Board-approved accounts
Anyone may verify an email and request an account, but resident-only information stays unavailable until a board member verifies the household. Each household has one primary contact account.
Privacy by default
RRCA will collect only the information needed for association administration, resident communications, dues records, and features residents explicitly choose to use.
Anyone may verify an email and request an account, but resident-only information stays unavailable until a board member verifies the household. Each household has one primary contact account.
A tenant may become the board-approved primary resident for a rented home. An absentee owner receives access only when the board prepares an invitation, and that limited portal shows assigned property and dues status—not the tenant’s identity, the resident directory, or resident-only content.
RRCA uses single-use email codes that expire after ten minutes. Code requests and attempts are rate-limited, active sessions are protected with secure browser cookies, and access remains subject to board approval.
Firebase Authentication uses the mobile number to deliver a one-time verification code and help prevent abuse. RRCA records when verification succeeds, but verification by itself never enrolls that number in community text messages.
Residents must separately opt in before RRCA may send texts. They can choose event, dues, and critical-alert categories, mute every text in household settings, or use a provider STOP reply after delivery launches. Message frequency varies and message and data rates may apply. A future delivery provider will receive the verified number and message only as needed to deliver texts and process replies or delivery status.
Name, street address, email, phone number, and resident business or skills are each hidden unless the resident deliberately opts to display that specific field. A separate public resident-business sponsor listing also requires documented permission from the business owner.
Board members receive individual administrative accounts. Shared credentials are not permitted, access can be revoked, and important administrative actions are logged.
Stripe processes and retains online payment credentials. RRCA keeps only the minimum reference and reconciliation information needed for dues or sponsorship records. For offline payments, the board may record the amount, date, and check or provider reference—but never card, bank-account, or routing details.
Residents and invited property owners can ask what information RRCA holds, correct their information, withdraw optional communication choices, or request account review by emailing riverrun524@gmail.com.