← Back to GreekPad

Privacy Policy

Effective date: May 25, 2026

1. Overview

This Privacy Policy describes how Greekpad LLC ("we", "us", "GreekPad") collects, uses, and protects information when you use the GreekPad service (the "Service"). By using the Service, you consent to the practices described here.

2. Information We Collect

We collect the following categories of information:

  • Chapter account data — chapter name, school, contact name, email, phone, and role provided when signing up.
  • PNM data — names, contact information, photographs, year, major, GPA, hometown, high school, interests, and other recruitment-related data submitted by chapter members or PNMs themselves.
  • Member-submitted notes and votes — qualitative comments and bid status entered by chapter members and exec.
  • Authentication and access data — passcodes (stored as plain text in our database, accessible only to chapter exec and admins), session cookies, and IP address for rate-limiting and abuse prevention.
  • Operational data — server logs, error reports, and technical metadata generated when you use the Service.
  • Billing and payment data — we use Stripe to process the $5 setup fee and plan subscription billing. From Stripe we receive and store the Stripe customer ID, the charge ID for the setup fee, the subscription ID for any active plan, and limited card metadata (card brand and last four digits) for display purposes. We never see or store full card numbers, full expiration dates, CVCs, or bank account numbers — that data is handled directly by Stripe.

3. How We Use Information

We use the information we collect to:

  • Provide, maintain, and improve the Service;
  • Authenticate users and prevent unauthorized access;
  • Send transactional emails (account approvals, passcode delivery, billing notices);
  • Enforce Testing Mode access controls, refund windows, and subscription status;
  • Detect and prevent abuse, fraud, or violation of our Terms;
  • Comply with legal obligations.

We do not sell, rent, or trade your data or PNM data to third parties for advertising or marketing purposes.

4. Subprocessors

We rely on a small number of trusted infrastructure providers to deliver the Service:

  • Vercel — application hosting and edge delivery;
  • Supabase — database, authentication storage, and file storage;
  • Resend — transactional email delivery;
  • Telnyx — text message (SMS) delivery;
  • Stripe — payment processing for the $5 setup fee and plan subscription billing (monthly, semester, and annual plans);
  • randomuser.me and i.pravatar.cc — third-party placeholder avatars used only in the public demo chapter (no real user data sent).

Each subprocessor only receives the minimum information needed to perform its function.

5. Data Retention

We retain chapter and PNM data for as long as your chapter account is active. If your account becomes inactive or is terminated, we may retain data for a reasonable period (typically up to 12 months) before deletion to allow for reactivation, billing reconciliation, and dispute resolution. You may request deletion at any time by emailing us.

6. Your Rights

Depending on your location, you may have rights to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Request deletion of your information;
  • Object to or restrict certain processing;
  • Withdraw consent where we rely on consent as the legal basis.

To exercise any of these rights, email us at reed@greekpad.com.

7. PNM Privacy Considerations

PNMs may submit information about themselves through the public intake form. By submitting that form, PNMs acknowledge that the information will be visible to authorized members of the chapter and stored on our servers. Chapters are responsible for handling PNM data consistent with their own privacy obligations and any applicable laws (including FERPA where applicable).

8. SMS / Text Messaging Privacy

When you opt in to receive SMS messages from GreekPad (for example, by checking the SMS consent box on a chapter intake form), we collect your mobile phone number, the timestamp of your opt-in, and message-delivery metadata for the SMS program.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent information will not be shared with any third party except for subcontractors and service providers (such as Telnyx, our SMS infrastructure provider) that are strictly necessary to operate the GreekPad SMS program, and only under confidentiality obligations.

You may opt out at any time by replying STOP to any GreekPad text message. For help, reply HELP to any GreekPad message or email reed@greekpad.com. Message and data rates may apply. Message frequency varies.

9. Security

We use industry-standard security practices, including HTTPS encryption in transit, encrypted credentials at rest, server-side rate limiting, and access controls scoped per chapter. No system is perfectly secure, however, and we cannot guarantee absolute security of your data.

10. Children's Privacy

The Service is intended for college-age users and is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has submitted information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

12. Contact

For privacy questions or to exercise your rights, contact us at reed@greekpad.com.