Privacy Policy

The Pocahontas Financial Education Foundation (the "Foundation"), operating the Poca Investment Club ("Poca," "we," "us"), is a nonprofit educational organization based in Marlinton, West Virginia. This Privacy Policy explains what information we collect through this platform, how we use it, and the choices you have. We are committed to protecting your privacy and handling your information responsibly.

We collect information you provide directly and information generated as you use the platform.

• Account information: name, email address, password (stored only as a hashed credential by our authentication provider), and optional profile details.
• Member information: membership class, role, education level, meeting attendance, and activity records.
• Usage data: pages viewed, features used, and interaction logs used to operate and improve the platform.
• Device and connection data: IP address, browser type, and timestamps collected automatically.

Your account record links your platform login to a Member profile that tracks your membership class, educational progress, and participation. You may update certain profile fields yourself; administrators manage role assignments and membership status. Member directory information (name, membership class, role) may be visible to other authenticated members; sensitive fields are restricted by role.

Poca serves high-school students. For any member under 18 (a "minor"), we require verified parental or guardian consent before granting full access. We collect the consenting parent or guardian's name, email, relationship, and an acknowledgment of consent. We limit the personal information we collect from minors, do not publish identifying information about minors publicly, and do not knowingly collect information from minors without verified consent. A parent or guardian may request review or deletion of a minor's information at any time.

Donation records (donor name, amount, date, restriction, and payment reference) are collected to issue receipts, maintain accounting records, and satisfy regulatory requirements. Donor identity and donation details are confidential and visible only to roles authorized by the Foundation's governance (e.g., Treasurer, Board members). Anonymous donations do not link your identity to public records. We do not process payment card numbers directly; payment data is handled by our payment provider under its own security standards.

We record activity such as meeting attendance, lessons completed, ideas submitted, and votes cast. This data supports the educational mission, member engagement tracking, and governance records. Security-relevant events (such as logins and administrative actions) may be recorded in an audit log accessible to authorized roles.

We use essential cookies to maintain your authenticated session. We may use analytics to understand how the platform is used; analytics are aggregated and do not sell your data. You can control cookies through your browser, though disabling them may affect login and functionality.

We rely on third parties for authentication, hosting, email delivery, market data, and (where applicable) payments. Each provider handles data under its own privacy and security practices. We share information with them only as needed to provide the service and do not sell your information.

We use your information to operate the platform, deliver educational programming, maintain governance and accounting records, issue donation receipts, comply with legal and regulatory obligations, and communicate with you. We disclose information only (a) to authorized roles within the Foundation per its governance, (b) to service providers under appropriate obligations, (c) when required by law, or (d) with your consent.

We retain account and member records for the life of your membership and thereafter as needed for governance, accounting, and legal record-keeping (consistent with the Foundation's Records Retention Policy). You may request deletion of personal information where it is not required to be retained by law or governance.

We protect information using role-based access controls, encryption in transit, and audit logging of security-sensitive events. Access to financial and governance data is restricted to authorized roles and enforced server-side. No system is perfectly secure; we aim for safeguards appropriate to the sensitivity of the information.

You may request access to, correction of, or deletion of your personal information, subject to legal and governance retention requirements. To exercise these rights, contact the Foundation using the contact information below.

This platform is directed in part to high-school students. We obtain verified parental/guardian consent before collecting personal information from minors and limit what we collect. We do not knowingly collect information from minors without such consent. Parents or guardians may review, correct, or request deletion of a minor's information by contacting us.

Pocahontas Financial Education Foundation · Poca Investment Club · Marlinton, Pocahontas County, West Virginia. To reach us, use the contact form on our home page. For privacy-specific requests, mention "Privacy Request" in your message.

We may update this Privacy Policy from time to time. Material changes will be versioned, recorded in the Foundation's governance record book, and require you to re-accept the updated version when you next sign in. Prior versions are preserved and available on request.