Privacy

Draft. Plain-language terms written for the pilot. They will be reviewed by a lawyer before Who's Up takes payment.

Who's Up keeps as little as it can, for as short a time as it can. We don't sell data, we don't run ads, and there are no tracking pixels.

If you sign up for a spot

• The name you type, and anything else the host asks for (Instagram handle, set length, a note, first-timer).
• A random token on your phone so you can change or cancel your spot. It isn't linked to who you are.
• The host sees what you entered. When the night is wrapped up, the list is kept in that room's past shows so the host can look back; the host can delete it.
• The host may note that you didn't show, or how many guests you brought. On the Venue plan, that room's host sees a tally across its past shows (how often you've been on, and when last), matched by your Instagram handle or name. It's never shared between rooms.

If you send a picture or video

• The file and the caption and name you add. Location data (GPS) is stripped from photos and videos when they arrive.
• Only the host sees it until they approve it for the TV. You can take it back from the same phone.
• Files are deleted automatically: after 48 hours on the Free plan.

If you run a room

• Your email address, to sign you in. Sign-in links and codes are stored only as one-way hashes and expire in 15 minutes.
• A session cookie on your browser for 30 days, so you stay signed in. Signing out ends it.
• Counts of what each show used (page loads, uploads, sign-ups), as numbers only, to improve the tool.
• We email you to sign you in, and when someone invites you onto a venue's staff. No marketing email.

If you run a venue

• The venue's name, its brand (colour, font, logo) and its house slides. Logos have their camera and location data taken out when they're uploaded.
• Who's on the venue's staff (their email addresses and roles) and who has been invited. Hosts at a venue don't see the other staff's email addresses.
• If the venue pays online, Stripe handles the card. We keep only Stripe's customer number for the venue and whether the plan is paid up. Card details never reach us.

Who else sees it

Our hosting provider (servers in North America), our email provider (for sign-in and invite emails), the storage provider that keeps backup copies of the database (in North America), and Stripe for venues that pay online. Nobody else, unless the law makes us.

Your choices

Ask us to see, correct or delete what we have about you at ryan@ryanmorris.ca. Hosts can delete their past shows and pictures themselves at any time.