Privacy Policy

• We collect what we need to run a marketplace: your account details, what you post, what you book, and what you pay.
• We do not sell your personal information, and we do not share it for cross-context behavioral advertising or third-party advertising.
• We do not use advertising SDKs or trackers, and we never receive or store your device location.
• Stripe handles payments — we never see your full card number.
• You can delete your account from the Profile page at any time.

Account information

Your name, email address, sign-in method (email and password, Google, or Apple), profile photo if you add one, profile details, and account settings. If your email ends in .eduand you show it is yours — by signing in with it through Google or Apple (including “Continue with UCSD”), or by tapping the link in our verification email — we record that fact in order to show a Verified Student badge. We do not contact your school and we do not confirm enrollment.

Content you create

Listings, photos, descriptions, prices, dates and start times, capacity, refund policy selections, club and membership details, club room posts, polls, form responses and files uploaded to sign-up forms (such as waivers), event photo album photos, questions, reviews, ratings, reports you submit, saved items, waitlist entries, and who you follow.

Transaction information

Bookings, RSVPs, tickets, check-in status, cancellations, refunds, payout records, service fees, and dispute or chargeback information.

Payment information

Payments are processed by Stripe. Stripe collects and stores card and bank details directly — we never receive or store your full card number. We store non-sensitive records such as amounts, dates, status, and Stripe identifiers. Sellers who accept payment complete Stripe Connect onboarding and provide identity, tax, and bank information directly to Stripe under Stripe’s own privacy policy.

Messages and communications

Direct messages, club chat and room posts, the photos and files you attach to them, and questions you send through Communly, and emails you send us for support, privacy requests, or reports.

Information about other people you give us

If you buy memberships for friends, or a club’s host or co-hosts add members by email, the email address entered for each person. We use it only to attach that membership to the matching account, and we never email or market to it. The club’s host and co-hosts can see it on their member list. It stays on the purchase or club invite record it was entered on, including after the membership is claimed or cancelled.

Device and usage information

A push notification token if you enable notifications, a private calendar feed link if you turn on calendar sync, basic usage data such as listing page views, and standard technical data such as IP address, device type, operating system, and app version, along with error and crash information.

Location

The map pin a seller chooses to place on their own listing. If you turn on location (“Near me” on Explore, the map’s locate button, or the distance on an event), your device’s position is used on your device only, to sort events by distance, show how far one is, and show where you are on the map. Distances are never worked out for an event whose address is hidden from you. Your device’s location is never sent to us, and we do not collect, track, or store it. Map images load from OpenStreetMap for whatever area the map is showing, as they do for any area you look at.

Camera

If you check guests in or hand over orders, Communly uses your device’s camera only while the scanner is open. The picture is read on your device to find a ticket’s QR code; we do not record, store, or receive images from the scanner — only the ticket code it reads, which is sent to us to check that guest in or confirm the handoff.

What we do not collect

We do not collect your government ID, your social security number, your date of birth, your biometric data, your phone’s contact list, your photo library beyond images you choose to upload, images from the ticket scanner’s camera, your browsing activity on other sites, or your precise device location.

• to create and manage your account;
• to run the marketplace — listings, search, bookings, tickets, check-in, clubs, memberships, and payouts;
• to process payments, refunds, disputes, and chargebacks through Stripe;
• to send you notifications you have enabled, such as booking confirmations and event reminders;
• to send you transactional, administrative, safety, and legal messages about your account;
• to provide customer support and respond to your requests;
• to review reports, moderate content, and enforce our Terms;
• to detect, prevent, and investigate fraud, spam, abuse, safety incidents, and illegal activity;
• to debug, maintain, secure, and improve Communly; and
• to comply with law, tax rules, payment processor rules, app store rules, and lawful requests.

We do not use your information for third-party advertising, and we do not build advertising profiles about you.

• Your name, profile photo, profile description, listings, reviews, ratings, and questions are visible to other users. Public listings (including the seller's name), listing photos, and profile photos can be viewed by anyone, even without signing in, and a listing shared by link can be viewed by anyone who has the link.
• Other signed-in users can see your public profile: your name, photo, description, Verified Student badge, rating, and when you joined. The rest of your account record — the people you have blocked, the clubs you have muted, your notification settings, push notification tokens, payout status, and referral details — is visible only to you.
• If a host hides an event's exact address, only the host, its co-hosts, and people who have booked can see the exact address and map pin; everyone else sees the general area the host entered.
• The clubs you belong to are shown on your public profile, visible to other signed-in users.
• Who you follow and who follows you, with names, can be seen by any signed-in user.
• When you book a paid or free listing, the seller and any co-hosts with full access receive your name and email as part of their guest list, so they can admit you and contact you about the booking. Every co-host, whatever their access level, can see your name, what you paid, your add-ons and sign-up form answers, and your check-in status (for a club, how many of its events you have been checked in at).
• Following is one-way and needs no approval. Anyone who follows you can see your first name in the "who's going" hint for any listing you have booked, including members-only club events.
• If you join a club, your name and profile photo appear in that club's member directory, visible to the club's other members, and anything you post in the club's chat or any of its rooms can be read by every member. The club's host and co-hosts can additionally see your membership and dues status, and anything you submit through club forms.
• Sellers and their co-hosts can see check-in status for tickets they issued, and you can see your own on your ticket.
• Listings and Explore show how many people are going to an event and, once its check-in opens, how many have checked in. These are totals only, never names, and anyone who can see the listing can see them.

Anything you post publicly may be seen, saved, or shared by others. Do not post information you would not want other people to have.

Service providers

Google Firebase (authentication, database, storage for photos and uploaded files, push notifications, and App Check, which uses the reCAPTCHA check described below), Stripe (payments and payouts), Vercel (hosting), Apple (app distribution, Sign in with Apple, wallet passes, and the Apple Push Notification service, which delivers notifications to iPhones), Google (Google Sign-In, and reCAPTCHA, which looks at device and browser signals to confirm requests come from the real Communly site or app rather than an automated script), the OpenStreetMap Foundation (map tiles from tile.openstreetmap.org, which your device requests directly — sending its IP address — whenever a map is shown), and OpenStreetMap’s Nominatim service (turning the address a seller types into a map pin). Each processes data only to provide its service to us.

Other users

As described in Section 4.

Law enforcement, schools, and safety authorities

Where we believe it is appropriate or legally required, we may share information related to safety incidents, illegal activity, threats, fraud, violence, abuse, emergencies, or lawful requests with law enforcement, emergency services, campus authorities, or affected parties.

Legal and compliance

To comply with law, legal process, tax obligations, or payment rules; to enforce our Terms; to protect our rights, property, or safety, or those of our users or the public; and to investigate fraud or safety issues.

Business transfers

If SIGMA SIGMA HOLDINGS LLC is involved in a merger, acquisition, financing, restructuring, sale of assets, or bankruptcy, information may be transferred as part of that transaction. We will require the recipient to honor this policy or notify you of any material change.

With your consent

We may share information with your consent or at your direction.

We do not sell your personal information for money or other valuable consideration, and we do not share it for cross-context behavioral advertising or targeted advertising, as those terms are defined under California law. We do not use advertising, attribution, or third-party tracking SDKs.

If this ever changes, we will update this policy, provide notice, and give you the opt-out mechanisms the law requires before the change takes effect.

We use cookies and local storage only for essential purposes: keeping you signed in, maintaining your session, remembering preferences, and security. We do not use advertising or cross-site tracking cookies.

Do Not Track. We don’t track you across other sites or services, so there is nothing for a browser’s Do Not Track signal to switch off — we treat every visitor as though it is on.

We keep information as long as reasonably necessary to provide Communly, comply with law, resolve disputes, collect fees, prevent fraud, enforce our agreements, and maintain records.

• Account and profile data: until you delete your account.
• Listings and club content: until you or we delete them.
• Event photo albums: deleted automatically three days after the event ends — sooner if the person who added a photo, the host, or we remove it. A report against a photo, and our record of it, is kept with other moderation records. People who could see the album may have saved copies before then.
• Transaction, payout, and tax records: retained as required by law and by Stripe, typically several years, even after account deletion.
• Reports, moderation records, and safety records: retained where reasonably necessary for safety, enforcement, and legal purposes.
• Backups: deleted content may persist in routine backups for a limited period before being overwritten.

You can delete your account from the Profile page, or by emailing jpjewell0703@gmail.com. We may need to verify your request.

What deletion removes

• your Communly login and authentication record;
• your profile, including your name, email, and profile details;
• every listing you created, and the private details attached to it — except a club you own that has co-hosts, which passes (with its members, chat, all of its events past and upcoming, and any payouts on them not yet released to you) to the co-host who became an admin first, skipping any whose account is closed or suspended;
• your saved items, waitlist entries, follows, reviews, and questions;
• your name on bookings you made — it is replaced with "Deleted user". Upcoming free RSVPs are cancelled, and paid bookings are refunded (less the service fee, as for any cancellation) where the host's refund policy allows it; otherwise they stand and the host is paid as agreed. Memberships and split-payment shares are not cancelled or refunded; and
• if you host: you can't delete your account while anyone has paid for an event you're hosting that hasn't ended, or holds a paid membership still running in a club you own that has no co-host to take it over — we call the event off first, or you add a co-host. Upcoming events nobody has paid for are called off, and a club with no paid members and no co-host is deleted, including its chat.

What deletion does not remove

To be accurate with you: deletion is not total erasure everywhere. These remain:

• Booking and sales records that other users need — for example, a seller's record that a ticket was sold and checked in. Bookings you made no longer show your name, but they stay linked to your former account.
• Your name and email where they were copied onto other people's records: your name as the seller on bookings you sold, your name and co-host role on other people's listings and clubs, your name on memberships you bought for friends and on split payments you organized, and your own email on a group membership purchase you made.
• Your in-app notification inbox, any "notify me when booking opens" requests, and your calendar sync link, which keeps showing any bookings and co-hosted events still linked to your former account.
• Payment, payout, refund, and tax records held by Stripe and by us, which we are legally required to retain.
• Records connected to an open dispute, chargeback, safety report, investigation, or legal obligation, retained until it is resolved and any retention period ends.
• Messages you sent in direct messages and club chats, photos you added to event photo albums (until the album is deleted, three days after the event), and your answers and files on sign-up forms — these stay with the people and clubs you sent them to.
• Content another user has already saved, screenshotted, or received — we cannot reach into other people's devices.
• Copies in routine backups, until those backups are overwritten on their normal cycle.

If you want a copy of your data before deleting, email jpjewell0703@gmail.com first — deletion cannot be undone.

Depending on where you live, you may have the right to:

• know what personal information we collect, use, and disclose;
• access a copy of your personal information;
• correct inaccurate personal information;
• delete your personal information;
• opt out of any sale, sharing, or targeted advertising (we do none of these);
• limit the use of sensitive personal information;
• withdraw consent where we rely on it; and
• not be discriminated against for exercising any of these rights.

To exercise any of these, email jpjewell0703@gmail.com from the address on your account, or use the Profile page for deletion. We will respond within the time the law requires. If we deny your request, you may appeal by replying to our response.

If you are a California resident, the California Consumer Privacy Act may give you the rights listed in Section 10. In the past twelve months, the categories of personal information we have collected are:

• Identifiers — name, email address, account ID, IP address, push token.
• Customer records — payment and transaction records (card details are held by Stripe, not us).
• Commercial information — listings, bookings, purchases, and club memberships.
• Internet or network activity — listing page views, app usage, crash and error data.
• Geolocation — only a seller-chosen map pin on a listing; we never receive your device location.
• Audio, visual, or similar information — photos and files you upload to listings, your profile, chats and direct messages, event photo albums, and sign-up forms.
• Inferences — none. We do not build profiles about you.

We collect these for the business purposes in Section 3 and disclose them only as described in Section 5. We have not sold or shared personal information in the past twelve months, and we do not sell or share the personal information of anyone. Because Communly is limited to users 18 and older, we do not knowingly sell or share the personal information of minors.

Communly is intended only for users 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that someone under 18 has created an account, we will terminate it and delete their information. If you believe a minor has provided us information, email jpjewell0703@gmail.com.

We use reasonable administrative, technical, and organizational measures designed to protect your information, including encrypted transport, authenticated access, and server-side authorization checks on sensitive operations.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential. If you believe your account has been compromised, contact jpjewell0703@gmail.com immediately.

Communly is operated from the United States and intended for users in the United States. If you use Communly from elsewhere, your information will be processed in the United States, where privacy laws may differ from those in your location.

Communly may link to third-party sites and services. This policy does not cover them. Review their privacy policies before providing information.

We may update this Privacy Policy. If we make material changes, we will provide notice by posting the updated policy, updating the effective date, or another reasonable method. Continued use of Communly after the update means you acknowledge it.

Privacy questions and requests: jpjewell0703@gmail.com
SIGMA SIGMA HOLDINGS LLC d/b/a Communly
8952 Caminito Fresco, La Jolla, California 92037
(609) 705-8530

See also our Terms of Service and Legal Center.