Privacy Policy

Information We Collect

We collect information in the following ways:

Information You Provide Directly

• Account registration information (name, email address, password)
• Profile information (display name, avatar, gender, zip code)
• Project details (titles, descriptions, dates, locations)
• Participant information submitted through signup forms (names, email addresses, phone numbers, custom field responses)
• Payment information processed through our third-party payment processor (Stripe)
• Communications you send to us (contact form submissions, support requests)
• Phone numbers provided for SMS/text messaging services

Information Collected Automatically

• Device information (device type, browser type, operating system)
• Usage data (pages viewed, features used, click interactions, session duration)
• Log data (IP addresses, access times, referral URLs)
• Cookies and similar tracking technologies

Information from Third Parties

• Authentication providers (if you sign in via a third-party service)
• Payment processors (transaction confirmations and payment status)

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Create and manage your account
• Process transactions and send related notices
• Send transactional emails (signup confirmations, reminders, organizer notifications)
• Send SMS/text messages related to event signups and reminders (with your consent)
• Provide customer support and respond to inquiries
• Analyze usage patterns to improve user experience
• Detect, prevent, and address fraud, abuse, or security issues
• Comply with legal obligations
• Enforce our Terms of Service

Email Communications

We send transactional emails related to your account and event activity, including signup confirmations, event reminders, organizer replies, and broadcast updates. These emails include an unsubscribe or "Remove me" link in the footer, allowing participants to cancel their signup or opt out of further communications for a specific event. Organizers may configure email branding and notification preferences through the Platform settings.

Cookies and Tracking Technologies

We use cookies, session storage, and similar technologies to:

• Maintain your authentication session
• Remember your preferences and settings
• Analyze traffic and usage patterns
• Track page views, button clicks, and session activity for internal analytics
• Improve Platform performance and user experience

You may control cookies through your browser settings. Disabling cookies may affect certain features of the Platform.

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Event Organizers: When you sign up for an event, your submitted information (name, email, phone number, and custom field responses) is shared with the event organizer to facilitate the event.
• Service Providers: We use trusted third-party services for email delivery (Resend), payment processing (Stripe), SMS messaging (Twilio), and hosting infrastructure. These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• Legal Requirements: We may disclose information when required by law, subpoena, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction.
• With Your Consent: We may share information with third parties when you explicitly consent.

Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), secure authentication, row-level security policies on database access, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Platform services. When you delete your account, we initiate a data purge process that permanently removes your account data, including projects, participant data, and profile information. Some data may be retained for a limited period to comply with legal obligations, resolve disputes, or enforce our agreements.

Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request an export of your data in a machine-readable format.
• Opt-Out of SMS: Reply "STOP" to any text message to unsubscribe, or simply don't check the consent box on future signup forms.
• Opt-Out of Email: Use the unsubscribe or "Remove me" link in event emails.
• Account Deletion: Delete your account through the Settings page or by contacting us.

To exercise any of these rights, contact us at help@masterlyst.com. We will respond to verified requests within 30 days.

Children's Privacy

The Platform is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete it promptly. If you are an educational institution using the Platform, you are responsible for compliance with COPPA, FERPA, and other applicable student privacy laws, as described in our Terms of Service.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the rights described below.

Categories of personal information we collect

• Identifiers such as name, email address, phone number, and account ID — to create your account, run your projects, and send confirmations and reminders.
• Customer records such as billing details handled by our payment processor (Stripe) — to process subscriptions and paid signups.
• Internet or network activity such as pages viewed, device and browser type, and IP address — to secure, measure, and improve the Platform and to measure our advertising.
• General location such as zip code or approximate location from your IP address — for security and analytics.
• Content you submit such as project details, form responses, and messages — to provide the Platform.

We collect this information from you directly, from participants who sign up for your projects, and automatically from your device. We do not collect sensitive personal information for the purpose of inferring characteristics about you.

Sale and sharing

We do not sell personal information for money. We use Google Analytics and Google Ads to measure visits and the performance of our ads. Under California law, allowing an advertising partner to collect browsing information for ad measurement may be considered “sharing” for cross-context behavioral advertising. You can opt out at any time on our Do Not Sell or Share My Personal Information page. We do not knowingly sell or share the personal information of consumers under 16.

Retention

We keep account information while your account is active. Deleted projects are permanently removed after 15 days, and deleted accounts after 30 days. Analytics data is retained according to our analytics provider's settings, and billing records are kept as long as required for tax and accounting purposes.

Your rights

• Right to know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties we disclose it to.
• Right to delete personal information we collected from you, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information.
• Right to limit the use of sensitive personal information (we do not use it for purposes that would trigger this right).
• Right to non-discrimination — we will not deny service, charge different prices, or provide a different quality of service because you exercised these rights.

How to submit a request

Email help@masterlyst.com or use our contact form. To protect your information, we will verify your identity by confirming control of the email address associated with your account or signup before acting on the request. You may use an authorized agent, who must provide your signed permission; we may still ask you to verify your identity directly. We respond within 45 days, as allowed by law.

Shine the Light

California residents may request information about disclosures of personal information to third parties for their own direct marketing purposes. We do not make such disclosures.

Do Not Track and Global Privacy Control

We treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of the sale or sharing of your personal information for that browser, and we turn off advertising measurement automatically when we detect it. Because there is no common industry standard for the older “Do Not Track” browser setting, we do not currently respond to Do Not Track signals; please use GPC or our opt-out page instead.

International Users

The Platform is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Platform, you consent to the transfer, processing, and storage of your information in the United States.

Third-Party Links and Services

The Platform may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party services you interact with.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be posted with a revised Effective Date. Continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

MasterLyst, Inc.
Email: help@masterlyst.com