Privacy Policy

What we collect

Account details — your email, name, username, and (optionally) an avatar. If you sign in with Google, we receive your name, email, and profile picture from Google. Content — the posts, comments, and events you create. Payments — if you join a paid community, Stripe processes your payment; we receive confirmation and subscription status but never your full card details. Technical data — basic logs needed to run and secure the service.

How we use it

To provide the service: authenticate you, show your communities, deliver email notifications you’ve opted into, process payments, and keep the platform safe.

Who we share it with

We use trusted providers to run Cala — Supabase (hosting and database), Stripe (payments), Resend (transactional email), Google (Google sign-in, our outreach email, and Gemini for drafting previews), Meta (when you leave your details on one of our ads), and PostHog (product analytics, hosted in the EU). We don’t sell your personal data.

We use PostHog to see which pages and features people use, so we can improve Cala. In the creator dashboard and on our sign-up page we may record sessions to spot what’s confusing, including what you type there (passwords are never recorded). We never record member pages.

Leads and outreach

If you leave your details on one of our ads (for example on Instagram or Facebook) and ask for a preview of your community, we receive your name, email and social handle from Meta. To build the preview you asked for, we look at your public Instagram or TikTok profile and posts, and the website linked from it, and use Google Gemini to draft a private preview: rooms, a name and a suggested member price. The preview is not published, and only you get the link to it.

Faye, our founder, then emails you about your preview from faye@trycala.club (sent through Google). We send a small number of follow-ups at most. Reply “no” to any of them, or email faye@trycala.club, and we stop and delete your details. If you don’t sign up, we delete your details and any unclaimed preview 90 days after our last email.

Your choices

You can access, correct, or delete your account data by emailing us. Deleting your account removes your profile and content, subject to any records we must keep for legal or billing reasons.

Retention and security

We keep your data for as long as your account is active, then delete or anonymise it within a reasonable period. OAuth tokens are encrypted at rest, and access to the service role is restricted to server-side code.

Changes

We may update this policy as the product evolves; we’ll note material changes here.

Contact

For any privacy request, email faye@fnstudios.app.