Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information: name, email address, and password when you register.

• Profile information: timezone, profile image URL, and optional payment handles (Venmo, Zelle, PayPal).

• Event data: event titles, descriptions, dates, time slots, capacity limits, and payment amounts you create.

• Signup data: names and email addresses of participants who sign up for your events.

• Communications: messages you send us through the contact form.

We also collect limited information automatically when you use the service:

• Log data: IP address, browser type, pages visited, and timestamps.

• Cookies and similar technologies: used to keep you logged in and remember preferences.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account.

• Provide, operate, and improve the Mercurylist service.

• Send event-related emails: signup confirmations, event reminders, and welcome messages.

• Process payments through Stripe (see Payment Processing below).

• Respond to your support requests and contact form submissions.

• Send service announcements and important account notices.

• Monitor and analyze usage patterns to improve the service.

• Comply with legal obligations.

We do not sell your personal information to third parties.

3. Payment Processing

Payment processing is handled by Stripe. When you or your event participants make or receive payments through Mercurylist, Stripe collects and processes payment card information directly. We do not store full card numbers on our servers.

Event organizers who collect payments connect a Stripe account through Stripe Connect. Stripe's handling of your data is governed by the Stripe Privacy Policy.

4. Email Communications

We use SendGrid to deliver transactional emails including email verification, signup confirmations, event reminders, and welcome messages. By creating an account or signing up for an event, you consent to receive these transactional emails.

You may opt out of non-essential communications by contacting us. Transactional emails (such as email verification and event confirmations) cannot be opted out of as they are necessary to provide the service.

5. Information Sharing

We share your information only in these limited circumstances:

• Service providers: Stripe (payments), SendGrid (email), and MongoDB Atlas (database hosting) who process data on our behalf under confidentiality agreements.

• Event organizers: When you sign up for an event, the event organizer can see your name, email address, and signup details.

• Legal requirements: If required by law, court order, or to protect the rights and safety of our users.

• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.

6. Data Retention

We retain your account information for as long as your account is active. You may delete your account by contacting us at privacy@mercurylist.com. Event and signup records associated with your account will be deleted within 30 days of account deletion unless we are required to retain them for legal reasons.

7. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and JWT-based authentication. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

Mercurylist is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at privacy@mercurylist.com.

9. Your Rights

You have the right to:

• Access the personal information we hold about you.

• Correct inaccurate information in your account settings.

• Request deletion of your account and associated data.

• Opt out of non-essential email communications.

To exercise these rights, contact us at privacy@mercurylist.com.

10. Cookies

We use cookies and local storage to maintain your login session and remember preferences. You can disable cookies in your browser settings, but this may prevent some features from working correctly. We do not use third-party advertising cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the site. Your continued use of Mercurylist after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: privacy@mercurylist.com

• Contact form: mercurylist.com/contact

• Company: Signal Shift Labs