Privacy.
This policy explains what information Doing Things collects from you, why, who we share it with, and the choices you have. We're a small operation; we collect what we need to curate gatherings and run the service, and not much more.
1. What we collect
When you apply or RSVP, we collect:
- Basics:first name, email, age range, city, neighborhood, gender (optional), and the answers you give in the application form (what you do, what you're into, what you can talk about for hours, what brought you here).
- A photo of you that you upload during the application. We use it to recognize you at gatherings; it is not displayed publicly unless you separately opt in to marketing use (see our Terms of Service §7).
- Payment information when you RSVP — handled by Stripe. Stripe processes your card details directly; we never see your full card number. We do see and store: the amount, the date, and a Stripe identifier we can use to look up the transaction.
- Communications we exchange with you (replies to our emails, anything you send to hi@doingthings.club).
- Basic technical data when you visit the site: IP address, browser type, pages viewed. Standard web server logs.
2. How we use it
- To curate gatherings— your application answers help us decide who's at which Sunday.
- To run RSVPs and payments — process your seat reservations and confirm them.
- To communicate with you— confirmation emails, group reveals, venue details, the “you're in” email, the day-of reminder, post-event follow-ups.
- To improve the service— understand what works and what doesn't, internally.
- To send marketingonly if you've opted in. You can unsubscribe at any time using the link in the email or by writing to us.
3. Who we share it with
We share your information only with the service providers we use to run the operation:
- Supabase — where we store your application and RSVP records and the photo you upload.
- Stripe — processes payments.
- Resend — sends our transactional emails.
- Vercel — hosts the website.
- Other members at a gathering you attend— for the group reveal email (sent five days before the gathering), we share with the other selected members: your first name, what you do, your neighborhood, and a snippet of your “what you could talk about for hours” answer. This is the curated introduction that lets the group arrive already half-met.
We do not sell your personal information to anyone, ever. We do not use your data for behavioral advertising.
4. How long we keep it
- Application data: while your membership is active and for up to two years after, then we delete or anonymize.
- Payment records: as required by tax and accounting law (typically seven years).
- Photos: until you withdraw consent or close your account.
5. Cookies and tracking
We use a small number of essential cookies to keep you signed in to the admin area and to remember your RSVP session. We do not use third-party analytics, advertising trackers, or behavioral profiling tools at this time. If we add them in the future, this policy will be updated and you'll see a banner the next time you visit.
6. Your rights (California residents and others)
Under the California Consumer Privacy Act (CCPA) and similar laws elsewhere, you have the right to:
- Know what personal information we hold about you.
- Deletethe personal information we hold about you, subject to limits where we're required to retain it (e.g., payment records).
- Correct inaccurate personal information.
- Opt out of marketing communications at any time.
- Non-discrimination— we won't treat you differently for exercising any of these rights.
To exercise any of these rights, email us at hi@doingthings.club. We'll respond within 30 days.
7. Security
We protect your information using industry-standard practices: encrypted connections (HTTPS), encrypted-at-rest databases, access controls on our admin tools, and routine review of who can access what. No system is perfectly secure, but we treat your data carefully.
8. Children
Doing Things is for adults (18+). We do not knowingly collect information from anyone under 18. If you believe a minor has submitted information, please contact us and we'll delete it.
9. International users
Doing Things operates in the United States. If you're accessing us from outside the U.S., your information is transferred to and stored in the U.S., where data protection rules may differ from your country.
10. Changes to this policy
We may update this policy as our practices evolve. The current version will always be at this URL with an updated “Last updated” date. Material changes will be announced by email.
11. Contact
Privacy questions, requests, or anything else: hi@doingthings.club.