited to Rally Point administrators who need it. No online service can guarantee perfect security, but we follow established best practices and keep our systems updated. If you have a security concern, contact us right away (Section 10).
9. Changes to This Policy
We may update this policy as Rally Point grows. If we make material changes, such as collecting new kinds of information or sharing it in new ways, we will notify registered users by email or with a notice on the site before the changes take effect. The "Last updated" date at the top always shows the current version. If you keep using Rally Point after changes take effect, the updated policy applies.
10. Contact
Questions, requests, or concerns about your privacy: support@therallypoint.co
Sentinel Vendor Risk Group LLC, Camp Hill, Pennsylvania
We aim to respond within 5 business days.