Privacy Policy

1. Introduction

Signup Square ("Signup Square," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website signupsquare.com (the "Site"), use our mobile applications (the "Apps"), or use any of our services, features, content, or applications (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of the Services after the date such revised Privacy Policy is posted.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you register for an account, create or participate in signups, make a purchase, subscribe to our newsletter, participate in promotions, or otherwise contact us. The personal information we collect may include:

• Account Information: Name, email address, password, phone number, mailing address, and profile picture.
• Payment Information: Credit card numbers, debit card numbers, bank account information, billing address, and other payment details. Note: Payment information is processed by our third-party payment processors and is not stored on our servers.
• Signup Information: Information you provide when creating or participating in signups, including names, contact information, dates, times, locations, items, tasks, and any other information relevant to the signup.
• Communications: Information you provide when you contact us, including the content of your messages, feedback, and any attachments.
• Survey and Promotion Data: Information you provide when participating in surveys, contests, or promotional activities.
• Organization Information: If you use our Services on behalf of an organization, we may collect information about that organization, including name, address, and tax identification numbers.

2.2 Information Automatically Collected

When you access or use our Services, we automatically collect certain information, including:

• Device Information: Information about your device, including device type, operating system, unique device identifiers, browser type, browser language, and mobile network information.
• Log Information: Information about your use of our Services, including access times, pages viewed, links clicked, IP address, and the page you visited before navigating to our Services.
• Location Information: We may collect information about your approximate location based on your IP address. With your consent, we may also collect precise location information from your mobile device.
• Usage Information: Information about how you use our Services, including the signups you create, view, or participate in, features you use, actions you take, and the time, frequency, and duration of your activities.
• Cookies and Similar Technologies: We use cookies, pixel tags, web beacons, and similar technologies to collect information about your interactions with our Services and other websites. See Section 7 for more information.

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Social Media Platforms: If you choose to link your account with social media platforms (such as Facebook, Google, or Apple), we may receive information from those platforms, including your name, email address, profile picture, and friends list.
• Payment Processors: Our payment processors may provide us with information about your transactions, including transaction amounts, dates, and payment method details (but not full payment card numbers).
• Analytics Providers: We may receive information from analytics providers about your interactions with our Services and advertisements.
• Business Partners: We may receive information from our business partners, including information about joint marketing activities or co-branded services.
• Publicly Available Sources: We may collect information from publicly available sources, such as public databases, social media platforms, and other publicly accessible sources.

3. How We Use Your Information

We use the information we collect for various purposes, including:

3.1 Providing and Improving Our Services

• To create and manage your account
• To process and facilitate signups, registrations, and transactions
• To process payments and send transaction confirmations
• To provide customer support and respond to your inquiries
• To send reminders, notifications, and updates about your signups
• To personalize your experience and provide content and features that match your interests
• To improve, develop, and enhance our Services
• To conduct research and analytics to understand how our Services are used
• To detect, prevent, and address technical issues

3.2 Communications

• To send you administrative messages, such as account verification, password reset, and security alerts
• To send you marketing communications about products, services, promotions, and events (with your consent where required)
• To send you newsletters and other informational content (with your consent where required)
• To respond to your comments, questions, and requests

3.3 Legal and Safety Purposes

• To comply with applicable laws, regulations, and legal processes
• To protect the rights, property, and safety of Signup Square, our users, and the public
• To detect, prevent, and address fraud, security breaches, and other illegal activities
• To enforce our Terms of Service and other agreements
• To cooperate with law enforcement and regulatory authorities

3.4 Business Purposes

• To process transactions and billing
• To conduct audits and quality assurance
• To manage and plan our business operations
• To facilitate corporate transactions, such as mergers, acquisitions, or asset sales

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 With Other Users

When you create or participate in a signup, certain information may be visible to other users, such as:

• Your name and contact information (as you choose to provide)
• Your signup selections and responses
• Comments or messages you post
• Any other information you choose to share through the signup

Signup organizers may have access to additional information about participants, including email addresses and phone numbers, depending on the signup settings.

4.2 With Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

• Payment processing
• Email and SMS delivery
• Cloud hosting and storage
• Analytics and data analysis
• Customer support
• Marketing and advertising
• Security and fraud prevention

These service providers are contractually obligated to use your information only for the purposes of providing services to us and are required to maintain appropriate security measures.

4.3 With Business Partners

We may share your information with our business partners for joint marketing initiatives, co-branded services, or other collaborative activities. We will obtain your consent before sharing your information for these purposes where required by law.

4.4 For Legal Reasons

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to:

• Comply with a legal obligation, subpoena, court order, or other legal process
• Protect and defend the rights or property of Signup Square
• Prevent or investigate possible wrongdoing in connection with our Services
• Protect the personal safety of users of our Services or the public
• Protect against legal liability

4.5 Business Transfers

If Signup Square is involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, dissolution, sale of assets, or transition of service to another provider, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Services of any change in ownership or uses of your personal information.

4.6 With Your Consent

We may share your information with third parties when you have given us your consent to do so.

4.7 Aggregated or De-identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our legal obligations.

To determine the appropriate retention period for personal information, we consider:

• The amount, nature, and sensitivity of the personal information
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process the information
• Whether we can achieve those purposes through other means
• Applicable legal, regulatory, tax, accounting, or other requirements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain certain information for legal, regulatory, or legitimate business purposes. Some information may remain in our backup systems for a limited period.

6. Data Security

We implement appropriate technical and organizational security measures designed to protect the security of your personal information. These measures include:

• Encryption: We use industry-standard encryption (TLS/SSL) to protect data transmitted between your device and our servers. Sensitive data is encrypted at rest using AES-256 encryption.
• Access Controls: We limit access to personal information to employees, contractors, and agents who need to know that information to process it for us and who are subject to strict contractual confidentiality obligations.
• Security Monitoring: We continuously monitor our systems for potential vulnerabilities and attacks.
• Regular Audits: We conduct regular security assessments and audits of our systems and practices.
• Incident Response: We have procedures in place to respond to suspected data breaches.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activities that occur under your account.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to the owners of the site.

7.2 Types of Cookies We Use

• Essential Cookies: These cookies are necessary for the website to function properly and cannot be switched off in our systems. They are usually only set in response to actions made by you, such as setting your privacy preferences, logging in, or filling in forms.
• Performance Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site.
• Functional Cookies: These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.
• Targeting Cookies: These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other sites.

7.3 Other Tracking Technologies

In addition to cookies, we may use other tracking technologies, including:

• Pixel Tags/Web Beacons: Small graphic images that may be included on our Services and emails to determine whether and when you have opened an email or visited our site.
• Local Storage: We may use local storage technologies (like HTML5 localStorage) to store information locally on your device.
• Device Fingerprinting: We may collect and analyze information about your device to help identify it across browsing sessions.

7.4 Your Cookie Choices

Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services. You can also opt out of interest-based advertising by visiting:

• Network Advertising Initiative: optout.networkadvertising.org
• Digital Advertising Alliance: optout.aboutads.info
• European Interactive Digital Advertising Alliance: youronlinechoices.eu

8. Your Privacy Rights

8.1 General Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: The right to request access to the personal information we hold about you.
• Correction: The right to request that we correct inaccurate or incomplete personal information.
• Deletion: The right to request that we delete your personal information, subject to certain exceptions.
• Portability: The right to receive a copy of your personal information in a structured, commonly used, and machine-readable format.
• Restriction: The right to request that we restrict the processing of your personal information.
• Objection: The right to object to our processing of your personal information.
• Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

8.2 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to Know: You have the right to request that we disclose certain information about our collection and use of your personal information over the past 12 months, including the categories and specific pieces of personal information we collected, the categories of sources from which we collected it, the business or commercial purpose for collecting or selling it, and the categories of third parties with whom we shared it.
• Right to Delete: You have the right to request that we delete any of your personal information that we collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: You have the right to opt-out of the sale or sharing of your personal information for cross-context behavioral advertising purposes.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of your sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise your California privacy rights, please contact us using the information provided in Section 14. We may need to verify your identity before processing your request.

Do Not Sell or Share My Personal Information: We do not sell your personal information in the traditional sense. However, some of our data sharing activities may constitute "sales" or "sharing" under California law. You may opt out of these activities by contacting us or by using the "Do Not Sell or Share My Personal Information" link on our website.

8.3 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including:

• Legal Basis: We will only process your personal information where we have a legal basis to do so, such as your consent, to perform a contract with you, to comply with our legal obligations, or for our legitimate interests.
• Data Protection Officer: You may contact our Data Protection Officer at dpo@signupsquare.com.
• Supervisory Authority: You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.
• International Transfers: When we transfer your personal information outside the EEA, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8.4 Other State Privacy Rights

Residents of other U.S. states, including Virginia, Colorado, Connecticut, Utah, and others with comprehensive privacy laws, may have similar rights. Please contact us to exercise any applicable rights.

8.5 How to Exercise Your Rights

To exercise any of your privacy rights, you may:

• Submit a request through your account settings
• Email us at privacy@signupsquare.com
• Call us at 1-800-SIGNUP
• Mail us at the address provided in Section 14

We will respond to your request within the timeframe required by applicable law (typically 30-45 days). We may need to verify your identity before processing certain requests.

9. Children's Privacy

Our Services are not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If we learn that we have collected personal information from a child under the applicable age, we will take steps to delete that information as quickly as possible.

If you believe that we have collected personal information from a child under the applicable age, please contact us immediately at privacy@signupsquare.com.

Parents or guardians who wish to create signups that may involve children (such as school events or sports teams) are responsible for obtaining appropriate consent and ensuring compliance with applicable laws, including the Children's Online Privacy Protection Act (COPPA).

10. International Data Transfers

Signup Square is based in the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our servers are located or where our service providers operate.

These countries may have data protection laws that are different from the laws of your country. By using our Services, you consent to the transfer of your information to the United States and other countries.

When we transfer personal information from the EEA, UK, or Switzerland, we use appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules
• Other legally approved transfer mechanisms

11. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. Our inclusion of links to third-party sites does not imply endorsement of those sites.

This Privacy Policy does not apply to any information you provide to third parties, and we are not responsible for the privacy practices of third parties.

12. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Because there is no uniform standard for how to interpret DNT signals, our Services do not currently respond to DNT signals. However, you can use the range of other tools we provide to control data collection and use, including the ability to opt out of receiving marketing communications from us as described above.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this Privacy Policy. If we make material changes to this Privacy Policy, we will notify you either by prominently posting a notice of such changes on our website or by directly sending you a notification.

We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of those changes.

14. Contact Us

If you have questions, comments, or concerns about this Privacy Policy or our privacy practices, please contact us at:

• Signup Square
• Attn: Privacy Team
• 123 Market Street, Suite 400
• San Francisco, CA 94105
• United States

• Email: privacy@signupsquare.com
• Phone: 1-800-SIGNUP (1-800-746-687)
• Data Protection Officer: dpo@signupsquare.com

If you are located in the European Economic Area and believe we have not adequately resolved any issues with your personal information, you have the right to lodge a complaint with your local data protection supervisory authority.

15. Additional Disclosures

15.1 Financial Incentives

We may offer programs, promotions, or other incentives that involve the collection of personal information. The terms of each program will describe any financial incentives and material terms. Participation is voluntary, and you may withdraw at any time.

15.2 Automated Decision-Making

We may use automated decision-making in certain circumstances, such as fraud detection and prevention. You have the right to request human review of automated decisions that significantly affect you.

15.3 Biometric Information

We do not collect biometric information (such as fingerprints or facial recognition data) through our Services.

15.4 Categories of Personal Information

For purposes of the CCPA/CPRA, we have collected the following categories of personal information in the past 12 months:

• Identifiers (name, email, phone number, IP address)
• Personal information categories listed in Cal. Civ. Code § 1798.80(e)
• Protected classification characteristics
• Commercial information
• Internet or other electronic network activity information
• Geolocation data
• Professional or employment-related information
• Inferences drawn from other personal information