Privacy Policy

TeamSpot ("we," "us") runs theteamspot.com. This policy explains what we collect, why, and what you can do about it. Short version: we collect the minimum needed to run a shared schedule, and we don't sell your data.

What we collect

You give us:

• Your name — so your group knows who's coming
• Your email address — for sign-in and reminders
• Group and RSVP content — group names, schedules, meetup locations, notes, and your yes/no/maybe responses
• Information about other people, if you're an organizer who invites members by name or email. We use it only to send that invitation and to run the group. Anyone can email us to have their information removed, whether or not they have an account

Sign-in: You can sign in with Google or with your email address. We use Clerk to handle authentication. Clerk stores your login credentials on our behalf — we never see or store your password. If you sign in with Google, we receive your name, email address, and a Google account identifier, and nothing else.

We collect automatically:

• Usage and device data — IP address, browser and device type, pages viewed, timestamps, and referring page, gathered through our analytics tools
• Cookies — a session cookie to keep you signed in, plus analytics cookies

We do not collect: phone numbers, payment or credit card information, precise location from your device, or sensitive personal information such as health, biometric, financial, or government ID data.

Why we use it

• To operate the Service: create your account, show your group's schedule, record RSVPs
• To send you messages about the Service: reminders, RSVP changes, waitlist notifications, account and security notices, and occasional updates about TeamSpot itself
• To display relevant context such as weather for a scheduled meetup
• To understand aggregate usage so we can fix bugs and improve the product
• To prevent abuse, spam, and fraud
• To comply with the law

About email. You give us your email address so we can run the Service for you, and by signing up you're agreeing to hear from us at it. Most of what we send is operational — reminders, RSVP activity, account and security notices — and those continue as long as you have an account. From time to time we may also tell you about new features, changes, or other TeamSpot news. Anything that isn't operational has a clear way to unsubscribe, and we honor those promptly. We don't rent, sell, or share your address with anyone else who wants to email you.

Who we share it with

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

We share it only with:

• Service providers who help us run TeamSpot — hosting, authentication (Clerk), database, email delivery, analytics, error monitoring, and weather data vendors — and only to the extent they need it to do that work. Weather lookups send only a general location, never your name or email
• Your group — the people in a group can see your name and your RSVP status. That's the point of the product. Your email address is not shown to other members
• Authorities, if we're legally required to, or if we believe in good faith that disclosure is necessary to prevent harm
• A successor, if TeamSpot is ever acquired or merged — you'll be notified before your information becomes subject to a different policy

Google sign-in

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use the information Google gives us only to authenticate you and operate your TeamSpot account. We do not use it for advertising, we do not sell it, and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with the law, or where the data is aggregated and de-identified.

You can revoke TeamSpot's access at any time in your Google account permissions.

Analytics and monitoring

We use two third-party tools to understand how the Service is used and to fix what's broken:

• PostHog — product analytics: which pages and features get used, and how people move through the app
• Sentry — error monitoring: when something breaks, it records the error and the technical context around it so we can fix it

These providers set cookies and receive usage data, including your IP address, on our behalf. We do not use either of them to build advertising audiences or to target ads.

Third-party tracking across other sites: We do not allow third parties to collect personally identifiable information about your activity on other websites through the Service.

Do Not Track: Some browsers send a "Do Not Track" signal. There's no common standard for how sites should respond, so we don't currently respond to those signals. We treat all visitors the same way regardless.

How long we keep it

We keep your information for as long as we need it to run the Service and no longer:

• Account data — while your account is active
• Group and RSVP data — while the group exists
• Analytics data — kept in aggregate, and only for as long as it's useful for improving the product
• Backups and server logs — kept briefly on a rolling basis, then overwritten

If you ask us to delete your account, we remove your personal information from our active systems promptly, and it clears from routine backups as those cycle. We keep only what the law requires us to keep. Your past RSVPs may remain visible to your group without your name attached.

Your rights and choices

Whatever state or country you're in, you can ask us to:

• Access a copy of the information we hold about you
• Correct anything that's wrong
• Delete your account and your data
• Unsubscribe from anything that isn't an operational message

Email us and we'll take care of it. We won't treat you differently for exercising any of these rights.

California residents: Under the CCPA/CPRA you have the rights above plus the right to know the categories of information collected, the sources, the business purpose, and the categories of third parties we disclose to — all described in this policy. We have not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months. Categories collected in that period: identifiers (name, email, IP address, account ID) and internet activity information. We collect these from you directly, from Google when you use it to sign in, from group organizers who invite you, and automatically from your browser.

Outside the US: TeamSpot is operated from and intended for the United States, and your information is stored there. If you use it from elsewhere, you're consenting to that transfer. We'll honor access, correction, and deletion requests from anyone, wherever they are.

Security

We use HTTPS everywhere, rely on reputable infrastructure providers, and hand password storage to a dedicated authentication provider rather than rolling our own. No system is perfectly secure, so we can't guarantee absolute security — but if a breach affects your data, we'll notify you as required by law.

Children

TeamSpot is not directed at children under 13, and we don't knowingly collect information from them. Organizers are not permitted to add anyone under 13 to a group. If you're a parent or guardian and you believe a child under 13 has information in TeamSpot, email us and we'll delete it promptly.

Changes to this policy

We may update this policy. If the changes are material, we'll post a notice in the app or email you before they take effect, and we'll always update the date at the top.

Contact

Questions, requests, or privacy concerns — including access, correction, and deletion requests — go to hello@theteamspot.com. We answer every request.

TeamSpot is operated by Nathan Katz, an individual based in Illinois, United States.