Privacy Policy

When you use regPlanit we may collect:

• Account info — name, email, phone, password (hashed via Firebase Auth).
• Registration info — date of birth, gender, address, emergency contact, custom-question responses, waiver acceptance.
• Payment info — handled directly by Stripe; we store the Stripe charge id and amount, never your full card number.
• Communications — emails we send you via Resend (delivery + bounce events).
• Usage — basic logs (IP, user-agent, page) for security and debugging.

• To process your registration and payment.
• To send you race-related transactional email (confirmations, schedule changes, waiver reminders, post-race notes from the Race Director).
• To make registration rosters and reports available to the Race Director and their authorized staff.
• To detect fraud, abuse, and reconcile our books.
• To comply with legal obligations (tax remittance, lawful requests).

Personal data is shared only with parties who need it to deliver the service:

• Race Directors for events you register for — they receive the participant data and any custom-question responses.
• Stripe for payment processing (and Stripe Tax for sales-tax calculation).
• Google Cloud hosts our database and runs our servers.
• Resend delivers our transactional email.
• RunSignUp when a Race Director chooses to import historical participant data — direction is RunSignUp → regPlanit only.
• Law enforcement, when required by valid legal process.

We do not sell personal data and we do not share it with advertisers.

regPlanit uses essential cookies for sign-in. We do not use third-party advertising cookies. Firebase Auth manages its own short-lived session cookies for authentication.

• Access and corrections: sign in and update your profile, or email us.
• Delete account: email us to request deletion. We may retain limited records (transactions, waivers) where required by law or for legitimate business purposes.
• Email preferences: unsubscribe links appear in marketing-style email. Transactional email (registration confirmations, refunds, race-day updates) is required to deliver the service.

Participants under the age of majority must be registered by a parent or guardian. We do not knowingly collect personal data directly from children under 13.

We store data in encrypted PostgreSQL on Google Cloud, transmit it over HTTPS, and limit internal access to those who need it. No system is perfectly secure; please use a strong password and let us know promptly if you suspect a breach.

regPlanit is operated from the United States. If you use it from outside the U.S., you consent to the transfer and processing of your data in the U.S.

We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date.

Privacy questions: info@planitsuite.com