Last updated: May 5, 2026 · Effective date: May 5, 2026
This Policy applies to the Pillar mobile app, website (joinpillar.com, pillargreek.com), and related services (the "Service"). It does not apply to third-party services or websites we link to.
If you are in the European Economic Area or the United Kingdom, we process your data under one or more of the following bases: performance of a contract (to provide the Service), legitimate interests (security, product improvement), consent (where required, e.g., for certain notifications), and legal obligation.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:
| Recipient | Why |
|---|---|
| Other users in your chapter or rush context | Profile, rankings, event RSVPs, posts, and messages are visible to those they are addressed to or to your chapter's authorized roles. |
| Trusted Circle contacts | Safety alert SMS containing your name, message, and (if applicable) location, sent only when you trigger an alert. |
| Service providers | Supabase (database, auth, storage), Twilio (SMS), Expo and Apple/Google (push), payment processor, analytics, error reporting, and email providers — all bound by contract to use data only to deliver services to us. |
| Universities and chapter administrators | Chapter-related activity (e.g., compliance, dues, recruitment) is visible to authorized chapter officers as part of providing the Service. |
| Legal & safety | To comply with laws, lawful requests, court orders, or to protect rights, safety, and property. |
| Business transfers | In a merger, acquisition, financing, or sale of assets, with continued protection of your information. |
| Aggregated/de-identified data | We may share data that cannot reasonably identify you for research, marketing, or product improvement. |
We retain personal data only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize personal data within a commercially reasonable period (generally within 30 days), except for data we must retain for legal, security, or fraud-prevention purposes, and routine backups that are overwritten on a rolling basis. Live location data shared during safety events is retained only as long as needed to deliver the alert and brief audit logging.
We use technical and organizational measures appropriate to the risk, including encryption in transit, password hashing, row-level security in our database, restricted internal access, and audit logging. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Notify us immediately at contact@pillargreek.com if you suspect a security issue.
The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Account holders must be 18 or the age of legal majority in their jurisdiction. If you believe a child under 13 has provided information, contact us and we will delete it.
Our service providers may process data in the United States and other countries. By using the Service, you understand that your information may be processed outside your country, where data protection laws may differ. Where required, we use appropriate safeguards (such as standard contractual clauses).
You have the right to (a) know the categories and specific pieces of personal information we collect, use, disclose, and (formerly) sell; (b) request deletion; (c) request correction; (d) opt out of "sales" or "sharing" (we do not sell or share for cross-context behavioral advertising); (e) limit use of sensitive personal information; and (f) be free from retaliation for exercising your rights. You may submit requests at contact@pillargreek.com. We will verify your identity using your account email or other reasonable means. You may use an authorized agent.
You have rights to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent where processing is based on consent. To exercise these rights, contact contact@pillargreek.com. You may also lodge a complaint with your local supervisory authority.
Residents of states with comprehensive privacy laws (e.g., Virginia, Colorado, Connecticut, Utah, Texas) may have similar rights. Contact us to exercise them.
Pillar Safety Alerts SMS is sent only when you (a) explicitly share your location, (b) trigger SOS, or (c) a check-in timer expires without check-in. Frequency varies by user activity (typical: 0–5 messages per month per contact). Message and data rates may apply. Reply STOP to opt out, HELP for help. Carriers are not liable for delayed or undelivered messages. We do not share Trusted Circle phone numbers with third parties for marketing.
Our website does not respond to Do Not Track signals because no common standard has been adopted.
The Service may link to third-party websites or services. We are not responsible for their privacy practices. Review their policies before using them.
We may update this Policy from time to time. If changes are material, we will provide notice (e.g., by email, in-app, or by updating the "Last updated" date). Continued use after changes take effect constitutes acceptance.
Privacy questions or requests: contact@pillargreek.com