GatherRound Privacy Policy

Last Updated: January 18, 2026 · Version 1.4

TL;DR

  • We collect only what's needed to operate GatherRound.
  • We do not sell personal data.
  • Analytics are privacy-focused and do not identify individual users.
  • Identity verification is handled by Stripe — we store only verification status.
  • You control your data and can delete your account.
  • Users must be 13+, and minors need guardian approval to attend events.
  • We do not share mobile numbers or SMS opt-in data for marketing purposes.

This Privacy Policy explains how Ninety2 LLC, operating the GatherRound platform ("GatherRound," "we," "us"), collects, uses, and protects your information.

Ninety2 LLC operates from Fairfax County, Virginia, United States.


1. Information We Collect

Information You Provide

  • Email address
  • Username and display name
  • Profile details (bio, games, experience level)
  • Event listings and RSVPs
  • Ratings and reviews
  • Business profile information (if applicable)

Identity Verification (Optional)

If you choose to verify your identity, verification is processed by Stripe Identity. Identity verification is available to users aged 16 or older.

Stripe may collect and store:

  • Government-issued ID images
  • Selfie images
  • Date of birth
  • Verification artifacts

GatherRound does not store or host ID images, selfies, or biometric data in its own systems. We retain only limited verification metadata, such as verification status and timestamps.

Business Verification (Manual Review)

Business Pro subscribers may optionally verify their business to earn a trusted badge. This is a separate process from individual identity verification.

If you choose to verify your business, you will provide:

  • Legal business name and DBA (if applicable)
  • State of incorporation and business type
  • Business website (optional)
  • Supporting documentation (e.g., Articles of Incorporation, EIN Confirmation Letter)

How We Handle Business Verification Documents:

  • Documents are uploaded to a private, encrypted storage bucket
  • Only authorized GatherRound administrators can access documents for review
  • Documents are reviewed manually within 1-3 business days
  • After verification is complete, documents are retained securely for compliance purposes
  • GatherRound stores verification status, approval date, and business details (name, type) on your profile

Business verification is entirely separate from Stripe Identity verification. Stripe does not process or store business verification documents.


2. Automatically Collected Information

We use privacy-focused analytics providers:

  • Cloudflare Analytics
  • Fathom Analytics

Analytics data collected through Cloudflare and Fathom is aggregated and does not identify individual users. These services collect anonymized data such as:

  • Page views
  • Referring pages
  • Approximate device type

We do not use:

  • Advertising trackers
  • Cross-site behavioral profiling
  • Data resale mechanisms

Cloudflare Turnstile

We use Cloudflare Turnstile to protect our login and signup forms from automated abuse. Turnstile is a privacy-preserving CAPTCHA alternative that:

  • Does not use tracking cookies
  • Does not collect personal information
  • Analyzes browser behavior to distinguish humans from bots

Turnstile may collect anonymous signals such as browser type and interaction patterns. This data is processed by Cloudflare and is not shared with GatherRound or used for advertising.


3. How We Use Information

We use information to:

  • Operate and improve GatherRound
  • Facilitate events and RSVPs
  • Enable trust and moderation
  • Prevent abuse and fraud
  • Provide support

We do not sell or rent personal data.


4. Sharing Information

We share information only with essential service providers:

  • Stripe (payments and identity verification)
  • Supabase (authentication and database)
  • Cloudflare (hosting, security, CDN)
  • Google Maps (address lookup and mapping)

We do not share data for advertising purposes.


We may disclose information in response to valid legal requests as required by law.

For details on how we handle these requests, see our Law Enforcement & Legal Requests Policy.


6. Data Retention

We retain personal data only for as long as necessary to:

  • Operate the service
  • Comply with legal obligations
  • Resolve disputes
  • Support safety and abuse prevention

Specific retention practices:

  • Account data remains until deletion
  • A 7-day soft-delete window applies
  • Ratings received remain in anonymized form
  • Moderation records may be retained for safety and compliance

7. Your Rights

You may:

  • Access and update your information
  • Delete your account
  • Control profile visibility
  • Block other users

We honor applicable rights under CCPA and GDPR-style frameworks.


8. Children's Privacy

  • Accounts are limited to users 13+
  • Users under 18 require guardian approval to attend events
  • We do not knowingly collect data from children under 13

9. Security

We use industry-standard security measures, including:

  • Encryption at rest and in transit
  • Secure authentication
  • Role-based access controls

No system is perfectly secure, but we take protection seriously.


10. SMS Communications

SMS Terms of Service

By opting in to SMS messages from Ninety2 LLC, you agree to receive text messages for customer support, service updates, and other communications related to your account.

  • You can cancel the SMS service at any time by texting STOP. After you send "STOP," we will confirm your unsubscription. You will no longer receive SMS messages from us unless you opt in again.
  • If you are experiencing issues with the messaging program, reply with HELP for assistance.
  • Carriers are not liable for delayed or undelivered messages.
  • Message and data rates may apply. Message frequency varies. Contact your wireless provider for details about your text or data plan.

SMS Privacy

Ninety2 LLC does not share mobile numbers, text messaging originator opt-in data, or consent with any third parties or affiliates for marketing or promotional purposes.

Mobile information may be shared only with subcontractors and service providers that support the delivery of SMS services, such as messaging platforms, telecommunications providers, or customer support vendors. This information is used solely to provide and operate the messaging service.

All other use case categories exclude text messaging originator opt-in data and consent. This information will not be shared with any third parties.


11. Policy Changes

We may update this policy periodically. Material changes will be communicated through the platform.


12. Contact

Privacy and data requests can be submitted through GatherRound support channels.