Privacy Policy

Effective Date: 11-10-2026 Last Updated: 11-10-2026

This Privacy Policy describes how Missouri Green Banc (“MGB,” “we,” “us,” or “our”) collects, uses, shares, and protects information through missourigreenbanc.org, its accounts, forms, learning courses, and the NPCA Match platform (together, our “Services”). It applies together with our Terms of Service.

Missouri Green Banc is a nonprofit organization based in Chesterfield, Missouri. Our Services are intended for property owners, contractors, municipalities, capital providers, and others interested in energy, efficiency, and resilience improvements, including Commercial Property Assessed Clean Energy (“C-PACE”) projects.

Contents (15 sections)

1. Information You Give Us

We collect information you choose to give us:

• Account registration. Your first and last name, email address, phone number, the type of account you choose (general, property owner, contractor, or capital provider; municipal staff join by invitation), and a password. Passwords are stored only in hashed (one-way scrambled) form.
• NPCA Match participation and project information. Information you enter while using NPCA Match, such as your organization, property addresses, project details and requirements, qualifications, service areas, and your choices about matches and referrals.
• Eligibility and address checks. A property address you enter to check whether a location is in a participating community, and, if your community does not yet participate, the name, email address, and phone number you choose to leave so we can follow up.
• Contact forms. Your name, company, website, email address, address, and message when you write to us.
• Learning courses. Your course enrollment, progress, quiz answers and results, and certificates earned.
• Website chat assistant. The questions and messages you type into the chat window, and any name or email address you choose to provide there (for example, to receive a transcript). See Website Chat Assistant below.
• Messages to us. Information you include when you email or call us.

2. Information Collected Automatically

When you visit our website, some information is collected automatically:

• Website activity and analytics. We use Google Analytics to understand how our website is used, such as pages viewed, time on site, approximate location, device and browser type, and how visitors found us. Google Analytics uses cookies and receives this information directly from your browser.
• Campaign and referral attribution. Our own first-party system records which of our campaigns or referral links brought a visitor to the site, as described in the next section.
• Server logs. Like most websites, the servers that host our Services record standard technical information about each request, such as IP address, browser type, the page requested, and the time of the request, for security and operations.

3. Campaign and Referral Attribution

Campaign codes

Links in our emails, social posts, printed materials, and other outreach may include a campaign code (for example ?c=CODE) and standard campaign tags (such as utm_campaign). When you arrive through such a link, we record:

• the campaign code and campaign tags in the link;
• the page you arrived on (its path only, not the rest of the link);
• the website that referred you (its domain name only);
• your device class (desktop, tablet, or mobile); and
• the date and time of the visit.

To remember a visit for the attribution period, we set a first-party cookie, mgb_attr_vid, that contains a random identifier. Only a hashed (one-way scrambled) form of that identifier is sent to our database. We do not store your IP address with these records, and we do not record the contents of forms, passwords, or searches you type on our website.

The 30-day attribution window

If you create an account within 30 days of a campaign visit, we connect that campaign to your new account so we can understand which outreach works. The attribution cookie expires after 30 days, and a visit more than 30 days before registration is not credited.

Contractor and municipality referrals

Participating contractors and municipalities may share referral links or codes (for example ?npca_ref=CODE, a single-use invitation link, or a community link such as ?src=community-name). When you arrive through one of these links:

• a referral code or invitation is held in a short-lived cookie (up to 1 hour) so it survives sign-in or registration, and it has no effect unless you choose to accept it in your account;
• a community link sets the mgb_src cookie, which remembers the participating municipality or county for up to 90 days so a later registration is credited to that community; and
• when you register or accept a referral, we record which contractor or municipality referred you with your account.

Information about you is made available to other NPCA Match participants only as described in our Terms of Service and through the NPCA Match features you choose to use.

When we connect activity to your account

Campaign and referral information is not connected to your name or email address unless you register or sign in. When you create an account, the attribution described above is linked to your account record.

4. Information from Other Sources

We may also receive information from other sources:

• Public officials. For municipal outreach, we may use publicly available business contact information for municipal and county officials (such as name, title, and work email address) to invite their communities to participate.
• Program partners. Participating contractors and municipalities may give us information needed to refer or invite a property owner or project.
• Our records. Information from earlier contact with MGB, kept in our customer relationship management system.
• Payments. When you pay through our Givebutter page, Givebutter provides us with information about the payment, such as your name, contact information, and the amount, but not your full card number.

5. Cookies

Cookies are small files stored by your browser. Our website uses the following cookies:

Other components of the website may set short-lived technical cookies needed for the site to work. You can block or delete cookies in your browser settings. The website, registration, and referrals continue to work without our campaign attribution cookies.

6. Website Chat Assistant

Our website offers an automated chat assistant. To generate replies, the messages you type, and the recent conversation, are sent to OpenAI, which provides the artificial-intelligence service behind the assistant. Chat sessions are also recorded on our website. Please do not enter sensitive personal or financial information in the chat. The chat assistant does not create an account, and its replies are general information, not financial, legal, or tax advice.

7. How We Use Information

We use information to:

• provide, operate, and secure our website, accounts, courses, and NPCA Match;
• identify potential matches and referrals among property owners, contractors, capital providers, and municipalities, as described in our Terms of Service;
• respond to your questions and requests, and send account, security, and program communications;
• understand which campaigns, referral partners, and pages bring people to MGB, and improve our outreach, programs, and website;
• credit referrals to the participating contractor or municipality that made them;
• maintain records of participants, projects, and referrals, including in our customer relationship management system;
• detect, prevent, and investigate fraud, abuse, and security incidents; and
• comply with law and enforce our Terms of Service.

We do not place advertising pixels (such as social-media advertising pixels) on our website, and we do not sell personal information.

8. How We Share Information

We share information only as described here:

• Service providers that operate parts of our Services for us, under their service terms, listed in the table below.
• Other NPCA Match participants, to the extent described in our Terms of Service and through the features you choose to use, such as when you accept a match or a referral.
• Legal and safety reasons, when we believe disclosure is required by law, legal process, or government request, or is needed to protect the rights, safety, or property of MGB, our users, or others.
• Organizational changes, such as a merger, reorganization, or transfer of a program to another organization, subject to this Policy.

When a page includes embedded content or tools from these providers, such as a map or a course video, the provider receives your browser’s request, including your IP address, under its own privacy policy. Payments made through our payment page are handled by Givebutter on its own website; we do not receive your full card number.

Mobile opt-in information and SMS consent information are not sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes.

9. Your Choices and Requests

• Global Privacy Control. If your browser sends a Global Privacy Control signal, we do not set our campaign attribution cookie and do not record campaign attribution for that browser. This applies to our own attribution system; it does not currently change Google Analytics or the referral cookies needed to complete a referral you are following.
• Do Not Track. Apart from Global Privacy Control as described above, our website does not respond to browser “Do Not Track” signals. Third parties such as Google (through Google Analytics and Google Maps) may collect information about your online activities over time and across different websites when you use our website. You can learn how Google uses this information at policies.google.com/technologies/partner-sites.
• Cookies. You can block or delete cookies in your browser settings.
• Google Analytics. Google offers a browser add-on to opt out of Google Analytics.
• Email. You can ask us to stop sending you non-essential emails by contacting us, or by using an unsubscribe link where one is provided. We may still send messages about your account, security, or requests you made.
• Your information. You may ask to see, correct, or delete the personal information we hold about you, or to close your account, by contacting us at info@missourigreenbanc.org. We will verify your request and respond within a reasonable time. We may keep information when we must keep it by law or for legitimate record-keeping, security, or dispute purposes.

10. How Long We Keep Information

• Campaign attribution. A campaign visit counts toward a registration for 30 days. Visit records that are never connected to an account are deleted within about 180 days. Attribution connected to an account is kept with that account record.
• Website buffer. Our website holds attribution records only briefly (at most 6 days) before sending them to our database.
• Accounts and program records. We keep account, participation, project, and referral information for as long as your account is active and as needed to run our programs, keep accurate records, resolve disputes, and meet legal obligations.
• Other information, such as contact form messages and chat records, is kept for as long as needed for the purposes described in this Policy.

11. Security

We use reasonable safeguards designed to protect information, including encrypted (HTTPS) connections, passwords stored only in hashed form, access to administrative tools limited to authorized people, additional verification for sensitive administrative actions, and backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you as required by applicable law.

12. Children

Our Services are intended for adults and businesses, not for children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

13. Where Information Is Processed

We are based in the United States, and our Services are intended for use in the United States. Our service providers may store and process information in the United States and other countries.

14. Changes to This Policy

We may update this Policy from time to time. When we do, we will post the updated Policy on this page and change the “Last Updated” date. If we make a material change to how we use personal information, we will provide additional notice, such as a notice on our website or an email to registered users.

15. Contact Us

Questions or requests about this Privacy Policy or your information may be directed to:

Missouri Green Banc 16305 Swingley Ridge Road, Ste. 220, Chesterfield, MO 63017 info@missourigreenbanc.org 866-554-4083 For privacy matters: info@missourigreenbanc.org