Privacy Policy
Last updated: September 30, 2026
NPYou ("the Platform") is operated by Affiwi LLC ("Affiwi," "we," "us," or "our"). This Privacy Policy explains what information we collect when you use the Platform, how we use it, who we share it with, and the choices you have. By using the Platform, you agree to the practices described here.
1. Information We Collect
Account Information
When you create an account, our authentication provider collects your email address and name. This information is used to create and manage your account on the Platform.
Profile Information
You may optionally provide additional profile information stored in our database, including phone number and mailing address (street address, city, state, ZIP code). These fields are entirely optional and can be added, edited, or removed at any time through your User Settings.
Organizational Membership Data
When you join or are invited to an organization, we store your membership status, role (admin, facilitator, or member), and the dates associated with your membership actions (request, approval, denial).
Meeting & Attendance Data
When you attend a meeting (either checked in by a facilitator or via self-check-in with a code), we record your attendance, the method of attendance (in-person or virtual), and a timestamp.
Voting & Governance Data
When you cast a vote on a poll item, we record your selection — a yes / no / abstain response or one or more choices in a multiple-choice ballot — along with your user identity and a timestamp. This data is used for governance audit purposes. See "Vote Privacy Model" below for details on who can access this information.
Meeting Q&A and Participation Content
Where a meeting has questions or discussion enabled, we store the content you submit (such as questions) together with the meeting it relates to and, unless the meeting is configured to collect submissions anonymously, your identity. This content is shown to the meeting's facilitators and, where enabled, other attendees.
Guest Check-In Data
Non-members who check in to a meeting as guests provide their name and email address, and may choose to add a phone number and the business or organization they represent. They may also submit questions where enabled. This information is associated with the specific meeting and managed by the organization's administrators.
To request removal of your guest check-in records, contact the organization directly using the contact email shown on its public profile. The organization is the data controller for these records; NPYou hosts the platform but does not manage individual guest data on behalf of the organization.
Billing Information
If your organization subscribes to a paid plan, we collect a billing contact and transaction records (such as plan, billing period, and payment status). Payments are handled by our third-party payment processor, which collects your payment details directly. We do not store your full payment card details on our systems.
Feedback & Support Communications
When you send us feedback or a support request, we collect the message you provide and your contact details, together with limited context to help us respond — for example, the page you were on and basic information about your device or display.
Organization Assets
Organization administrators may upload a logo image. Logos are stored with a third-party image hosting service and displayed publicly on the organization's profile.
Cookies & Automatically Collected Information
We use cookies and similar technologies that are strictly necessary to operate the Platform — for example, to keep you signed in, to remember that you have accepted our terms, and to maintain meeting and check-in sessions. Our authentication provider also sets cookies to manage your login session. We do not use advertising cookies or cross-site tracking, and we do not sell your information.
To help us find and fix problems, we use an error-monitoring service that records limited technical diagnostic information when something goes wrong; we configure it to strip out personal details. Standard web server logs may also record IP addresses, request timestamps, and browser information.
Where Your Data Is Stored and How We Access It
The Platform and its data are hosted in the United States; by using it, you understand that your information is processed and stored there. We access your information only as needed to operate, support, secure, and improve the Platform, and we do not store your account password — sign-in is handled by our authentication provider.
2. How We Use Your Information
We use the information we collect to:
- Authenticate you and maintain your session
- Display your name and role within organizations you belong to
- Record and display meeting attendance and participation for organizational records
- Record votes and calculate aggregate tallies for organizational governance
- Send you in-app notifications about events relevant to your memberships (poll openings, membership status changes, poll results)
- Enable organization administrators to manage their members and organizational activities
- Process payments and manage subscriptions for paid plans
- Send billing notices, including receipts and payment-failure warnings, to the billing contact an organization has set. When an organization has not set one, these notices go to its administrators instead, so a failed payment is not missed.
- Respond to your feedback and support requests
- Monitor for errors, maintain security, and protect the Platform and its users
3. Vote Privacy Model
Voting privacy is a core design principle of NPYou. The following controls are enforced by the application:
- During active voting: only aggregate tallies are displayed on live voting panels. No one can see another person's individual vote while voting is open, administrators included.
- After voting closes: per-voter audit data (which user voted which way on each item) is accessible only to organization administrators, never facilitators, and only on plans that include voter details. This supports the accountability and transparency requirements of nonprofit governance.
- Participation: once voting closes, organization administrators and facilitators can see who voted. The Platform does not show them how anyone voted.
- Your own votes: you can always view your complete vote history across all organizations through your personal dashboard.
- Facilitators (non-admin staff) can see aggregate tallies but cannot access per-voter audit data.
- Other members cannot see how any other member voted.
- Account deletion: when you delete your account, your votes on closed polls are anonymized — the link between the vote record and your identity is permanently removed. Aggregate tallies are preserved to maintain the integrity of completed governance decisions. Votes on open polls are deleted entirely.
4. How We Share Your Information
We do not sell, rent, or trade your personal information. We share data only with service providers that perform functions on our behalf, and only as needed to operate the Platform. These providers are limited to using your information to provide their service to us. They fall into the following categories (the current provider is noted for transparency and may be replaced with a comparable provider):
- Application & database hosting — running the Platform and storing its data (currently Hostinger and Neon)
- Authentication & account management — signing you in and securing your account (currently Clerk)
- Payment processing — for paid plans, processing subscriptions and payments (currently Stripe); we do not store your full payment card details
- Email delivery — sending transactional and notification emails (currently Resend)
- Error monitoring & security — detecting and diagnosing problems, with personal details stripped (currently Sentry)
- Mapping & address lookup — address suggestions when an organizer types a meeting location (currently Google Maps Platform)
We may also disclose information if required to do so by law, or to protect the rights, safety, or property of NPYou, our users, or others. We do not share your voting data, attendance records, Q&A submissions, or profile details with any party outside the organizations you belong to and the service providers described above.
5. Data Retention
We retain your data for as long as your account is active. When you delete your account, we close it and remove your personal information, while keeping the shared governance records your organizations rely on in anonymized form:
- Your personal profile information (name, email, phone, and address) is permanently removed and your account is closed
- Your organization memberships, notifications, and any feedback you submitted are deleted
- Votes on closed polls are anonymized (your identity is removed, but the vote values are preserved for aggregate tallies); votes on open polls are deleted
- Meeting attendance records are retained in anonymized form so your organizations' historical quorum and records stay accurate
- Support requests you sent us are retained as an operational record with your name and email removed
- Organizations you created are not automatically deleted — you should transfer admin rights or delete the organization before deleting your account
If you make payments, we and our payment processor retain billing and transaction records as required for tax, accounting, and legal-compliance purposes, even after your account is closed. These records do not include your full payment card details.
Organization administrators may delete their organization at any time, which permanently removes all associated data including member records, meetings, attendance, polls, and votes.
6. Your Rights
You have the right to:
- Access your personal data through your User Settings and dashboard
- Correct your profile information at any time through User Settings
- Close your account and have your personal data removed through the User Settings page (governance records such as past votes and attendance are retained in anonymized form)
- Export your vote history via the vote history page on your dashboard
Depending on where you live, you may have additional rights over your personal information under applicable law. To exercise any right that is not already available through the Platform interface, contact us at support@npyou.app and we will respond as required by applicable law.
7. Security
We take reasonable measures to protect your information. Authentication is handled by a dedicated identity provider with industry-standard security practices. Data is transmitted over encrypted connections (HTTPS). Database access is restricted to authorized application processes. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
If we become aware of a data breach affecting your personal information, we will notify you and any applicable authorities as required by law, without undue delay.
8. Children's Privacy
NPYou is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, you will be asked to review and accept the updated policy before continuing to use protected areas of the Platform. The "Last updated" date at the top of this page indicates when the policy was last revised.
10. Contact
NPYou is operated by Affiwi LLC. If you have questions about this Privacy Policy or how your data is handled, contact us at support@npyou.app.