Privacy policy

In short

We collect only what a sign-up sheet needs. We have no ads, we do not sell data, and we do not use tracking cookies.

What we collect

Organizers: your e-mail address, the lists you create (title, description, slots, options, questions) and, if you buy, a record of the payment (amount, plan, date).

Guests: the name they type, and, only when the organizer asks for them or the guest chooses to give them, an e-mail address, a phone number, a note and answers to the organizer's questions. Guests' details are visible to the organizer of the list. Other guests only see names if the organizer turned that option on.

Visits: to know which pages work, we count page views and sign-ups without cookies. We keep totals per day and per source (for example the campaign name in a link). To count unique visitors we use a code made from a visitor's connection details and a secret that changes the way it is computed every day; the code cannot be turned back into an address and is deleted after two days.

Cookies

We use only what the service needs to work: a sign-in cookie for organizers who sign in, and a short-lived cookie after a purchase to bring you back to your list. No advertising or analytics cookies.

Why we use it

To run the sign-up sheets, send the e-mails that go with them (confirmations, reminders, summaries, sign-in links, receipts), prevent abuse, process payments, and answer your messages. We do not use your data for marketing and we do not send newsletters.

Who processes it for us

Hostinger (website hosting and database), Resend (sending e-mails) and Stripe (payments, and tax on purchases). They process data only to provide their service to us.

Because of these providers, data can be processed outside your country, including in the United States and the European Union.

How long we keep it

A list and the sign-ups on it are deleted automatically 12 months after the event date, or 12 months after the last activity if there is no event date. Organizers can delete a list at any time, and guests can cancel their own sign-up from the link in their confirmation e-mail.

Payment records are kept for as long as accounting and tax rules require. Addresses that bounced or reported an e-mail as unwanted are kept in a block list so we do not write to them again.

Your rights

You can ask to see, correct or delete your data, or object to how we use it. Use the contact page, tell us the e-mail address and the list concerned, and we will answer within 30 days. If you are in the European Union or the United Kingdom you can also complain to your data protection authority; if you are in California, you have the rights described in the CCPA, and we do not sell or share personal information.

Children

SignupBloom is not directed at children under 13. If a school or club uses a list, it should ask for a parent's or guardian's name, not a child's details.

Security

Connections are encrypted. Private links are long random codes, and we store only a fingerprint of them. No system is perfectly secure, but we protect the data as well as we reasonably can.

Changes

We may update this policy. The date at the top shows the latest version.