SisterLegacy

Security

How the privacy is enforced

Settings in an app are only as good as the rules behind them. Here is what our database rules and servers actually enforce, in plain language.

Each chapter is its own network

Everything a chapter creates (the directory, posts, messages and jobs) lives under that chapter and is readable only by its members. Joining requires a valid invite for that specific chapter, and admins can require approval for new members. Other chapters can't read it, and there is no public directory.

Email and phone live in a private record

Your email and phone are not on your profile. They're stored in a separate record that only you can read until you explicitly share it, by accepting a sister's contact request or an employer's request. Only you can change who it's shared with.

Employers are opt-in

"Show me to verified employers" is off by default. When you turn it on, only companies we've approved by hand and that have an active plan can see your profile card: name, chapter, school, class, position, headline, work, education, skills, city and state. Active members are shown for internships only, until their senior year.

Payments and billing

SisterLegacy is free for chapters and members. Employer plans are bought on this website, and payment details are handled by Stripe. They never touch our servers or the app. Billing status can only be changed by our server, never by an app or a browser.

Moderation

Members can report or block anyone. Reports go to the chapter's admins. Blocking hides that person's content and messages from you. Chapter admins can remove members. Companies that abuse access are suspended.

Where data is stored

Data is stored with Amazon Web Services (DynamoDB) in the United States, protected by Amazon Cognito authentication and server-side access rules that only let a chapter's own members read its data. We don't sell personal information, we don't use it for advertising, and this website has no tracking.

Deleting your account

Delete your account any time from the app (You, then Delete account). Your profile and login are removed. Messages you sent may remain visible to the people you sent them to.

Found a problem?

Please contact us with the subject "Security". We take every report seriously.