Privacy Policy
Effective Date: October 2, 2026
BadgeOut ("BadgeOut," "we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the BadgeOut web application (the "Service").
Our Role
BadgeOut acts as a data controller for the account, usage, and payment information described below. For data that an organization and its users enter into the Service ("Customer Data"), BadgeOut acts as a data processor on behalf of that organization and processes it only in accordance with the organization's instructions, our Terms of Service, and any data processing agreement in place with that organization.
Information We Collect
We collect the following categories of information:
1. Account Information
When you create an account, we collect information such as:
- Email address
- Full Name
- Account preferences and settings
2. Usage & Analytics Data
We collect information about how you use the Service, including:
- Pages visited and features used
- Timestamps and interaction data
- Device, browser, and operating system information
- IP address (typically in anonymized or truncated form)
3. Payment Information
Payments are processed by Stripe. We do not store or process full credit card numbers. Stripe may collect billing details such as:
- Name
- Email address
- Payment method details
Stripe's use of your data is governed by their own privacy policy.
4. Customer Data
Any data you or your organization enters into the Service is stored securely and associated with your organization's account. Your organization owns its Customer Data.
How We Use Your Information
We use your information to:
- Provide, operate, and maintain the Service
- Authenticate users and manage accounts
- Process payments and subscriptions
- Improve features, usability, and performance, including through de-identified and aggregated data as described below
- Monitor usage, prevent abuse, and ensure security
- Communicate with you about account or service updates
Access to Customer Data
BadgeOut personnel are prohibited from viewing Customer Data except when instructed by your organization, as necessary to resolve support issues, or for security, Service integrity, or legal purposes. Personnel with such access are bound by confidentiality obligations.
Where your organization uses AI-assisted features, the relevant Customer Data is sent to our AI service providers to generate the requested output. Our agreements with those providers restrict their use of your data, including for model training. We do not use identifiable Customer Data to train machine learning models.
De-identified and Aggregated Data
We may create de-identified and aggregated data derived from Customer Data that does not identify your organization, your users, or any individual. We use this data to analyze, improve, and develop the Service, including to evaluate and improve the quality of our AI-assisted features.
Service Providers
We share information with service providers that perform functions on our behalf, including hosting and infrastructure, payment processing, email delivery, analytics and performance monitoring, and AI infrastructure. These providers act on our instructions under contracts that limit their use of your information to providing services to BadgeOut.
We may also disclose information where required by law or to protect the rights, property, or safety of BadgeOut, our users, or others.
Data Retention
We retain personal data for as long as:
- Your account is active, or
- Necessary to provide the Service, comply with legal obligations, or resolve disputes
Customer Data is retained while your organization's account is active. After it closes, we delete Customer Data from our production systems within a reasonable period, unless the law requires us to keep it longer. Your organization's administrators may export Customer Data at any time while the account is active, and you may request deletion of your account and associated data.
Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to or restrict certain processing
You can exercise these rights by contacting us.
Data Security
We use reasonable administrative, technical, and organizational safeguards, including encryption in transit and at rest and role-based access controls, to protect your data. However, no system is completely secure, and we cannot guarantee absolute security.
Where a security incident affecting personal data is notifiable, we inform affected organizations and regulators within the timeframes the law requires.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted with an updated effective date. Continued use of the Service indicates acceptance of the revised policy.
Contact
If you have questions about this Privacy Policy, contact us at: support@badgeout.io