Privacy Policy

Two kinds of information

When your association signs up for The Guild, your association is our customer, and it controls the information it enters about its own member companies, people, event registrants, donors, and other contacts (“Customer Data”). We process Customer Data to provide the Service your association has asked for. Separately, we collect a smaller set of information directly about the people who use The Guild on their association’s behalf, in connection with the account and billing relationship described below. This policy covers both, and says which is which as it goes.

Information we collect from you directly

• Account information. When someone creates an account, or is invited to one, we collect the name, email address, and password used to create it, along with basic information about the association itself.
• Guild subscription billing. If your association sets up billing for its own Guild subscription, our payment processor, Stripe, collects and stores the payment details involved. The Guild does not receive or store your full card number.
• Support and contact requests. If you contact us through the Contact page, the Help Center, or email, we keep what you send us so we can respond.
• Two-factor authentication.If you enable optional two-factor authentication, our authentication provider, Supabase, stores what’s needed to verify it.

Information your association stores in The Guild

This is Customer Data — information an association enters or collects about its own members, contacts, registrants, and donors, not information we collect about our own customers:

• Member and company records — company profiles, the people affiliated with each one, membership types, and status.
• Event information — registrations, and where an event supports it, vendor and sponsor sign-ups and check-in records.
• Financial information — invoices, payments, credits, and refunds recorded in the Finance module. Where an association activates Guild Payments, online payments are processed by Stripe; The Guild does not store full payment card numbers.
• Donation information — donor names and contact details, gift amounts, the cause a gift was made to, and any acknowledgment or receipt sent.
• Communications information— recipient lists built from an association’s own member and event data, and delivery, suppression, and unsubscribe information for campaigns sent through The Guild.

Technical information

We collect limited technical information needed to operate The Guild securely — for example, we may use IP addresses to apply rate limits and help prevent abusive requests. We do not currently use third-party advertising or analytics trackers on The Guild.

How we use information

• To provide the Guild features your association has signed up for — membership, events, finance, communications, and donations.
• To operate your association’s account and subscription — billing, support, and service communications.
• To help keep the Service secure and prevent abuse.

We do not use the Customer Data an association stores in The Guild to advertise to its members, registrants, or donors, and we do not sell personal information.

How associations control their data

• Administrators manage, edit, and remove the records their association has entered, directly within the application.
• Some pages an association chooses to make public — a public member directory, event listing pages, or a donation page — are accessible without a login by design, because the association chose to publish them.
• Certain pages, such as an emailed invoice or receipt link, are accessible to anyone with the link itself; keeping those links private is part of keeping that information private.
• Recipients of campaign emails sent through The Guild can manage their subscription preferences or unsubscribe at any time using the link included in every campaign email.

Service providers we use to operate The Guild

• Supabase — our database and authentication provider. Account sign-in, sessions, and stored application data are hosted with Supabase.
• Resend — our email delivery provider. Account emails (such as verification and password reset), receipts, and communications campaigns sent through The Guild are delivered through Resend.
• Stripe— our payment processor, in two separate capacities: your association’s own Guild subscription billing, and Guild Payments, the optional add-on described below.

We share information with these providers only as needed for them to perform their role in operating The Guild, not for their own independent marketing purposes.

Guild Payments and payment processing

Guild Payments is built on Stripe Connect. When an association activates Guild Payments, Stripe creates a separate, dedicated Stripe account for that association and collects the identity and business information Stripe requires to open it. That relationship, and the fees involved, are described in the Guild Payments Terms & Fee Disclosure, which an association agrees to separately before activating Guild Payments. The Guild does not store the full card numbers or bank details used in a Guild Payments transaction — Stripe handles those directly.

Data sharing

We share information with the service providers described above so they can help us operate The Guild. We do not sell personal information, and we do not share the Customer Data an association stores in The Guild with other associations on the platform — every association’s data is kept separate.

Accessing, correcting, or deleting information

If you’re a member, registrant, donor, or contact whose information an association has entered into The Guild, that association controls that information and is the right first point of contact for accessing, correcting, or deleting it. If you’re an association administrator, you can access and correct most information directly within the application. To request deletion of your association’s account and its associated data, or if you have questions we haven’t answered here, contact us at support@guildcollective.io.

Security

Information sent between your browser and The Guild is encrypted in transit (HTTPS). We rely on the security practices of our service providers — Supabase, Stripe, and Resend — for the parts of the Service they operate. No system is completely secure, and we can’t guarantee absolute security.

Children

The Guild is a business tool intended for use by association staff, administrators, and adult members. It isn’t directed to children, and we don’t knowingly collect information from children through it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we’ll update the date at the top of this page.

Contact

Questions about this Privacy Policy can be sent to support@guildcollective.io, or through our Contact page.