Kindtoall Terminal Privacy Policy
Effective October 2, 2026. This policy explains how the Kindtoall Terminal staff product handles resident and organization data.
Verified organizations only
Staff tools work only while the organization is operational. Pending, rejected, suspended, or closed organizations cannot reach resident data — the boundary is enforced in the database, not just the interface.
Scope
This policy applies to Kindtoall Terminal — the hosted staff console and its optional packaged browser extension — used by authorized staff of Kindtoall organizations for application intake, review, campaigns, and member management.
The resident-facing extension, Kindtoall Apply Assistant, is covered by a separate policy. The general Kindtoall Privacy Policy also applies to all accounts.
What staff can access
Terminal displays resident applications, consented document snapshots, messages, and program data only for organizations where the signed-in staff member holds an active membership with an appropriate role.
Access is enforced by database row-level policies and backend authorization — not by hiding buttons. An organization that is pending verification, rejected, suspended, closed, withdrawn, or in draft has no access to resident data at all, even for staff who were members when it was operational.
Resident data boundaries
Residents see exactly what an application will share before they submit. Staff can view only the fields and documents the resident consented to share with that organization.
Every staff read of protected resident records is recorded in an audit trail. Terminal does not permit bulk export of resident data.
Active-tab access and downloads
In the packaged extension, temporary access to the active tab is requested only when staff explicitly run an intake or poster action. The extension does not monitor browsing.
The downloads permission is used only to save poster or QR exports that staff request.
Storage and sessions
Terminal stores an authenticated session in extension- or browser-scoped storage. Signing out clears it. Staff sessions and devices can be revoked by organization administrators.
Do not remain signed in on shared workstations; use organization-managed accounts rather than shared logins.
Retention and deletion
Application records, audit events, and campaign history are retained per the general Privacy Policy and the organization’s obligations. Immutable verification and decision events are retained for accountability.
When an organization closes, its operational access ends; record handling follows the retention terms of the general policy.
Sharing and third parties
Kindtoall does not sell resident or organization data and does not use it for advertising.
Optional organization webhooks and API keys let a verified organization receive its own application events at endpoints it configures. Deliveries cease if the organization is suspended or rejected.
Changes and contact
We may update this policy as Terminal changes. The effective date below is updated when revisions are published.
For privacy questions, security reports, or access concerns, email jimmylou27@icloud.com.
Related policies
Read the general Kindtoall Privacy Policy and the Kindtoall Apply Assistant privacy policy for the resident-facing extension.