THE MCA ROOM
Privacy Policy
Effective July 14, 2026
1. Scope
This policy explains how The MCA Room handles personal information in its mobile app, legal website, community, directory, messaging, moderation, and support services. The MCA Room is an independent professional community, not a lender, broker, credit bureau, or merchant underwriting service.
2. Information you provide
We collect account details such as email, Firebase user ID, verification and session information; profile details such as display name, avatar emoji, role, bio, follows, blocks, and preferences; posts, replies, photos, votes, reports, messages, and moderation details; directory nominations, company contacts, representative claims and private verification notes; and communications with support. Firebase Authentication handles password credentials; The MCA Room does not receive a readable password.
3. Information collected automatically
Our providers may process IP addresses, user-agent and device details, operating system and app version, Firebase installation identifiers, authentication and security events, timestamps, service logs, and push tokens. The current app does not use third-party advertising SDKs, Firebase Analytics, advertising identifiers, or tracking across other companies’ apps or websites.
4. How information is used
We use information to create and secure accounts; operate profiles, forums, photos, votes, follows, messages, notifications, and the directory; review nominations and claims; moderate content and prevent abuse; respond to requests; maintain reliability; improve functionality; comply with law; and protect members and the service.
5. Visibility
Public forum posts, replies, attached photos, display names, avatars, roles, and scores may be visible to anyone, including visitors without an account. Profile biographies, follower relationships, selected activity, and approved directory contacts are limited to verified members. Your account email is not public. Messages are visible to participants. Reported information may be reviewed by authorized moderators; private nominations, claims, and admin notes are not public.
6. Providers and disclosures
We use Google Firebase and Google Cloud for authentication, databases, photos, server functions, security, and cloud messaging, and Apple Push Notification service for iPhone alerts. We may disclose information when required by law, to protect safety and rights, investigate abuse, complete a business transaction, or at your direction. We do not sell personal information or share it for targeted advertising.
7. Push notifications
With permission, we associate a Firebase Cloud Messaging token and device identifier with your account to send follow, message, and upvote alerts. You can control categories in the app and disable alerts in iPhone Settings. Signing out removes the current device token from the account.
8. Retention and deletion
We generally retain information while your account is active and as needed to provide the service. Reports, safety records, logs, and limited evidence may be retained when needed for law, safety, disputes, or enforcement. You can permanently delete your account in Profile settings; this removes associated account and community data from The MCA Room’s active systems, subject to legal and safety exceptions. Public business-directory information may remain, but personal representative details can be corrected or removed by contacting us. Provider backups and security logs may persist temporarily; Firebase states authentication data is removed from live and backup systems within 180 days after user deletion.
9. Your choices and rights
You may update your profile, control push categories, block members, remove content where available, sign out, or delete your account. Email support@mcaworld.net to request access, correction, deletion, or a copy of personal information or to raise a privacy concern. Depending on your location, additional privacy rights may apply. We may verify your identity and will not discriminate for exercising applicable rights.
10. Security and processing
We use safeguards including verification, access controls, Firebase security rules, encrypted transport and provider storage, reporting, blocking, and restricted administrative review. No system is completely secure. Information may be processed in the United States and other locations where our providers operate.
11. Children
The MCA Room is for adults age 18 and older and is not directed to children under 13. We do not knowingly collect children’s personal information. Contact us if you believe a child has provided information.
12. Changes and contact
We may update this policy as the service, providers, or law changes and will update the effective date and provide additional notice when reasonably appropriate. For privacy requests, account or directory corrections, and deletion assistance, contact support@mcaworld.net.