Log inSign up

Privacy Policy

Effective Date: August 9, 2026

At TrestleBoard, we treat your privacy with the same sacred duty of trust expected within a Lodge. We are committed to protecting the personal data of our Brethren and maintaining strict digital security. This Privacy Policy outlines what information we collect, how it is used, and how your data is safeguarded.

I. Information We Collect

To ensure our network remains a verified, secure environment for Freemasons, we collect the following categories of information:

1. Identity & Verification Data

  • Account Information: Real name, email address, phone number, and password.
  • Masonic Credentials: Grand Lodge jurisdiction, Lodge name and number, current Masonic standing, and member ID or secretary verification status.

2. User-Generated Content & Interaction Data

  • Public & Community Posts: Posts, comments, media uploads, and interactions in group hubs or forums.
  • Direct Messages: Encrypted direct communications between Brethren.
  • Profile Details: Profile photo, biography, Masonic degrees, and designated interests.

3. Technical & Usage Data

  • Access Logs: IP addresses, device types, browser information, and login timestamps to ensure secure account access.
  • Cookies & Tokens: Essential session tokens used solely to keep you securely logged in and maintain site functionality.

II. How We Use Your Information

We use your data strictly to maintain, protect, and improve the digital Lodge experience. We never monetize your personal data.

  • Identity Verification: To verify that members meet the criteria for account access and maintain the integrity of our digital tile.
  • Community Features: To enable direct messaging, group discussions, event organization, and platform navigation.
  • Security & Moderation: To monitor for unauthorized access, protect against cyber threats, and enforce our Community Standards.
  • Platform Communications: To send critical account updates, password resets, and official platform notifications.

III. Data Sharing & Disclosure

We do not sell, rent, trade, or monetize your personal information or platform activity under any circumstances.

1. Limited Disclosure Exceptions

Your information will only be shared under the following conditions:

  • With Your Explicit Consent: For specific integrations or features you voluntarily activate.
  • Platform Administration & Moderation: Authorized moderators ("Digital Tilers") may review reported content to enforce Community Standards.
  • Masonic Disciplinary Inquiries: In cases of severe breaches of conduct involving Grand Lodge jurisdiction inquiries, account verification details may be reviewed by authorized platform administrators.
  • Legal Compliance: Only when explicitly required by a valid, legally binding court order or subpoena.

IV. Data Security & Encryption

We employ robust administrative, technical, and physical safeguards designed to protect your information against unauthorized access, loss, or alteration:

  • Encryption in Transit & at Rest: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols. Sensitive data stored on databases is encrypted at rest.
  • Strict Access Control: Access to back-end administrative tools is restricted to authorized platform personnel on a strict need-to-know basis.
  • Zero Third-Party Ad Trackers: We do not run third-party advertising scripts, pixel trackers, or cross-site data brokers.

V. Account Security & Ban Enforcement

To enforce suspensions and expulsions, TrestleBoard records the IP address associated with account signup and login. If an account is suspended or expelled, its email address and last known IP address are retained on a block list to prevent creating a new account to evade the suspension. This information is used solely for trust and safety enforcement and is removed from the block list if the suspension is lifted.

VI. Data Retention & Account Deletion

1. Data Retention

We retain your personal data only for as long as your account remains active or as necessary to fulfill the purposes outlined in this policy.

2. Account Deletion & Right to Be Forgotten

  • You have the right to request the permanent deletion of your account at any time.
  • Upon deletion, your personal profile, credentials, and private messages are permanently erased from our active databases.
  • Public group posts or comments may be anonymized to maintain the historical context of community discussions.

VII. Your Privacy Rights (GDPR, UK GDPR & Similar Laws)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection laws, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you. You can self-serve this anytime from Help → Download your data.
  • Right to Rectification: Correct inaccurate or incomplete data — most of your profile and account details can be edited directly in Settings.
  • Right to Erasure ("Right to Be Forgotten"): Request permanent deletion of your account and personal data, as described in Section VI above.
  • Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format (JSON) via Help → Download your data.
  • Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
  • Right to Object: Object to processing based on legitimate interest, including optional platform communications.
  • Right to Withdraw Consent: Where processing is based on consent (e.g. optional email notifications in Settings), withdraw it at any time without affecting the lawfulness of processing before withdrawal.
  • Right to Lodge a Complaint: File a complaint with your local data protection supervisory authority if you believe we have not handled your data lawfully.

To exercise any of these rights, contact us as described in Section IX below. We will respond within the timeframe required by applicable law.

Legal Basis for Processing

We process personal data under the following legal bases: performance of a contract (our Terms of Service — account creation and core platform features), consent (optional communications and features you opt into, withdrawable anytime in Settings), and legitimate interest (maintaining a secure, verified community for Freemasons, including fraud prevention, moderation, and account security).

International Data Transfers

Our infrastructure providers may process and store data outside your country of residence, including in the United States. Where this occurs, we rely on the safeguards those providers offer for international data transfers (such as Standard Contractual Clauses, where applicable).

VIII. Children's Privacy & Youth Organization Members

TrestleBoard Point hosts appendant youth organizations (such as Job's Daughters and Rainbow for Girls), so some members are minors. At signup, every member provides their date of birth. If this shows the member is under 16, we require a parent or legal guardian to provide their own name, email address, and explicit consent before the account is created — we do not knowingly create an account for a minor under 16 without that consent. A guardian may contact us at any time (see Section X) to review, correct, or withdraw consent for their child's account, which results in the account's deletion.

IX. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our platform features, security protocols, or legal obligations. When material updates are made, we will notify members via a platform-wide announcement or email notification prior to the changes taking effect.

X. Contacting the Tilers / Platform Administrator

If you have questions, concerns, or a GDPR/CCPA data-subject request (access, correction, or deletion of your data) regarding this Privacy Policy, reach out to our privacy team — see the full Contact page:

  • In-App: Submit a request through the "Contact Administrator" portal.
  • Legal & Privacy Requests: legal@trestleboard.club