Patravo Privacy Policy

Patravo is a communication, event, media, and organization-management platform for youth-serving organizations, including troops and similar youth-serving groups.

Patravo is built around a simple idea: youth safety and privacy should come first.

Here is the short version of this Privacy Policy:

• Patravo collects only the information needed to provide and protect the service.
• Patravo does not sell, rent, license, broker, trade, or otherwise monetize personal information.
• Patravo does not show advertisements.
• Patravo does not use personal information for advertising.
• Patravo does not use ad networks, marketing pixels, or cross-site behavioral tracking.
• Patravo uses cookies and similar technologies only for sign-in, security, preferences, reliability, fraud prevention, and app functionality.
• Organizations control their organization data.
• Parents and guardians have important visibility and rights over youth information.
• Youth safety is built into Patravo’s design through role-based permissions, organization oversight, guardian relationships, moderation, auditability, and youth-protection controls.
• Security is a core product requirement.
• Users, families, and organizations can request access, correction, export, and deletion of their data, subject to safety, legal, security, backup, and legitimate recordkeeping limits.

This Privacy Policy explains what information Patravo collects, how we use it, when it may be shared, and what choices users, families, and organizations have.

Patravo’s privacy commitments are part of the product, not fine print.

1. Youth safety first. Patravo is designed for youth-serving organizations and vulnerable groups. Privacy choices are evaluated through a youth-safety lens.
2. Privacy first. We collect and use information to provide Patravo, protect users, support organizations, and comply with the law — not to build advertising profiles.
3. No ads ever. Patravo does not display advertisements in the product.
4. Never sell or rent personal information. Patravo does not sell, rent, license, broker, trade, or otherwise disclose personal information for money or advertising purposes.
5. No ad networks, marketing pixels, or behavioral tracking. Patravo does not use ad networks, marketing pixels, remarketing tags, or cross-site behavioral tracking.
6. Cookies only for functionality and security. Patravo uses cookies, local storage, and similar technologies only for sign-in, authentication, preferences, security, fraud prevention, reliability, and app functionality.
7. Organization data belongs to the organization. Organizations own their organization data. Patravo will not hold organization data hostage.
8. Families and individuals have control over personal information. Parents, guardians, adult users, and, where appropriate, youth users can request access, correction, export, and deletion of personal information.
9. Data import, export, and deletion are product commitments. Patravo is designed to support data portability, organization continuity, and responsible deletion.
10. Security by design. Security is a core requirement of Patravo’s architecture, operations, and product decisions.
11. Transparent policy versioning and changelog. Every update to this Privacy Policy receives a version number. Current and previous versions are archived, and material changes are accompanied by a changelog.
12. No AI use. Patravo does not use AI features or AI providers, and Patravo will not use organization data, messages, files, photos, videos, or other customer content to train AI models.

Patravo is operated by:

Venlorin LLC
522 W Riverside Ave Ste N
Spokane, WA 99201
United States

Website: https://patravo.com
Privacy: privacy@patravo.com
Security: security@patravo.com
Support: support@patravo.com

In this Privacy Policy, “Patravo,” “we,” “us,” and “our” mean Venlorin LLC when operating Patravo.

This Privacy Policy applies to:

• https://patravo.com
• The Patravo web app
• The Patravo iOS app
• The Patravo Android app
• Patravo support communications
• Patravo emails, push notifications, and service notices
• Related Patravo services that link to this Privacy Policy

This Privacy Policy does not apply to third-party websites, services, app stores, payment providers, login providers, or integrations that have their own privacy policies. For example, if you sign in with Google, Apple, or Facebook, that provider’s own privacy policy also applies to its processing of your information.

Patravo is used by youth-serving organizations and the people connected to them. Users may include:

• Youth members, such as youth participants, students, team members, or other youth involved in an organization.
• Parents and guardians, who may receive communications, approve participation, manage youth-related information, and view information connected to their youth members.
• Adult leaders, such as scoutmasters, assistant leaders, coaches, mentors, program leaders, or other trusted adults.
• Volunteers, such as committee members, event helpers, drivers, activity coordinators, or parent volunteers.
• Organization administrators, who manage settings, membership, permissions, groups, events, files, and safety controls.
• Organization owners, who have primary responsibility for an organization’s Patravo workspace.
• Website visitors, who visit public Patravo pages or public organization websites powered by Patravo.
• Support contacts, who contact Patravo for help, questions, privacy requests, or security concerns.

Patravo is designed to help organizations support recognized youth protection and safeguarding practices, including principles used by Scouting America and other youth-serving organizations. Patravo is independent and is not affiliated with, endorsed by, sponsored by, approved by, or operated by Scouting America, Boy Scouts of America, any council, district, or chartered organization.

The information Patravo collects depends on how the service is used, what features an organization enables, and what information users or organizations choose to provide.

6.1 Account Information

When a user creates or uses an account, Patravo may collect:

• Name
• Display name
• Email address
• Phone number
• Profile photo or avatar
• Authentication identifiers
• Login provider
• Account settings
• Notification preferences
• Role, permission, and organization membership information
• Device or session information needed to keep the account secure

We use account information to create accounts, authenticate users, connect users to organizations, enforce permissions, send service notices, and protect the service.

6.2 Youth Member Information

Patravo may process information about youth members, such as:

• Name or display name
• Age group or youth/adult status
• Parent or guardian relationships
• Organization membership
• Patrol, group, den, team, committee, or subgroup membership
• Role or position within the organization
• Event participation
• RSVP and attendance records
• Permissions and consent records
• Profile photo or avatar, if provided
• Communications and content created by or about the youth member, depending on organization settings

Patravo supports privacy-preserving display options. For example, organizations may be able to limit how youth names appear in certain places, use display names where appropriate, restrict visibility by role, and control whether photos or identifying information may be shared publicly.

Patravo does not knowingly collect more youth information than needed to provide the service, support safety, and help the organization manage its activities.

6.3 Parent and Guardian Information

Patravo may collect information about parents and guardians, such as:

• Name
• Email address
• Phone number
• Relationship to a youth member
• Linked youth members
• Approvals and consent records
• Emergency contact details, if enabled by the organization
• Communication and notification preferences
• Support requests or messages sent to Patravo or the organization

We use this information to support parent and guardian visibility, approvals, communications, safety workflows, and youth-related account controls.

6.4 Organization Information

Organizations may provide or create information such as:

• Organization name
• Unit, troop, group, team, club, or program details
• Membership roster
• Groups, patrols, committees, teams, or subgroups
• Leadership roles and volunteer assignments
• Events and activities
• Attendance records
• Files and media
• Settings and permissions
• Consent records
• Audit logs and administrative history
• Organization communications

Organization information is controlled by the organization’s permissions, roles, and settings.

6.5 Communications

Patravo may process communications created or sent through the service, including:

• Announcements
• Chat messages
• Group messages
• Replies
• Comments
• Event discussions
• Moderation reports
• Safety reports
• Message metadata, such as sender, recipient group, date, time, delivery status, and related event or group

Communications are not public by default. Visibility is controlled by organization permissions, role, group membership, guardian relationship, youth-protection settings, and organization configuration.

Youth information is visible only to authorized users based on role, group, guardian relationship, and organization settings.

6.6 Events and Attendance

Patravo may process event-related information, such as:

• Event name
• Event description
• Date, time, and location
• RSVP status
• Attendance records
• Parent or guardian approvals
• Transportation information, if enabled
• Permission information, if enabled
• Event-related files, comments, photos, or messages
• Event organizer and participant information

Organizations use this information to plan activities, communicate with families, track participation, and support safety and accountability.

6.7 Photos, Videos, and Files

Patravo may process uploaded content, such as:

• Photos
• Videos
• File attachments
• Captions
• Thumbnails
• Folder or album organization
• Metadata needed to store, display, organize, secure, and deliver media
• Consent or sharing permissions, where applicable
• Public-sharing status, where enabled by the organization

Patravo does not use photos, videos, or files for advertising. Patravo does not sell media. Patravo does not use customer media to train AI models.

Public sharing should be controlled by organization permissions and parent or guardian consent where required.

6.8 Payment Information

If Patravo uses Stripe or another payment processor, payment information is handled by that payment processor.

Patravo may receive limited billing and transaction information, such as:

• Billing contact name
• Billing email
• Organization name
• Plan type
• Subscription status
• Payment amount
• Payment status
• Invoice or receipt information
• Limited payment method details, such as card brand and last four digits, if provided by the payment processor

Patravo does not store full credit card numbers unless we clearly state otherwise in a future version of this Privacy Policy.

6.9 Device, Log, and Security Information

When users access Patravo, we may collect information needed to operate, troubleshoot, and secure the service, such as:

• IP address
• Device type
• Browser
• Operating system
• App version
• Crash logs
• Diagnostic logs
• Security logs
• Approximate location derived from IP address
• Push notification token
• Session identifiers
• Sign-in and authentication events
• Error reports
• Usage information needed for reliability, abuse prevention, and product operation

Patravo does not collect precise GPS location unless a specific feature requires it, the feature is enabled, and the user grants permission.

6.10 Cookies and Local Storage

Patravo uses cookies, local storage, and similar technologies only for:

• Sign-in
• Authentication
• Session security
• Remembering preferences
• Fraud prevention
• App functionality
• Load balancing
• Reliability
• Security monitoring

Patravo does not use:

• Advertising cookies
• Marketing pixels
• Meta Pixel
• TikTok Pixel
• Google Ads remarketing tags
• Cross-site behavioral tracking
• Browser fingerprinting for advertising
• Third-party ad network tracking

For more information, see our Cookie Notice when available at https://patravo.com/trust/cookies.

Patravo does not:

• Sell personal information
• Rent personal information
• License personal information
• Broker personal information
• Trade personal information
• Display advertisements in the product
• Use personal information for targeted advertising
• Allow third-party ad networks in the product
• Use youth information for marketing
• Use ad or marketing pixels
• Track users across unrelated websites
• Build advertising profiles
• Use customer content to train AI models
• Knowingly collect more youth information than needed to provide and protect the service
• Convert organization data into advertising or data-broker inventory

Patravo is not an advertising platform. Patravo is a private organization platform for communication, events, media, records, and youth-serving group coordination.

Patravo uses information to provide, protect, and improve the service.

We may use information to:

• Provide and operate Patravo
• Create and manage accounts
• Authenticate users
• Manage organization membership
• Support parent and guardian relationships
• Support youth-protection features
• Enforce role-based permissions
• Provide group communication
• Manage events and attendance
• Store and display files, photos, and videos
• Send service notifications
• Send event reminders
• Send safety, security, and account notices
• Provide customer support
• Secure the service
• Detect abuse, fraud, spam, or safety issues
• Investigate security incidents
• Troubleshoot errors and improve reliability
• Maintain audit logs and administrative records
• Process payments and subscriptions
• Comply with law
• Enforce terms, policies, and safety rules

Patravo may send optional product updates or startup/customer communications to adult users or organization contacts. Users can opt out of non-essential communications. Patravo does not use youth information for marketing, advertising, or behavioral profiling.

Patravo is designed for youth-serving organizations and vulnerable groups.

Patravo provides tools intended to help organizations support recognized youth protection and safeguarding practices, including principles used by Scouting America and other youth-serving organizations. These tools are meant to support, not replace, an organization’s own policies, training, supervision, and legal responsibilities.

Patravo’s youth-safety design is based on the following principles:

9.1 No Secret Spaces

Patravo is designed to avoid hidden or unsupervised communication spaces where youth-protection settings apply. Organizations can configure communication areas so that appropriate adults, administrators, moderators, and guardians have visibility consistent with organization policy.

9.2 Organization Oversight

Organizations can assign adult leaders, administrators, moderators, and owners to manage users, groups, events, content, permissions, and safety settings.

9.3 Parent and Guardian Involvement

Patravo supports parent and guardian relationships so that families can receive communications, manage approvals, and have visibility into youth-related information where appropriate.

9.4 Role-Based Access

Access to information is based on role, group membership, guardian relationship, event participation, and organization settings. A youth member, parent, patrol leader, adult leader, committee member, and organization administrator may see different information depending on the organization’s configuration.

9.5 Auditability

Patravo may maintain logs of important administrative, security, and safety-related actions. These records can help organizations review changes, investigate issues, and support accountability.

9.6 Reporting and Moderation

Patravo may provide tools for reporting, reviewing, moderating, restricting, or removing content or users when needed for safety, policy compliance, or legal reasons.

9.7 Communication Controls

Patravo’s communication controls are designed to support youth-protection principles such as adult oversight and two-deep leadership. Where youth-protection settings apply, Patravo is designed to prevent unsupervised adult-to-youth private communication and to support appropriate visibility for authorized adults and guardians.

9.8 Youth Privacy in Media and Sensitive Contexts

Photos, videos, names, attendance, event participation, and other youth-related information can be sensitive. Patravo is designed to give organizations controls over who can see, upload, moderate, approve, or publish this information.

Youth photos, videos, names, or identifying details should only be shared publicly when the organization has appropriate permission and when sharing is consistent with the organization’s policies and applicable law.

9.9 Organization Responsibility

Patravo provides tools to support youth protection. Organizations remain responsible for:

• Their own youth protection policies
• Adult screening and training
• Supervision
• Event safety
• Compliance with Scouting America or other governing-body requirements, if applicable
• Mandatory reporting obligations
• Emergency action
• Legal compliance
• Proper use of Patravo settings

Patravo is not a substitute for mandatory reporting, emergency services, law enforcement, child protective services, medical care, or trained in-person supervision.

If there is an emergency or immediate risk of harm, contact emergency services or the appropriate authorities.

Patravo shares information only in the limited ways described below.

10.1 With the User’s Organization

Information may be visible to or shared with the user’s organization, such as:

• Organization owners
• Organization administrators
• Adult leaders
• Authorized volunteers
• Moderators
• Parents and guardians
• Youth members in appropriate groups
• Event organizers
• Group members

Visibility depends on role, permissions, group membership, guardian relationship, event participation, youth-protection settings, and organization configuration.

Examples:

• A group member may see messages in a group they belong to.
• A parent or guardian may see information for their linked youth member.
• An adult leader may see RSVP and attendance records for an event they manage.
• An organization administrator may see roster, permission, and audit information needed to operate the organization.
• A youth member may see information appropriate for their group, event, or role.

10.2 With Other Authorized Users

Patravo may make information visible to other authorized users when needed to provide the service.

Examples:

• Event participants may see event details.
• Group members may see group messages.
• Leaders may see attendance and RSVP records.
• Guardians may see youth-related information for linked youth.
• Authorized moderators may see reports or content requiring review.

Patravo does not make private organization workspaces public by default.

10.3 With Service Providers and Subprocessors

Patravo uses service providers and subprocessors to operate the service. These providers may help with:

• Hosting
• Database services
• Authentication
• Cloud storage
• Email delivery
• Push notifications
• Payment processing
• Customer support
• Security monitoring
• Error logging
• Product reliability analytics
• Backup and infrastructure services

Service providers may use personal information only to provide services to Patravo. They are not allowed to use Patravo personal information for their own advertising, marketing, data-brokerage, or unrelated purposes.

Patravo’s subprocessor list is available at:

https://patravo.com/trust/subprocessors

10.4 For Legal and Safety Reasons

Patravo may disclose information when reasonably necessary to:

• Comply with law
• Respond to valid legal process
• Protect youth or vulnerable users
• Investigate abuse, fraud, spam, or safety incidents
• Investigate security incidents
• Enforce Patravo’s terms, policies, or safety rules
• Protect the rights, safety, and property of users, organizations, Patravo, Venlorin LLC, or others
• Prevent harm

When possible and legally permitted, Patravo will try to limit disclosures to the information reasonably necessary.

10.5 Business Transfers

If Venlorin LLC is involved in a merger, acquisition, financing, restructuring, bankruptcy, or sale of assets, Patravo may transfer information as part of that transaction.

However, any successor must honor the privacy commitments in this Privacy Policy or provide notice and meaningful choices before materially different practices apply.

Under no circumstances may a business transfer convert Patravo data into advertising inventory, data-broker inventory, or cross-site behavioral advertising data.

Organization data belongs to the organization.

Patravo will not hold organization data hostage.

Organizations can import data into Patravo, export data from Patravo in a reasonably usable format, and request deletion of organization data, subject to legal, safety, security, backup, dispute-resolution, and legitimate recordkeeping limits.

Exportable organization data may include, where technically and legally practical:

• Members
• Parents and guardians
• Groups
• Patrols
• Roles
• Permissions
• Events
• RSVP records
• Attendance records
• Files
• Photos
• Videos
• Messages
• Announcements
• Settings
• Audit or history records, where appropriate

Individuals can request access, correction, deletion, or export of personal information.

Some records may need to be retained for safety, audit, legal, security, backup, billing, or organization recordkeeping reasons. For example, an organization may need to retain event attendance records, consent records, safety-related reports, payment records, or administrative audit logs.

Deleted data may remain in backups for a limited period before being purged through normal backup cycles.

Data requests can be submitted at:

https://patravo.com/data-request

or by emailing:

privacy@patravo.com

Patravo retains information only as long as reasonably needed for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention depends on the type of information, organization settings, legal requirements, safety needs, and product configuration.

Our retention principles include:

• Active account data is retained while the account is active.
• Organization data is retained while the organization uses Patravo.
• Archived records may be retained based on organization settings.
• Chat and message data may have configurable retention periods.
• Files and media may be retained based on organization settings and storage limits.
• Security logs are retained for a limited period.
• Support records may be retained as needed to resolve issues and maintain service history.
• Payment, tax, accounting, and subscription records are retained as legally required.
• Backups are retained for a limited period and then purged through normal backup cycles.

Organizations should configure retention settings in a way that matches their youth-protection, legal, operational, and recordkeeping needs.

Security is a core product requirement for Patravo.

Patravo uses administrative, technical, and organizational safeguards designed to protect information. These may include:

• Encryption in transit
• Encryption at rest where appropriate
• Role-based access controls
• Least-privilege internal access
• Secure authentication
• Multi-factor authentication support or requirements for administrators, where available
• Audit logs for administrative actions
• Monitoring and logging
• Backups and recovery procedures
• Secure software development practices
• Dependency updates
• Incident response procedures
• Vendor and subprocessor review
• Restricted internal access to customer data
• Device and session controls where available
• Security-focused review of youth-facing and youth-related features

Patravo limits internal access to personal information to personnel and service providers who need access to operate, support, secure, or improve the service.

No system is 100% secure. Users should protect their accounts, passwords, devices, and email accounts. Organization administrators should use strong authentication practices and carefully manage roles and permissions.

Security concerns should be sent to:

security@patravo.com

Patravo may allow users to sign in with third-party providers such as Google, Apple, Facebook, or other authentication services.

If a user signs in with a third-party provider, Patravo may receive basic profile information needed for authentication, such as:

• Name
• Email address
• Account identifier
• Profile photo, if provided by the login provider
• Authentication status

Patravo does not receive the user’s password from the third-party login provider.

The provider’s own privacy policy applies to the provider’s processing of information.

Patravo may also support integrations such as:

• Calendars
• File storage
• Email
• Push notifications
• Payment processing
• Authentication
• Public website publishing
• Other organization tools

Organizations control which integrations they enable where applicable. Some integrations may require sharing limited information with the integration provider so the requested feature can work.

Patravo may send:

• Service notifications
• Event reminders
• Safety notices
• Security notices
• Account notices
• Organization communications
• Administrative messages
• Support responses
• Optional product updates for adult users or organization contacts

Users can manage notification preferences where available. Some administrative, security, legal, safety, or account notices may be required and may not be fully disabled while the account is active.

Patravo uses Resend for email delivery.

Email and push notification providers process limited information needed to deliver messages, such as contact information, message content, delivery status, device tokens, and related metadata.

Patravo does not use email or push notification data for advertising.

Patravo may support public websites for organizations, such as public troop, unit, group, team, or club pages.

Public pages are separate from private organization workspaces.

Organizations control what is published publicly. Public content may include information such as organization descriptions, event summaries, public announcements, photos, contact forms, newsletters, or recruiting information, depending on organization settings.

Youth photos, youth names, and identifying information should only be published with appropriate permission and in accordance with the organization’s policies and applicable law.

Patravo provides controls intended to limit public sharing and help organizations remove or update public content.

Patravo is not responsible for information an organization intentionally publishes publicly, but Patravo will provide tools to remove or update content where available.

Depending on where you live, your role, your relationship to an organization, and applicable law, you may have rights to:

• Access personal information
• Correct inaccurate personal information
• Delete personal information
• Export personal information
• Restrict or object to certain processing
• Withdraw consent where processing is based on consent
• Manage notification preferences
• Terminate an account
• Use an authorized agent to submit a request where allowed by law
• Appeal certain privacy-rights decisions where required by law

Parents and guardians may submit requests related to their linked youth members, subject to verification and any legal, safety, security, or organization recordkeeping limits.

Organizations may submit requests related to organization data through an authorized organization owner or administrator.

Privacy requests can be submitted at:

https://patravo.com/data-request

or by emailing:

privacy@patravo.com

We may need to verify your identity, authority, guardian relationship, or organization role before completing a request.

Some U.S. state privacy laws provide additional rights for residents of those states.

Patravo does not sell personal information. Patravo does not share personal information for cross-context behavioral advertising. Patravo does not use personal information for targeted advertising. Patravo does not knowingly sell or share personal information of youth users.

The table below describes categories of personal information Patravo may collect, depending on how the service is used.

Patravo does not use sensitive personal information to infer characteristics, target advertising, or build advertising profiles.

To exercise privacy rights, submit a request at:

https://patravo.com/data-request

or email:

privacy@patravo.com

If your request is denied in whole or in part, you may appeal by replying to the decision email or by submitting a new request marked “Privacy Appeal.”

Patravo is operated from the United States.

If you access Patravo from outside the United States, your information may be processed in the United States and other countries where Patravo or its service providers operate. These countries may have data protection laws different from those in your location.

If Patravo serves users in the European Economic Area, the United Kingdom, Switzerland, or other regions with similar privacy laws, users may have additional rights, such as the right to access, correct, delete, restrict, object to processing, receive a copy of data, or lodge a complaint with a supervisory authority.

Where applicable, Patravo’s legal bases for processing may include:

• Providing the service
• Performing a contract
• Legitimate interests, such as security, reliability, abuse prevention, and service improvement
• Compliance with law
• Consent, where required

Patravo will provide additional regional privacy terms if required.

Patravo does not use cross-site advertising tracking.

Patravo does not currently respond to browser “Do Not Track” signals because there is no uniform standard for those signals.

Where legally required, Patravo will honor recognized opt-out preference signals such as Global Privacy Control for activities covered by those laws.

Because Patravo does not sell personal information, share personal information for cross-context behavioral advertising, or use personal information for targeted advertising, such signals should not change ordinary service functionality.

Patravo’s iOS and Android app privacy disclosures must match the actual behavior of the apps and the third-party SDKs included in them.

Depending on enabled features, Patravo may disclose collection of categories such as:

• Contact information
• User identifiers
• User content
• Photos and videos
• Messages or communications
• Files
• App activity needed for functionality, security, or diagnostics
• Diagnostics and crash data
• Approximate location from IP address
• Payment or purchase information if subscriptions are used

Patravo does not use app data for third-party advertising, targeted advertising, or cross-site tracking.

If Patravo adds or removes SDKs, permissions, tracking behavior, analytics, or data collection practices, Patravo will update the relevant app-store disclosures and this Privacy Policy as needed.

Patravo is committed to transparent policy updates.

Every update to this Privacy Policy receives a version number. Current and previous versions remain available at:

https://patravo.com/trust/privacy/versions

Material changes include a changelog at:

https://patravo.com/trust/privacy/changelog

Material changes may be announced by email, in-app notice, or website notice.

If a change materially reduces privacy protections, Patravo will provide advance notice where practical.

For privacy questions, data requests, security concerns, or support, contact:

Venlorin LLC
522 W Riverside Ave Ste N
Spokane, WA 99201
United States

Website: https://patravo.com
Privacy: privacy@patravo.com
Security: security@patravo.com
Support: support@patravo.com

Please include enough information for us to understand and verify your request. For requests involving youth members, we may need to verify your parent, guardian, or authorized organization role before providing access, correction, export, or deletion.