Back to SimpleSignup

Privacy Policy

Last updated: April 17, 2026

Introduction

Welcome to SimpleSignup, operated by Redstone Foundry LLC ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our event sign-up platform at simplesignup.app.

Information We Collect

We may collect, use, store, and transfer different kinds of personal data about you:

  • Identity Data: name or display name provided when signing up for an event slot
  • Contact Data: email address (required for all signups) and optionally phone number
  • Signup Data: slot selections, comments, dietary preferences, guest count, and confirmation status
  • Organizer Account Data: email address and authentication credentials for event organizers
  • Technical Data: IP address, browser type, device information, and usage data

How We Use Your Information

We use your personal data for the following purposes:

  • To provide and maintain our event sign-up service
  • To create and manage organizer accounts
  • To process event signups and slot reservations
  • To send transactional emails (signup confirmations, reminders, and organizer notifications)
  • To enable organizers to manage their events and view attendee information
  • To generate and deliver unique action tokens for email-based signup management (edit, cancel, confirm)
  • To improve our platform and user experience
  • To prevent fraud and ensure platform security
  • To comply with legal obligations

Email and Communications

SimpleSignup sends transactional emails related to event signups. These are not marketing emails and are essential to the functioning of the service. You may receive emails when:

  • You sign up for an event slot (confirmation with your manage link)
  • An organizer requires email confirmation for your signup
  • Your signup status changes (confirmed, canceled, etc.)
  • You are an organizer and someone signs up for your event

We use Resend as our email delivery provider. Emails are sent only in connection with actions you or an organizer have taken on the platform.

No Account Required for Signups

Signing up for an event slot does not require creating an account. You provide your name and email address directly on the event page. Your email is used as a universal identifier for notifications and for generating unique tokens that let you manage your signup (edit, cancel, or confirm) without needing a password.

Only event organizers need accounts to create and manage events.

Information Sharing

We do not sell your personal data. We may share your information in the following circumstances:

  • With Event Organizers: When you sign up for an event, the organizer can see your name, email, and any additional information you provided (comments, phone, dietary preferences, guest count).
  • With Other Attendees: Depending on event settings, your name may be visible to other attendees on the public event page. Your email and other details are never shown publicly.
  • Email Provider: We use Resend to deliver transactional emails. Your email address and name are shared with Resend solely for email delivery.
  • Hosting and Infrastructure: We use Vercel for hosting and Supabase for data storage and authentication.
  • Legal Requirements: We may disclose information if required by law or to protect our rights.

Data Security

We implement appropriate security measures to protect your personal data. This includes encrypted data transmission (HTTPS), row-level security on our database, secure authentication for organizer accounts via Supabase Auth, and unique cryptographic tokens for signup management. However, no method of transmission over the Internet is 100% secure.

Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Object to processing of your data
  • Request transfer of your data
  • Withdraw consent at any time

To exercise these rights, please contact us at privacy@simplesignup.app.

Cookies and Tracking

We use cookies and similar technologies to maintain organizer authentication sessions and store preferences such as theme settings. We do not use cookies for advertising or third-party tracking. Attendees who sign up for events without creating an account are not tracked via cookies.

Data Retention

We retain organizer account data for as long as the account is active. Event data (including signups, attendee names, and emails) is retained for as long as the event exists. Organizers may delete their events at any time, which removes all associated signup data. When an organizer deletes their account, all events and signup data associated with that account are removed.

Attendees may cancel their signups at any time using the unique manage link sent to their email, which removes their personal data from that event.

Third-Party Services

We use the following third-party services:

  • Supabase — authentication, database, and real-time functionality
  • Vercel — hosting and deployment
  • Resend — transactional email delivery

Each of these services has its own privacy policy, which we encourage you to review.

Children's Privacy

SimpleSignup is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

GDPR Compliance (EU Users)

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR).

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract: Processing necessary to provide our service (e.g., processing your event signup)
  • Consent: You have given explicit consent for specific activities
  • Legitimate Interests: Fraud prevention, security, and service improvement
  • Legal Obligation: Processing required to comply with applicable laws

Your GDPR Rights

Under GDPR, you additionally have the right to:

  • Request restriction of processing
  • Receive your data in a structured, machine-readable format (data portability)
  • Lodge a complaint with your local data protection authority

We will respond to GDPR requests within one month. Contact us at privacy@simplesignup.app.

CCPA Compliance (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

  • Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You may request deletion of personal information we have collected from you.
  • Right to Opt-Out: We do not sell your personal information. If this changes, we will provide an opt-out mechanism.
  • Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, contact us at privacy@simplesignup.app.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the service constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy, please contact us:

  • Email: privacy@simplesignup.app