1. Introduction
SignUpWave (“we”, “us”, or “our”) operates signupwave.com and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. By using SignUpWave, you agree to the practices described in this policy.
If you have questions or concerns, contact us at hello@signupwave.com.
2. Information We Collect
Information you provide directly
- Account registration data: name and email address
- Profile information you choose to add
- Sign-up sheets and events you create
- Communications you send us (support requests, feedback)
- Payment information processed by Stripe (we never store raw card data)
Information collected automatically
- Log data: IP address, browser type, pages visited, timestamps
- Device information: device type, operating system, browser
- Usage patterns: features used, actions taken within the app
- Cookies and similar tracking technologies
From the SignUpWave iOS app
- In the current iOS release, scans are read on your device and voice input uses local speech recognition when available. In the updated app, voice input is unavailable when local recognition is unsupported; you can type instead. Older beta builds may use Apple's speech service when local recognition is unavailable. Photos are not uploaded. Text you review and submit to Smart Draft is sent to our servers and OpenAI.
- Home Screen widgets store a copy of your upcoming sign-ups on your device so they can display without a network connection. This cache is deleted when you sign out or delete your account.
- Calendar events are added through the system calendar interface; the app does not read your calendar.
- Crash reports and product analytics from the app are handled by Sentry and PostHog as described in Third-Party Service Providers below.
Information from third parties
- If you sign in with Google or Apple, we receive your name and email address from those providers
- Billing and subscription information from Stripe
3. How We Use Your Information
We use your information to:
- Provide, operate, and maintain the SignUpWave service
- Create and manage your account
- Process payments and manage subscriptions
- Send transactional emails (account confirmation, sign-in codes, billing receipts)
- Respond to support requests and feedback
- Detect, prevent, and investigate fraudulent or abusive activity
- Improve our service through aggregated, anonymized analytics
- Comply with legal obligations
We do not sell your personal data to third parties. We do not use your data for advertising purposes.
4. Third-Party Service Providers
We work with trusted third-party providers to operate our service. Each provider is bound by appropriate data processing agreements:
Supabase — database, authentication, and file storage. Your account credentials and application data are stored on Supabase infrastructure. Privacy policy:
supabase.com/privacy Stripe — payment processing. Stripe handles all credit card data under PCI DSS compliance. We only store Stripe customer IDs, not raw payment details. Privacy policy:
stripe.com/privacy Resend — transactional email delivery (account confirmations, sign-in codes, notifications). Privacy policy:
resend.com/privacy Google — Google OAuth sign-in (optional). When you choose “Sign in with Google”, Google shares your name and email with us. Privacy policy:
policies.google.com/privacy Apple — Sign in with Apple (optional). When you choose “Sign in with Apple”, Apple may share your name and email with us. Privacy policy:
apple.com/legal/privacy OpenAI — powers Smart Draft. The event description you submit (typed, transcribed from your voice, or extracted from a photo you scan) is sent to OpenAI to generate your sheet draft. The updated iOS app asks permission before the first submission for each account on a device. You can decline and create a sheet manually, or turn off future sharing in Settings. Turning sharing off does not recall text previously submitted. It is not used to train OpenAI models under our API terms. Privacy policy:
openai.com/privacy PostHog — product analytics. Helps us understand which features are used so we can improve SignUpWave. Usage events are associated with your account; we do not sell this data or use it for advertising. Privacy policy:
posthog.com/privacy Sentry — error and crash reporting. When something breaks, technical diagnostics (device model, OS version, stack trace) are reported so we can fix it. Privacy policy:
sentry.io/privacy 5. Cookies
We use cookies and similar technologies to maintain your session, remember preferences, and analyze usage. These include:
- Strictly necessary cookies: Required for authentication and security (e.g., your session token). Cannot be disabled.
- Analytics cookies: Help us understand how people use SignUpWave. You may opt out.
You can control cookies through your browser settings. Disabling strictly necessary cookies may prevent you from logging in.
6. Data Retention
Safety reports include the sheet, report reason, optional details, and any reply email you provide. Only the safety team can access the report queue; the reported organizer does not see it. We use reports to investigate abuse and may send a notification through Resend. Reports are reviewed for removal after 90 days unless needed for an ongoing investigation or legal obligation. Organizer blocks and Smart Draft sharing preferences are stored locally on your device.
We retain your personal data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal, tax, or fraud prevention purposes.
7. Data Security
We implement industry-standard security measures including encryption in transit (TLS) and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (right to be forgotten)
- Portability: Request your data in a portable format
- Objection: Object to certain processing activities
To exercise these rights, email hello@signupwave.com. We will respond within 30 days.
9. Children's Privacy
SignUpWave is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
10. International Transfers
Your data may be processed and stored in countries other than your own, including the United States. We ensure appropriate safeguards are in place (such as Standard Contractual Clauses) when transferring data across borders.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the “Last updated” date, and by sending an email notification for material changes.
12. Contact Us
For privacy-related questions or requests, please contact: