Privacy/Data/AI Policies - Michigan United

개인정보/데이터/AI 정책

Our Promise to You

Michigan United and Michigan United Action respect your privacy and your rights. This page explains what we collect, why we collect it, and how you can stay in control.

What We Collect

Things you tell us (name, email, phone, payment info).
Things your device tells us (IP address, browser, cookies).
Optional details you share (such as race or political views) to help us measure fairness in our work.

How We Use It

We use your info to run our website, send updates you ask for, improve our programs, and report on impact. We don’t sell your information. We share only with companies that help us send emails, analyze traffic, or process donations — and they must keep it safe.

Your Choices

You can see, fix, or delete your info by emailing webmaster@miunited.org.
You can unsubscribe any time or change cookie settings in your browser.
If you live in Europe, you can ask for a copy of your data or move it to another service.

Data Protection

We use secure servers, strong encryption, and staff training. If something goes wrong, we will let you know as soon as possible.

Cookies

Cookies help the site work and help us understand what content matters to you. You can turn them off or limit them in your browser.

SMS Texts

By signing up for membership, engagement or texts, you agree to get occasional updates and alerts from us. Text STOP to end. We don’t share or sell your number.

AI Tools

Our AI chatbots give general information, not legal advice. They don’t store personal details. We regularly check for bias and make sure you can reach a human if you need to.

Contact: webmaster@miunited.org | 877-507-7774

1. Privacy and Data Protection Policy

Effective October 20, 2025 | Version 3.0

1.1 Scope

Applies to Michigan United and Michigan United Action digital properties, including websites, email systems, and mobile interfaces.

1.2 Data Processing Principles

Lawfulness, Fairness & Transparency (Art. 5 GDPR).
Purpose Limitation – Data used only for defined purposes.
Data Minimization – Only necessary information is collected.
Accuracy – Users may request correction at any time.
Storage Limitation – Retention period policy maintained (3 years post-interaction unless required longer).
Integrity & Confidentiality – Security measures as below.

1.3 Data Categories and Legal Bases

Category	Example	Purpose	Legal Basis
Identifiers	Name, email	Service delivery	Contract
Demographics	Race, religion	Equity analysis	Explicit consent
Technical Data	IP, browser	Analytics	Legitimate interest
Financial Data	Card details	Donations	Contract / Legal obligation

1.4 Third-Party Processing

Processors include EveryAction (email), Stripe (payment), Google Analytics, and Impactive (SMS). Each is bound by Data Processing Agreements requiring compliance with GDPR and U.S. laws.

1.5 Cross-Border Transfer

All transfers to U.S. servers use EU Standard Contractual Clauses (SCCs) or equivalent safeguards.

1.6 Security and Breach Notification

Encryption (AES-256/TLS 1.2+), multi-factor authentication, annual audits, and 72-hour breach notification to regulators and users.

1.7 User Rights

Access, rectification, erasure, restriction, objection, portability, and withdrawal of consent available through webmaster@miunited.org. Complaints may be filed with the Michigan Attorney General or relevant EU authority.

2. SMS Privacy and Consent Policy

Effective October 20, 2025

2.1 Consent Requirements

We comply with the Telephone Consumer Protection Act (TCPA) and CTIA guidelines. Opt-in consent is collected via web form or text confirmation.

2.2 Data Use and Retention

Phone numbers used solely for communications authorized by the subscriber. Data deleted within 30 days after opt-out.

2.3 Opt-Out Process

Text STOP to any message to unsubscribe. We send a final confirmation text and cease messaging immediately. You may also email support@miunited.org.

3. Artificial Intelligence Governance Policy

Effective October 20, 2025

3.1 Purpose and Scope

Applies to all AI systems used by Michigan United and Michigan United Action, including chatbots, language models, and predictive tools.

3.2 Governance Framework

Accountability: AI Ethics Committee oversees development and use.
Transparency: AI interactions are clearly disclosed to users.
Fairness & Bias Audits: Annual audits on representative datasets.
Human Oversight: Critical outputs reviewed by staff.
Explainability: Users may request a plain-language summary of AI logic.
Data Protection: AI systems conform to Privacy Policy standards.
Incident Management: All AI malfunctions logged and investigated within 5 business days.