Legal
Privacy Policy
Effective date: September 3, 2026
1. Who we are
Augusta Locally Grown, Inc. (“ALG”, “we”, “us”, “our”) is a nonprofit organization based in Augusta, Georgia, United States. Our mailing address is P.O. Box 31063, Augusta, GA 30901. You can reach us about privacy at community@augustalocallygrown.org.
This policy explains what personal information we collect, why we collect it, who we share it with, and what choices you have.
2. The Services this policy covers
“Services” means all four of the following properties, together:
Main site — augustalocallygrown.org — Our public marketing and donation site.
CropSwap — our online market, at the web address we publish on augustalocallygrown.org — Our online farmers-market storefront.
Classes — classes.augustalocallygrown.org — Year-round class registration.
Homegrown — homegrown.augustalocallygrown.org — The class picker for the Homegrown Augusta event.
Other companies have their own websites, their own privacy policies, and their own responsibilities. This policy does not cover them. The main ones are TicketStripe, Donorbox, Stripe, and Instagram.
“Personal information” means information that identifies you or can reasonably be linked to you.
3. Information we collect
3.1 Main site
Email address — Newsletter signup in the footer — Email only. Nothing else is required.
Donation details: name, email, mailing address, payment card data — The Donorbox widget on our donation page — Donorbox and its payment processor collect and store this. ALG does not store your card data. We receive donor name, email, and donation amount from Donorbox so we can thank you and keep our financial records.
Basic technical data: IP address, browser type, pages viewed — Your browser, automatically — See section 6 on cookies and analytics.
We link to our Instagram page. We do not embed Instagram content, so Instagram does not receive data about you until you follow the link.
3.2 CropSwap
Email address, password (stored as a hash, never in readable form) — To create and secure your account
Name, phone number — To identify your order and contact you about it
Billing address, pickup site choice, delivery address — To fulfil your order
Profile photo (avatar), if you add one — To personalize your account
Order history, order notes, favorites — To run the market and show you your past orders
Shopping cart contents, including carts you leave without checking out — To hold your cart, and to send reminder emails about items still in it
Notification and email preferences — To respect your choices
Stripe customer ID and payment intent IDs — To take payment, capture it, and issue refunds
Contact-form submissions: name, email, subject, message — To answer you
Google account name and email, if you choose Google sign-in — To sign you in
If you sell on CropSwap as a producer, we also hold your farm profile: farm name, your story, photos, links, and your product listings. That content is public on CropSwap once it is approved.
Staff, managers, admins, site managers, and drivers have accounts with a name, email, and password hash, plus a record of the actions they take in the system.
3.3 Classes
Customers do not create accounts. You pay through Stripe Checkout and manage your registration through a secure link we email you.
Purchaser name and email — To sell you the registration and send the confirmation and management link
For each attendee (up to ten per order): name, email, phone — To build the class roster and contact attendees
For each attendee: accessibility notes, if you give them — To accommodate that attendee in that class
Order and payment records, including Stripe identifiers and refund status — To take payment, issue refunds, and keep financial records
Attendance and no-show status — To run the class and plan future classes
Accessibility notes may include health information. We treat them as sensitive. We use them only to accommodate the attendee named on the registration. We share them only with the ALG staff and instructors who need them to provide that accommodation. You never have to give them.
Staff have accounts with the roles administrator, manager, instructor, or viewer. The system keeps an audit log of staff actions. Staff can export a class roster as a CSV file to run the class.
3.4 Homegrown
Tickets for Homegrown Augusta are sold by TicketStripe at https://ticketstripe.com/Homegrown2026, under TicketStripe’s own terms and privacy policy. Our app takes no payment and never sees your card data.
The full sale notification email TicketStripe sends us — purchaser name, attendee name, attendee email, ticket type, and whether the farm tour was prepaid — To know who holds a valid ticket and what it includes
Your ticket code, held in a sign-in cookie — To keep you signed in while you pick sessions
Your full name and email, as you enter them in the app — To confirm your identity and email your itinerary
The sessions you pick — To build your itinerary and manage session capacity
Staff share a single password to reach the staff view.
4. How we use information
We use personal information to:
Run the Services and give you what you asked for — an order, a registration, an itinerary, a donation receipt.
Take payment, capture it, and issue refunds.
Contact you about your order, registration, or ticket. These are transactional emails. You cannot unsubscribe from them while an order or registration is active.
Send newsletters and promotional email, if you asked for them. You can unsubscribe at any time.
Send reminder emails about a cart you left on CropSwap.
Accommodate accessibility needs you tell us about.
Keep our records, meet our legal and tax obligations, and produce aggregate reports about our programs.
Keep the Services secure, prevent fraud and abuse, and fix problems.
We do not sell personal information
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not rent or trade our mailing list.
5. Who we share information with
5.1 Service providers
We use other companies to run the Services. They may only use your information to do work for us.
Stripe — Payment processing, refunds, payment holds — CropSwap, Classes
Donorbox — Donation form and donation processing — Main site
TicketStripe — Ticket sales for Homegrown — Homegrown
Resend — Inbound ticket-notification email and outbound itinerary email — Homegrown
Amazon Simple Email Service (SES) — Outbound email — Classes
Mailchimp and Mandrill (Intuit) — Newsletter and marketing email, and CropSwap transactional and promotional email — Main site, CropSwap
Railway — Application hosting and databases — CropSwap, Classes, Homegrown
Framer — Website hosting — Main site
Google — Optional Google sign-in — CropSwap
5.2 Producers and drivers on CropSwap
To fill your order, we share only what is needed:
Producers receive your name and the details of the items you ordered from them.
Drivers receive the delivery address, your name, and the contact information needed to make the delivery.
Producers and drivers may not use that information for any other purpose.
5.3 Other sharing
We may share information when the law requires it, to respond to lawful requests, to protect the safety or rights of any person, or in connection with a merger, dissolution, or transfer of our programs. We will not use such a transfer to defeat the promises in this policy.
6. Cookies and similar technologies
Session cookies. CropSwap uses a sign-in session cookie (NextAuth). Homegrown uses a session cookie holding your ticket code. Classes uses a cookie for staff sign-in. These are necessary. The Services will not work without them.
Payment and donation providers. Stripe and Donorbox set their own cookies on their checkout and donation forms, including cookies used to detect fraud.
Framer. Our main site is hosted by Framer, which may set cookies needed to serve the site.
Analytics. We may use Google Analytics or a similar analytics service on any of the Services, to understand how people use them. If we do, the analytics provider receives your IP address, the pages you view, and similar technical data. It may set cookies for that purpose.
You can block or delete cookies in your browser settings. If you block necessary cookies, you will not be able to sign in or check out. Most browsers also send a Global Privacy Control or “Do Not Track” signal; where the law requires us to honor a Global Privacy Control signal, we do.
7. How long we keep information
We keep personal information only as long as we need it.
Financial and donation records are kept as long as tax law and our accounting obligations require — generally at least seven years.
Order, registration, and attendance records are kept for three years after the order, class, or event so we can answer questions and report on our programs.
Class management links expire one year after the registration is created.
Marketing email addresses are kept until you unsubscribe.
Abandoned cart data is kept for 90 days.
Staff audit logs are kept for two years.
When we no longer need information, we delete it or remove what identifies you.
8. Security
We take reasonable measures to protect personal information. Passwords are stored as hashes. Payment card data is handled by Stripe, Donorbox, and TicketStripe, not by us. Access to personal information is limited to staff and volunteers who need it.
No system is perfectly secure. We cannot guarantee the security of any information you send us.
9. Children
The Services are intended for adults 18 years of age or older. Only an adult may buy, register, or donate.
A parent or legal guardian registers a minor for a class or an event, and gives us the minor’s information for that purpose. We use it only to run the class or event and to keep the child safe.
We do not knowingly collect personal information directly from children under 13. If you believe a child under 13 has given us information directly, email community@augustalocallygrown.org and we will delete it.
10. Your choices and your rights
Unsubscribe. Every marketing email has an unsubscribe link. You can also email us. Transactional messages about an active order continue.
Access and correction. Email community@augustalocallygrown.org to ask what we hold about you, or to correct it. CropSwap account holders can edit most of their details in the account settings. Class customers can correct attendee contact details through their management link.
Deletion. CropSwap has no self-service account deletion. Email community@augustalocallygrown.org and we will delete your account and personal information, except records we must keep for financial, tax, or legal reasons.
Cookies. Control them in your browser, as described in section 6.
We will not treat you differently for exercising any of these choices. We may ask you to confirm your identity before we act on a request, so that we do not give your information to someone else.
11. Where we operate, and state privacy rights
ALG is in Georgia and serves the Augusta area. We store and process information in the United States.
Some states — California, Colorado, Connecticut, Virginia, Texas, and others — give their residents rights over their personal information, such as the right to know, to correct, to delete, to receive a copy, and to opt out of sale or targeted advertising. We do not sell personal information and we do not use it for targeted advertising. ALG is a small nonprofit and many of these laws do not apply to us by their own terms. Even so, we will honor a request to access, correct, or delete your information from a resident of any state. Email community@augustalocallygrown.org. If we deny a request, we will tell you why, and you may ask us to reconsider by replying to that message.
12. Changes to this policy
We may update this policy. We will change the effective date at the top and post the new version on the Services. If the change is significant, we will tell you by email or with a notice on the Services.
13. Contact us
Augusta Locally Grown, Inc. P.O. Box 31063, Augusta, GA 30901 Email: community@augustalocallygrown.org Phone: 706-701-2834