Privacy Policy

1Information We Collect

1.1 Information You Provide Directly

When you register for an account or use our services, we collect:

• Identity & Contact: First name, last name, email address, phone number
• Account Credentials: Password (stored as a one-way cryptographic hash — we never store your plaintext password)
• Studio Affiliation: Studio name (optional for independent dancers and ambassadors)
• Ambassador-Specific Information: Full mailing address, date of birth, tryout location preference, t-shirt size
• Parent / Guardian Information: For ambassador accounts, the first and last name of a parent or guardian (collected because ambassadors may be minors)
• Event Registration Data: Names and details of students and observers you register for events
• Profile Media: Headshot or profile image (ambassador accounts)
• Payment Information: Billing details submitted during event registration or purchases. Payment card data is processed directly by Stripe and is never stored on our servers
• Communications: Any messages, support requests, or feedback you send us

1.2 Information Collected Automatically

When you access our platform, we or our service providers may automatically collect:

• Authentication Tokens: JSON Web Tokens (JWTs) stored in your browser's local storage to keep you logged in
• Log Data: Server-side request logs including IP address, browser type, pages visited, and timestamps
• Device Information: Browser version and operating system type for compatibility purposes

1.3 Information We Do Not Collect

We do not collect Social Security numbers, government-issued ID numbers, or sensitive financial account information. We do not collect precise geolocation data beyond what you voluntarily provide as an address.

2How We Use Your Information

We use the information we collect to:

• Provide and operate the platform — creating and managing your account, processing event registrations, and enabling core features
• Authenticate your identity — verifying your email address and maintaining secure sessions
• Process transactions — handling payments for events and other purchases through Stripe
• Communicate with you — sending transactional emails such as email verification, password resets, registration confirmations, and event updates
• Send administrative notifications — alerting studio administrators of new registrations and event sign-ups
• Improve our services — analyzing usage patterns to fix bugs, improve performance, and develop new features
• Comply with legal obligations — responding to lawful requests from public authorities and meeting applicable regulatory requirements
• Protect security — detecting, investigating, and preventing fraudulent or unauthorized activity

We do not sell your personal information, use it for behavioral advertising, or share it with data brokers.

3How We Share Your Information

We do not sell or rent your personal information. We may share it in the following limited circumstances:

3.1 Service Providers

We share information with third-party vendors who help us operate our platform:

• Stripe — payment processing. Stripe's privacy policy is available at stripe.com/privacy
• Email delivery provider — for sending transactional emails (verification, password resets, notifications). Our provider processes your email address solely to deliver messages on our behalf
• Cloud hosting provider (DigitalOcean) — our servers and databases are hosted on DigitalOcean infrastructure

All service providers are contractually required to protect your data and use it only for the purposes we specify.

3.2 Studio Administrators

If you are affiliated with a dance studio, your profile information (name, email, phone, registration history) may be visible to administrators of that studio within the RadiatePro platform.

3.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, personal information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4Cookies & Tracking

Our platform uses minimal browser storage technologies:

• Local Storage: We store your authentication token (JWT) in your browser's local storage to maintain your logged-in session. This data remains on your device and is not transmitted to third parties. You can clear it at any time by signing out or clearing your browser data.
• Session Data: Standard server-side session information may be used to manage your requests during a browsing session.

We do not use third-party advertising cookies, cross-site tracking pixels, or analytics platforms that profile your browsing behavior across other websites.

5Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:

• Account data is retained for the lifetime of your account plus a reasonable period thereafter for legal and operational purposes
• Event registration records are retained for a minimum of three (3) years for auditing and dispute resolution purposes
• Password reset and email verification tokens expire within 24 hours and are deleted from our database upon use or expiry
• Log files are retained for up to 90 days and then automatically purged

When you request account deletion, we will delete or anonymize your personal information within 30 days, except where we are required by law to retain it.

6Children's Privacy

Our platform is not directed to children under the age of 13. For ambassador accounts where the registrant may be a minor:

• We require a parent or guardian's name to be provided at registration
• We collect date of birth to determine age and apply appropriate data handling
• We do not use minor participants' information for marketing purposes
• Parents and guardians may contact us to review, correct, or request deletion of their child's information at any time

If we learn that we have inadvertently collected personal information from a child under 13 without verifiable parental consent in a context that requires it, we will take steps to delete that information promptly. Please contact us at the address in Section 11 if you have concerns.

7Data Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Passwords are hashed using a strong, salted cryptographic algorithm (bcrypt) — we cannot retrieve your plaintext password
• Data in transit is encrypted using TLS (HTTPS)
• Authentication tokens are short-lived JWTs signed with a secret key
• Payment data is handled entirely by Stripe and is never stored on our servers
• Database access is restricted to authorized application services and administrators
• Time-limited tokens are used for email verification and password resets, minimizing exposure windows

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

8Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

8.1 Access & Portability

You may request a copy of the personal information we hold about you in a commonly used, machine-readable format.

8.2 Correction

You may update your account information at any time through your dashboard profile settings. You may also contact us to correct inaccurate information.

8.3 Deletion

You may request that we delete your account and associated personal information. We will fulfill such requests within 30 days, subject to any legal obligations to retain certain records.

8.4 Opt-Out of Communications

You may opt out of non-essential email communications by contacting us. Please note that transactional emails (account verification, password resets, event confirmations) are necessary for the operation of the service and cannot be opted out of while maintaining an active account.

8.5 California Residents (CCPA/CPRA)

California residents have the right to know what personal information we collect and how it is used, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right not to be discriminated against for exercising these rights. To exercise your rights, contact us as described in Section 11.

8.6 EEA / UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, our legal basis for processing your personal information is typically the performance of our contract with you (providing the service), compliance with legal obligations, or our legitimate interests where they are not overridden by your rights. You have rights of access, rectification, erasure, restriction of processing, data portability, and the right to object. You also have the right to lodge a complaint with your local supervisory authority.

To exercise any of your rights, please contact us at the details in Section 11. We will respond within 30 days.

9Third-Party Links

Our platform may contain links to third-party websites or services (for example, studio social media pages or partner organizations). This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content or privacy practices of external websites.

10Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Effective Date" at the top of this page
• Send an email notification to registered account holders
• Display a prominent notice within the platform

Your continued use of RadiatePro after the effective date of any updated policy constitutes your acceptance of the changes. If you do not agree to the updated policy, you should stop using the service and request account deletion.

11Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We take privacy inquiries seriously and will respond within 30 days of receiving your request.