Privacy Policy

Account Information

When you create an account, we collect:

• Email address (required)
• Name (optional)
• Profile image (optional, if using OAuth)
• Password (hashed and encrypted)
• Organization information (name, contact details)
• Date and time format preferences
• Notification preferences

Event and Form Data

When you create signup forms, we collect:

• Event titles, descriptions, dates, and times
• Location information
• Custom fields and questions
• Form settings and preferences
• Logo and banner images

Participant Information

When participants sign up for events created on our Service, we collect (as configured by the Creator):

• Name (required)
• Email address (optional)
• Phone number (optional)
• Address information (optional)
• Responses to custom fields
• Signup timestamps
• For paid slots, a record that payment succeeded (for example a Stripe Checkout session id), not your full card number

Contact Groups and Contacts

If you create contact groups, we collect:

• Contact names, emails, phone numbers
• Notes about contacts
• Group organization data

Documents and Files

When you upload documents or files:

• File names, types, and sizes
• File content (stored securely)
• Usage metadata

Payment Information

There are two kinds of payments on the Service:

• Signupkit plans. Weekly Pass, Pro, and Organization billing is processed through Stripe on our billing account. We store subscription status, plan details, and payment history identifiers. We do not store full payment card details on our servers.
• Ticket payments on paid slots. If you connect Stripe to collect money from participants, Stripe processes Checkout on your connected account. We store your connected-account status (for example whether card payments are active) and identifiers such as a Stripe account id and Checkout session ids needed to confirm a paid signup. Card data is processed by Stripe, not stored by Signupkit as a full card number.

Stripe’s use of payment data is governed by Stripe’s privacy policy. Plan billing and ticket payments use separate Stripe setups; we do not mix those payment flows.

Free Resources

If you request a free guide, checklist, or other downloadable resource from our website, we collect:

• Your email address
• Which resources you requested
• The page you requested them from
• The date and time of the request

The resource is downloaded straight from the page you requested it on — we do not email it to you, and we do not send marketing or promotional email of any kind. We keep the record above so we know which resources are useful. You do not need an account to request a resource, and requesting one does not create one.

Location Autocomplete

When you type an event location while building an event, we use Google Maps Places to suggest addresses. The text you type and your IP address are sent to Google to return suggestions. This happens only inside the event builder — never on public signup pages, and never for participants.

Technical and Usage Information

We automatically collect:

• IP addresses
• Browser type and version
• Device information
• Usage patterns, analytics, and log data (via tools like Datafast for improving the Service)

For details on cookies and similar technologies, please see our separate Cookies Policy.

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information or email lists to third-party advertisers or marketers.

Third-Party Service Providers

We share data with trusted third-party service providers who assist us in operating our Service. These providers are contractually obligated to protect your data and use it only for the purposes we specify:

• Stripe: Payment processing for Signupkit subscriptions, and Stripe Connect plus Checkout for ticket payments on a Creator’s connected account. Payment card data is processed by Stripe.
• ZeptoMail: Email delivery for transactional and event emails
• Cloudflare: Secure file storage for documents and images
• Google: OAuth authentication (if you choose to sign in with Google), and Google Maps Places for event location autocomplete
• Vercel: Application hosting and delivery
• Datafast: Analytics to help us understand and improve Service usage (loaded only if you accept analytics cookies)

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Access and Correction

You can access and update your account information at any time through your dashboard settings.

Data Deletion

You can delete your account and associated data at any time. When you delete your account:

• Your account information is removed
• Your forms and participant data are deleted
• Files you uploaded are removed from storage
• Our record of your connected Stripe account is removed; your Stripe account itself stays with Stripe
• Some data may remain in backups for a limited period

Email Preferences

You can manage email notification preferences in your account settings.