Introduction
Welcome to Signup Bubble, operated by Redstone Foundry LLC ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our event sign-up platform at signupbubble.com.
Information We Collect
We may collect, use, store, and transfer different kinds of personal data about you:
- Identity Data: name or display name provided when signing up for an event slot
- Contact Data: email address (required for all signups) and optionally phone number
- Signup Data: slot selections, comments, custom field responses, guest count, and confirmation status
- Organizer Account Data: email address and authentication credentials for event organizers
- Technical and Session Data: basic information about a visit to our public marketing pages, such as the page viewed, browser and device type, approximate location, and referral source. We do not use this to collect event signup details or attendee lists
How We Use Your Information
We use your personal data for the following purposes:
- To provide and maintain our event sign-up service
- To create and manage organizer accounts
- To process event signups and slot reservations
- To send transactional emails (signup confirmations, reminders, and organizer notifications)
- To enable organizers to manage their events and view attendee information
- To generate and deliver unique action tokens for email-based signup management (edit, cancel, confirm)
- To improve our platform and user experience
- To run advertising and measure whether ads lead people to create an organizer account or start a paid organization
- To understand basic traffic on public marketing pages (for example, how many people viewed pricing or docs, clicked Get started, or reached sign-in)
- To prevent fraud and ensure platform security
- To comply with legal obligations
Email and Communications
Signup Bubble sends transactional emails related to event signups. These are not marketing emails and are essential to the functioning of the service. You may receive emails when:
- You sign up for an event slot (confirmation with your manage link)
- An organizer requires email confirmation for your signup
- Your signup status changes (confirmed, canceled, etc.)
- You are an organizer and someone signs up for your event
We use Resend as our email delivery provider. Emails are sent only in connection with actions you or an organizer have taken on the platform.
No Account Required for Signups
Signing up for an event slot does not require creating an account. You provide your name and email address directly on the event page. Your email is used as a universal identifier for notifications and for generating unique tokens that let you manage your signup (edit, cancel, or confirm) without needing a password.
Only event organizers need accounts to create and manage events.
Information Sharing
We do not sell your personal data. We may share your information in the following circumstances:
- With Event Organizers: When you sign up for an event, the organizer can see your name, email, and any additional information you provided (comments, phone, custom field responses, guest count).
- With Other Attendees: Depending on event settings, your name may be visible to other attendees on the public event page. Your email and other details are never shown publicly.
- Email Provider: We use Resend to deliver transactional emails. Your email address and name are shared with Resend solely for email delivery.
- Hosting and Infrastructure: We use Vercel for hosting and Supabase for data storage and authentication.
- Advertising and Analytics: On public marketing pages we use Google Ads and Google Analytics. They may receive basic session data as described below. We do not send them event attendee names, emails, or signup details.
- Legal Requirements: We may disclose information if required by law or to protect our rights.
Data Security
We implement appropriate security measures to protect your personal data. This includes encrypted data transmission (HTTPS), row-level security on our database, secure authentication for organizer accounts via Supabase Auth, and unique cryptographic tokens for signup management. However, no method of transmission over the Internet is 100% secure.
Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Object to processing of your data
- Request transfer of your data
- Withdraw consent at any time
To exercise these rights, please contact us at privacy@signupbubble.com.
Cookies, Advertising, and Analytics
We use first-party cookies to run the service and remember basic preferences. This includes cookies that keep an organizer signed in and a cookie that remembers theme preference (light or dark).
We also run ads. To measure those ads and understand basic traffic, we use Google Ads and Google Analytics on public marketing pages only (for example the homepage, pricing, docs, contact, privacy, and terms). On the homepage, Google Ads may record a page view so we can see if an ad click reached our site. On those marketing pages, Google Analytics may collect basic session data such as the page viewed, browser or device type, approximate location, and how you arrived at the page.
We do not run Google Ads or Google Analytics on public event signup pages, organizer dashboards, or admin tools. We do not use these tools to collect what someone types into an event signup, who is attending an event, or organizer account contents. We do not sell personal data, and we do not build advertising profiles of event attendees.
Google may set its own cookies when these tags load. Google's use of that information is described in the Google Privacy Policy.
Data Retention
We retain organizer account data for as long as the account is active. Event data (including signups, attendee names, and emails) is retained for as long as the event exists. Organizers may delete their events at any time, which removes all associated signup data. When an organizer deletes their account, all events and signup data associated with that account are removed.
Attendees may cancel their signups at any time using the unique manage link sent to their email, which removes their personal data from that event.
Third-Party Services
We use the following third-party services:
- Supabase: authentication, database, and real-time functionality
- Vercel: hosting and deployment
- Resend: transactional email delivery
- Google Ads: advertising and conversion measurement for organizer signups and paid subscriptions
- Google Analytics: basic session analytics on public marketing pages, including sign-in, signup, and checkout events
Each of these services has its own privacy policy, which we encourage you to review.
Children's Privacy
Signup Bubble is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
GDPR Compliance (EU Users)
If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR).
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract: Processing necessary to provide our service (e.g., processing your event signup)
- Consent: You have given explicit consent for specific activities
- Legitimate Interests: Fraud prevention, security, and service improvement
- Legal Obligation: Processing required to comply with applicable laws
Your GDPR Rights
Under GDPR, you additionally have the right to:
- Request restriction of processing
- Receive your data in a structured, machine-readable format (data portability)
- Lodge a complaint with your local data protection authority
We will respond to GDPR requests within one month. Contact us at privacy@signupbubble.com.
CCPA Compliance (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:
- Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request deletion of personal information we have collected from you.
- Right to Opt-Out: We do not sell your personal information. We use Google Ads and Google Analytics only to measure ads and basic marketing-page traffic, not to sell attendee data or build cross-site profiles of people who sign up for events.
- Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise your CCPA rights, contact us at privacy@signupbubble.com.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the service constitutes acceptance of the updated policy.
Contact Us
If you have questions about this privacy policy, please contact us:
- Email: privacy@signupbubble.com