Privacy Policy

Information you give us

• Email address — when you subscribe to updates or register interest in a product. We record the date, the consent version, the page you signed up from, and the IP address and browser user agent at the time, so we can show when and how consent was given.
• Survey responses — if you complete one of our research surveys, we store your answers, including any free text you write.
• Account and event data — if you create an account, the details you enter about yourself, your organization, your events, your roster, and your tickets.
• Support correspondence — what you send us when you email support.

Information collected automatically

• Aggregate page analytics. We use Vercel Analytics to count page views and referrers. It does not set advertising cookies and does not track you across other websites.
• A language cookie. Your locale choice is stored so the site opens in the language you picked.
• Local preferences. Your theme choice is kept in your browser’s local storage and never sent to us.
• Server logs. Standard request logs kept by our hosting provider for security and troubleshooting.

We do not sell personal information, and we do not share it with advertising networks.

Payment information

Card payments are processed by Stripe. Full card numbers go to Stripe and are never stored on our servers. We keep the parts of a transaction we need to run the event and the ledger — amounts, status, the last four digits, and payout records. Stripe handles that data under its own privacy policy.

How we use information

• To run the service: sell and deliver tickets, scan entry, book staff, and pay out.
• To send you the updates you asked for, and transactional messages about your events or orders.
• To answer support requests.
• To improve the product, including by reviewing survey responses and aggregate usage.
• To prevent fraud and abuse, assemble chargeback evidence, and meet legal obligations.

Who we share it with

We share personal information with service providers who process it on our behalf, under contract, and only for the purposes above:

• Stripe — payments, payouts, and fraud prevention.
• Neon — managed PostgreSQL database hosting.
• Resend — delivery of transactional and marketing email.
• Vercel — website and application hosting, and aggregate analytics.
• Apple — distribution of our apps through the App Store.

If you buy a ticket, the organizer of that event receives the information needed to admit you and to run the event, and handles it as the controller of their own attendee data. We may also disclose information where the law requires it, or to protect our rights, our users, or the public.

Marketing email and consent

You only receive marketing email if you asked for it. Every marketing message carries an unsubscribe link, and you can also opt out at any time by emailing support@shedyool.com. Transactional messages about an order, an event, or a booking are part of the service and are not marketing.

How long we keep it

We keep account and event records as long as your account is active, and afterwards only as long as we need it for the purposes described here or for as long as tax, accounting, and dispute-resolution rules require. Marketing consent records are kept while you are subscribed and for a period afterwards so we can evidence the consent and honour your opt-out. Survey responses are kept in a research archive and may be retained in aggregated form.

Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy in a portable format, object to or restrict certain processing, and withdraw consent. Residents of the EU and the UK have these rights under the GDPR; residents of California have comparable rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.

To exercise any of them, email support@shedyool.com. We will respond within the time the applicable law allows. You also have the right to complain to your local data protection authority.

International transfers

We and our service providers operate in the United States. If you use the service from outside the United States, your information is transferred to and processed there, under appropriate safeguards for transfers out of your region.

Security

Traffic is encrypted in transit, access to production data is restricted to the people who need it, and payment card data is handled by Stripe rather than by us. No service can promise perfect security, so please use a strong, unique password and tell us promptly if you think an account has been compromised.

Children

The service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top of the page, and we will tell subscribers by email when the change is significant.

Contact

Questions about this policy, or about the information we hold: support@shedyool.com.