# Privacy Policy Last updated: July 27, 2026 ## 1. Who we are CrowdPleaser (the "Service") is operated as a sole proprietorship under the trade name CrowdPleaser ("we", "us", or "our"). This policy explains what we collect, why, and who else sees it. Questions can go to support@crowdpleaser.app. ## 2. Two kinds of people use this Service This matters for understanding the rest of the policy, so it comes first. - **Facility owners** are the gyms and studios that pay for the Service and publish a voting page. We handle their data directly, for our own purposes as described below. - **Members** are the people who vote or suggest a program on a Facility's page. They do not have accounts. When a member votes, they are giving their email address *to that Facility*. We store and process it on the Facility's behalf. If you are a member and want your information removed, the fastest route is to contact the gym or studio whose page you voted on. You can also contact us and we will help. ## 3. What we collect from Facility owners - **Account:** your email address, and a securely hashed password if you set one. We do not collect your name, phone number, or home address. - **Facility details you enter:** facility name, business mailing address, sender name, contact email, website link, logo, and any incentive file you upload. - **Payment:** handled by Stripe. We receive a customer reference and subscription status. We never receive or store your full card number. - **Security logs:** IP address, browser user agent, and the email address used on sign-in attempts, recorded to detect abuse and brute-force attacks. ## 4. What we collect from members - **Email address**, when you vote on a program or suggest one. - **Which programs you voted for** and any optional tags you selected, such as a skill level or preferred time. - **The text of any suggestion** you submit. Member and suggester email addresses are encrypted in the database rather than stored as readable text. Records created before we introduced encryption may still be stored unencrypted pending a one-time migration. **We confirm before we mail.** After voting, you get one email asking you to confirm the address. Until you confirm, you are not included in any launch announcement and not included in the list the Facility can export. ## 5. How the information is used - To run the Service: showing vote counts, unlocking incentives, and sending the emails the Service depends on. - To let a Facility see demand for its programs and email the members who asked for a program when it launches. - To take payment and manage subscriptions. - To detect and prevent abuse, fraud, and security incidents. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not run advertising on the Service. ## 6. Facility access to member information A Facility owner can see and export the confirmed email addresses of members who voted on their page, along with which programs those members voted for and which tags they chose. That export is a normal part of the Service. Once a Facility exports it, how that list is used is governed by that Facility's own practices, not this policy. ## 7. Who else processes this data We use a small number of service providers. They process data on our instructions in order to run the Service. - **Stripe**: payment processing and subscription billing. - **Resend**: delivery of the emails the Service sends, which means it handles recipient addresses and message contents. - **Render**: application hosting and the database. - **Cloudflare**: network protection in front of the site, and object storage for uploaded logos and incentive files. - **AppSignal**: error and performance monitoring. Email fields are filtered out of the reports it receives. We may also disclose information when required by law, to protect our rights, or as part of a merger or sale of the business. ## 8. Email you receive from us Members receive a confirmation email after voting, and launch announcements from the Facility they voted on. Every launch announcement has a working unsubscribe link and supports one-click unsubscribe in email clients that offer it. Unsubscribing applies to the Facility you unsubscribed from. It stops future announcements from that Facility. It does not delete the vote itself, which still counts toward the public tally. If you want the vote removed as well, contact us or the Facility. ## 9. Retention We keep information for as long as the relevant account or Facility page exists. When a Facility owner deletes their Facility, its programs, votes, tags, and unsubscribe records are deleted with it. Billing records are retained as long as needed for tax and accounting purposes. Security logs are kept to investigate abuse. ## 10. Your choices You can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted, by emailing support@crowdpleaser.app. Facility owners can cancel a subscription and delete a Facility at any time from the dashboard. Members can unsubscribe from any announcement email. ## 11. Security Traffic is encrypted in transit. Member and suggester email addresses are encrypted at rest. Passwords are hashed, never stored in readable form. Access to production data is limited. No system is perfectly secure, and we cannot guarantee absolute security. ## 12. Children The Service is not directed at children under 13, and Facility accounts require an adult. A Facility may list programs intended for children, but the person voting should be an adult. If you believe a child under 13 has given us an email address, contact us and we will delete it. ## 13. Cookies See our [Cookie Policy](https://crowdpleaser.app/cookies.md) for what is stored in your browser and why. ## 14. Changes to this policy We may update this policy. The date at the top shows when it last changed. Material changes will be announced by email or a notice in the Service.