Privacy Policy (Draft)
Last updated: draft pending legal review
1. Who we are
Activate The Crowd is operated by Truth Excellence Group LLC, based in Las Vegas, NV PENDING: CONFIRM. You can reach us at any time through our contact page.
2. What we collect
From clients, we collect the information you give us through forms and during projects, such as your name, contact details, and event information. From fans at events, we collect votes, limited device signals used for fraud prevention, email addresses or phone numbers you choose to share, and photos you upload. Device signals for fraud prevention are limited to screen size, timezone, language, platform, hardware concurrency, touch support, and an anonymous canvas rendering hash — combined into a single salted hash; the raw signals never leave your browser, and we never store your raw IP address. This site also uses analytics cookies and currently loads PostHog analytics.
3. How we use it
We use the information we collect to deliver our services, prevent fraud and abuse, produce event reports and analytics, and contact you when you have given us permission to do so.
4. Event organizers' role
When fans opt in at an event, the information they choose to share is provided to the event organizer. The exact organizer/processor relationship for each event will be finalized in the applicable agreement.
5. What sponsors receive
Sponsors receive only aggregate statistics or information that fans have explicitly opted in to share. We do not give sponsors individual fan data without consent.
6. Sharing
We share information with the service providers that help us operate, such as hosting, SMS, email, and payment providers. We do not sell personal data.
7. Retention and deletion
We keep personal information only as long as needed to provide our services and meet legal obligations, and we delete or de-identify it when it is no longer required. Device-fingerprint hashes used for vote fraud prevention are automatically deleted 90 days after an event closes (configurable per deployment). You may request deletion at any time through our contact page.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or opt out of certain uses of your personal information, including rights under CCPA/CPRA and other state privacy laws. Contact us to exercise these rights.
9. Children
Our services are not directed at children under 13, and we do not knowingly collect their personal information, in line with COPPA. Configuration for school events will be described in the final policy.
10. SMS
If you opt in to text messages, we will tell you the expected frequency, and you can reply STOP to opt out or HELP for help at any time, consistent with TCPA and carrier rules.
11. Fan data
Fan registration at events is consent-based: fans choose whether to share an email, phone number, name, ZIP, age range, or answers to custom questions, and every consent checkbox starts unchecked. We record the consent text version, timestamp, and an IP hash with the exact checkbox states in a consent ledger. Organizers can export only the lists fans consented to, view is masked by default, and any reveal is logged. Fans can request deletion from the opt-in screen, and organizers can delete a fan at any time — personal data is removed while votes remain anonymized. Placeholder pending legal review PENDING: CONFIRM.
12. Security
We use reasonable administrative and technical safeguards to protect the information we hold, including hashed credentials, short-lived sessions, and access controls. No method of transmission or storage is perfectly secure.
13. Changes, effective date, and contact
We may update this policy from time to time and will post the new effective date here. Questions can be sent through our contact page.