Privacy policy

Information we handle

• Accounts and access. Names, email addresses, password hashes, profile information, organization memberships, invitations, and sign-in and account-security records.
• Programs and participation. Group details, registrations, enrollment, attendance, progress, session information, and resources or recordings you or your organization provide.
• Payments. Purchase, subscription, invoice, and payment-status records, along with payment-provider identifiers. Stripe processes payment details; Assembly does not store your full payment-card number.
• Service activity. Technical information used to operate and protect the service, such as IP addresses, browser information, request and error logs, and abuse-prevention signals.
• Support. Information you choose to share when contacting us.

Google Calendar

Connecting Google Calendar is optional. When an organization administrator connects an account, Assembly requests the account’s email address and read-only Calendar access. We use this access to list available calendars and let authorized organization managers choose a calendar for a group and sync its events. Assembly cannot create, change, or delete events in Google Calendar through this integration.

We store the connected account’s email address, encrypted access and refresh tokens, connection metadata, and the identifiers and names of calendars linked to groups. When you sync a linked calendar, we store event identifiers, titles, descriptions, start and end times, event status, and online meeting links to support group scheduling. Refresh tokens allow the connection to remain available without asking you to sign in for each sync.

Use a calendar intended for your group. Authorized organization managers can access synced events. Event information used in published group sessions is visible to the participants who have access to those sessions. Connecting an account alone does not publish all of its calendars to participants.

We use Google user data only to provide and improve these visible calendar and group scheduling features. We do not sell Google user data, use it for advertising, or use it to train general-purpose artificial intelligence or machine-learning models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Google user data is shared only as needed for the features you authorize, with service providers supporting those features, for security or legal reasons, or in a business transfer with your prior consent. Human access is limited to your affirmative permission, necessary security investigations, legal requirements, or internal operations involving aggregated data, as permitted by Google’s Limited Use requirements.

An organization administrator can disconnect Google Calendar in Organization settings. This removes the stored connection, tokens, linked calendars, and imported calendar events from Assembly’s active database. Group sessions and information previously copied into them may remain until your organization removes them. You can also revoke Assembly’s access in your Google Account connections. Revoking access at Google stops future access but does not itself delete information already stored in Assembly. Contact us if you need help removing it.

Other connected services

If you connect Outlook Calendar, we use the account information, calendar access, and tokens you authorize to provide the selected calendar features. Disconnecting it in Organization settings removes the stored connection and linked calendar data from the active database. Payment, video, and externally linked content providers also process information under their own privacy policies when you use their services.

How we use and share information

We use information to provide accounts and group experiences, manage access and enrollment, process payments, deliver service and program communications, respond to support requests, maintain reliability, prevent abuse, and meet legal obligations. We do not sell personal information or share it for targeted advertising.

Information is available to organization staff and participants according to their access and the content your organization makes available. We use service providers for hosting, databases, file storage, payments, email, video, and security. They receive information needed to provide those services. We may also disclose information when required by law, to protect rights and security, or as part of a business transfer. The additional limits described above continue to apply to Google user data.

Cookies and browser storage

Assembly uses cookies to keep you signed in and support secure access. Browser storage can remember preferences such as your application theme. Blocking these technologies may prevent sign-in or other features from working. Services embedded in or linked from a program may use their own cookies and storage.

Retention and security

We retain information while it is needed to provide the service and for legitimate purposes such as accounting, security, resolving disputes, and complying with law. Retention depends on the type of information and your organization’s use of Assembly. Removing an account or connection does not necessarily remove records we must retain or information your organization has independently included in program content.

Assembly uses access controls, secure connections, password hashing, and encryption of stored calendar tokens to help protect information. No system can guarantee absolute security. Our service providers may process information in the United States and other locations where they operate.

Your choices and requests

You can update available profile settings, choose whether to connect a calendar, and contact your program’s organization about its records. To request access, correction, a copy, or deletion of personal information held by Assembly, email privacy@runassembly.com. We may need to verify your identity and coordinate with the organization responsible for your program. Available rights and exceptions depend on applicable law.

Changes and contact

We will post changes to this policy here and update the effective date. When required, we will provide additional notice or request consent before a material change in how we use information. For privacy questions, contact Wild Signal at privacy@runassembly.com.