Privacy Policy

Effective Date: June 1, 2026

Simon Says Sign Up ("we," "us," or "our") operates the website simonsayssignup.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

1. Information We Collect

Account Information (Organization Administrators)

When you register for an account, we collect your name, email address, and a display name. We also store your chosen time zone preference and record the date your account was created and your most recent login.

Organization Information

Administrators may provide organization details including the organization name, description, website URL, branding assets (logo, header image), and brand colors.

Participant Information

When participants sign up for a sheet, we collect their first name, last name, and email address. A phone number may be collected if the sheet administrator includes it as a field. Participants do not need to create an account to sign up. We also collect any responses to custom fields configured by the sheet administrator, as well as optional comments submitted with a sign-up.

Sign-Up Activity

We record sign-up activity including which slots a participant has signed up for, quantities, sign-up dates, cancellations, waitlist status, check-in status, and overall engagement history across sheets within an organization.

Payment Information

If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We store your Stripe customer ID and subscription ID for billing management, but we do not store your credit card number, bank account details, or other sensitive financial information on our servers.

Technical Information

We may collect IP addresses, browser type, and basic usage data through server logs and audit records for security and troubleshooting purposes.

2. How We Use Your Information

We use collected information to:

  • Provide and operate the sign-up sheet service
  • Send email confirmations when participants sign up for a slot
  • Send reminder emails before events (when configured by administrators)
  • Notify waitlisted participants when a spot becomes available
  • Enable participant login via email verification codes
  • Allow administrators to view engagement history and manage their organization
  • Process subscription payments and manage billing
  • Send account-related communications (welcome emails, trial notifications, billing updates)
  • Maintain audit logs for security and accountability
  • Improve and maintain the Service

3. Third-Party Service Providers

We share information with the following third-party processors, solely for the purposes of operating the Service:

  • SendGrid (Twilio) — We use SendGrid to send transactional emails including sign-up confirmations, reminders, waitlist notifications, verification codes, and account communications. SendGrid receives recipient email addresses and email content. SendGrid Privacy Policy.
  • Stripe — We use Stripe to process subscription payments. Stripe receives the payment and billing information you provide during checkout. Stripe Privacy Policy.
  • Microsoft Azure — The Service is hosted on Microsoft Azure App Service. Your data is stored in Azure-hosted databases. Microsoft Privacy Statement.

We do not sell, rent, or trade your personal information to any third party.

4. Cookies

We use cookies strictly for essential functionality. Specifically, we use ASP.NET Core Identity authentication cookies to keep you signed in after you log in to your administrator account. We also use a session cookie for participant email verification login. These cookies are necessary for the Service to function and cannot be disabled.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies. We do not participate in ad networks or behavioral advertising.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Key retention practices include:

  • Sheets are never permanently deleted. Completed sheets are archived rather than removed. This is central to the engagement history feature that allows administrators to track participation over time.
  • Sign-up records are retained indefinitely in an archived state, even after cancellation, to maintain accurate engagement history.
  • Participant records are retained per organization to support ongoing engagement tracking. Participants may request deletion (see Section 6).
  • Account data is retained until you request account deletion or your subscription is terminated.

We use soft deletion throughout the Service, meaning records are marked as inactive rather than permanently erased from the database, except where deletion is specifically requested under your data rights.

6. Your Rights

You have the following rights regarding your personal data:

  • Access — You may request a copy of the personal data we hold about you.
  • Correction — You may request that we correct inaccurate or incomplete personal data.
  • Deletion — You may request that we delete your personal data. For administrator accounts, this includes your account and associated organization data. For participants, this includes your participant record and sign-up history within a specific organization.
  • Data Portability — Administrators can export sign-up data via the CSV export feature available within the Service.

To exercise any of these rights, please contact us at support@simonsayssignup.com. We will respond to your request within 30 days.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal data, including encrypted data transmission (HTTPS/TLS), secure password hashing via ASP.NET Core Identity, and role-based access controls within organizations. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at support@simonsayssignup.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or by posting a notice on the Service. The "Effective Date" at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Simon Says Sign Up
Email: support@simonsayssignup.com
Website: simonsayssignup.com