Privacy Policy

DuesBook ("DuesBook," "we," "us") provides membership management software for clubs, PTAs, chapters, and similar volunteer-run organizations. This policy explains what information we collect, how we use it, and the choices you have. It applies to admins who sign in to DuesBook and to the organization and member data they store with us.

Information We Collect

Admin account information. When you sign in, we receive your email address, and — if you use Google sign-in — your name and profile photo, as permitted by your Google Account settings. We use Supabase to handle authentication; we never see or store your password.

Organization information.Your organization's name, type, description, public page address, and any logo you upload.

Member information.Your organization's admins enter or import member records — names, emails, phone numbers, custom fields your organization defines, and notes. This is data your organization asks us to store on its behalf; we don't collect it directly from members ourselves.

Usage and audit data.We keep an audit trail of admin actions (e.g. "member added," "field updated") so organizations can see who changed what — this is a feature, visible to your organization's own admins, not hidden analytics. We also log basic technical data (IP address, browser type, timestamps) for security and troubleshooting.

Payment information.DuesBook does not store payment card numbers. When online dues payments are available, they are processed directly by Stripe on your organization's own connected account; we only receive confirmation that a payment occurred.

How We Use Information

• To operate, maintain, and secure DuesBook
• To send service emails — sign-in links, admin invitations, receipts, and renewal reminders you configure
• To provide support when you contact us
• To detect and prevent abuse of the service
• To improve DuesBook based on how it's actually used

Our Use of Google User Data

DuesBook's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only your basic profile and email address to sign you in — nothing more — and we never use that information for advertising.

How We Share Information

We don't sell your data or your members' data. Full stop. We share information only with the service providers that run DuesBook on our behalf, each acting under contract to protect it:

• Supabase — database, authentication, and file storage
• Vercel — application hosting
• Resend — delivering the emails DuesBook sends on your behalf
• Stripe — payment processing, once online dues payments are available

We may also disclose information if required by law, or to protect the rights, safety, or property of DuesBook or our users.

Data Retention & Your Choices

Every table in DuesBook can be exported as CSV, at any time, on every plan — including if you cancel. We keep your organization's data for as long as your account is active, plus a reasonable period afterward in case you want to reactivate or export it. If you'd like your organization's data deleted sooner, contact us and we'll take care of it.

If You're a Member of an Organization Using DuesBook

Members never create a DuesBook account or password — access to renew, RSVP, or update a profile happens through a signed link emailed to you. Your organization's admins control what information about you is stored; for questions about your own data, your organization is usually the fastest path to an answer. You're welcome to contact us directly as well.

Cookies

We use a small number of strictly necessary cookies to keep admins signed in. See our Cookie Policy for details.

Security

Connections to DuesBook are encrypted in transit (HTTPS/TLS), and we rely on access controls and industry-standard practices from our infrastructure providers to protect your data. No system is perfectly secure, but we take this seriously and will notify affected organizations if we become aware of a breach affecting their data.

Children's Privacy

DuesBook is intended for use by adult volunteers administering organizations, and is not directed at children. We do not knowingly collect personal information from children under 13.

International Data Transfer

DuesBook's infrastructure runs in the United States. If you use DuesBook from outside the U.S., your information will be transferred to and processed in the U.S.

Changes to This Policy

As DuesBook adds features — like online payments — we'll update this policy to reflect them, and post the new "last updated" date above.

Contact Us

Questions about this policy or your data? Email privacy@duesbook.com.