Privacy policy

Information an organization manages. When an organization uses CommPage, it decides who to invite and what to post. For that information — member lists, posts, comments, events and files — we act on the organization’s behalf, and the organization’s own policies also apply.

Information we manage. For visitors to this website and people who contact our sales team, we decide what is collected and how it is used, as described below.

• Account details: your email address and name, which an organization provides when it invites you or which you enter when you join.
• What you add: posts, comments, reactions, RSVPs, acknowledgements and files you upload.
• Contact-sales requests: your name, email, organization name, type and size, and any message you include.
• Technical information: a sign-in session, and the records our servers keep to operate the service and protect it from abuse.

• To provide the service: show your organization’s posts, calendar and groups.
• To send the email you would expect: sign-in codes, invitations, and notifications according to the preferences you choose.
• To reply when you contact us, and to set up your organization.
• To keep the service secure, prevent abuse and fix problems.

• We do not sell or rent personal information.
• We do not show advertising.
• We do not use third-party analytics, advertising or tracking scripts on this website or in the product.

We use one essential cookie to keep you signed in. Your device also remembers a few preferences, such as light or dark mode, in local storage. We do not use cookies for advertising or cross-site tracking, so there is nothing to opt out of.

We rely on a small number of service providers to run CommPage:

• Convex — database, file storage and application backend.
• Cloudflare — website hosting and delivery.
• Resend — email delivery.

They process information only to provide their services to us. We do not share personal information with anyone else unless the law requires it.

We keep an organization’s information for as long as it uses CommPage, and delete it when the organization asks us to or closes its account, except where we must keep something longer by law. We keep contact-sales requests for as long as we need them to respond and to manage our relationship with your organization.

• Choose how often CommPage emails you — as it happens, a daily digest, or not at all.
• Ask your organization’s administrator to correct or remove your membership.
• Contact us to access, correct or delete information we hold about you. We will respond promptly and may need to confirm it is you.

CommPage accounts are for adults. Organizations that serve children — schools and youth teams, for example — invite parents and guardians, not the children themselves. We do not knowingly collect information from children under 13.

Every connection is encrypted. Each organization’s information is kept separate from every other organization’s, and members sign in with one-time codes rather than passwords. No system is perfectly secure, but we design for it as if it had to be.

If we change this policy, we will update the date at the top of this page. If a change is significant, we will tell organization administrators before it takes effect.