Privacy
What this is
Groupenda is a tool for people who organize a club, association or other group: members, events, announcements and, if they choose, dues. An organizer can optionally connect the group's bank account for read-only viewing so that we can show who has paid.
What we collect
- Your account: your email, your name if you give it, and your password (kept only as a one-way scramble, never in readable form). If you set up two-step sign-in we keep the authenticator secret (encrypted) and your recovery codes (scrambled).
- What you enter about your group: its name, place, interests and description; member names and, if you add them, emails, phone numbers, what each member owes, and other names a member pays under; events and the answers members give; announcements; polls and the answers given.
- Polls and secret ballots: for an ordinary poll we keep who chose what. For a secret ballot we keep only that a member voted (so nobody votes twice and turnout is known) and, separately, what was chosen, with no link to the person and no time. Not even we can tell who chose what.
- Link-ups: when two groups link up for a trip, the shared page holds the plan, the organizers' email addresses (visible to the other organizers), the first name and last initial of members who say they are coming, and messages people post. It is deleted automatically three days after the event ends, or sooner if an organizer ends it.
- The waiting list: if you ask to be told when sign-up opens, your email address. We use it once, to send your invitation, and for nothing else: no newsletters, no marketing, no sharing. It is deleted when you create your account, 30 days after the invitation, or after a year if you were never invited. To be removed sooner, email us.
- Bank information, only after you connect and only for the one account you choose: the account name and last four digits, and its transactions (date, amount, description, the sender's name, and a memo or reference when your bank provides one). You sign in to your bank in a window run by our bank-data provider; we never see your bank password. Your other accounts at the bank are not imported.
- Records of what you agreed to and what you did: which provider you connected, what we may read, when, and the internet address and browser you used; and a security log of sign-ins and important actions, with internet addresses.
The people on your member list are not account holders. You are the one giving us their details, so please only add details you are allowed to share.
What we use it for
To run your group (events, news, polls, member pages and, if you choose, who has paid), to keep your account secure, and to email you sign-in codes and notices about your account. We email a group's members only when their organizer tells us to, and members can switch those emails off from their own page. We do not sell your information, show advertising, or use analytics or tracking tools.
Who else handles it
- Plaid provides the bank connection. It runs the window where you sign in to your bank, and what it does with your information is covered by its own privacy policy (plaid.com/legal).
- Render hosts our servers and database. They are located in Frankfurt, Germany.
- IONOS delivers the emails we send you.
If we add another bank-data provider, we will list it here before you can use it.
How it is protected
- Connections to the site use HTTPS.
- Our access to a connected bank account is read-only: we can see its transactions and cannot change anything at your bank.
- You must turn on two-step sign-in (an authenticator app) before you can connect a bank, and you are asked for a fresh code to connect or disconnect one.
- The access tokens your bank-data provider gives us, and the provider's original records of your transactions, are encrypted by us before they are stored.
No system is perfectly secure, and this service is still in testing.
Cookies
One cookie keeps you signed in. It is needed for the site to work and is not used to track you.
Your choices
- Stop sharing: disconnect a bank at any time on your group's Bank tab. You can also delete the payments imported from it. You can remove access at your bank too.
- Take your data: on the Account page you can download your groups, members, dues, bank connections and imported payments in one file.
- Delete everything: on the Account page you can delete your account. It removes your groups, members, payments and bank connections, and first tells the bank-data provider to stop sharing. Your identifiers are removed from our security log. Copies may remain for a short time in our hosting provider's backups.
- A member asks to be removed: email us and we will remove their details.
- Be found, or not: a group is not listed for other organizers unless its organizer turns that on in Settings, and can turn it off again. Listed groups show only their name, place, interests, description and a size band.
Changes and contact
If this page changes in a way that matters, we will tell account holders by email. Questions or requests: [email protected].