GatherGrid

Privacy Policy

Last updated: May 27, 2026

This Privacy Policy explains how Modular Organization Studio LLC (“GatherGrid,” “we,” “us,” or “our”) collects, uses, shares, and protects information about you when you visit gathergrid.org, use our mobile apps, or otherwise interact with our event-discovery platform (collectively, the “Services”). We have written it in plain English. If anything is unclear, please email [email protected] and we will do our best to help.

1. Who we are

GatherGrid is a Michigan-focused events and experiences platform operated by Modular Organization Studio LLC. We aggregate live events — concerts, festivals, craft shows, farmers markets, food festivals, auto shows, live music, theater, and family events — into a single discovery surface with calendar, map, search, vendor directory, and per-event detail pages.

Our mailing address is P.O. Box 177, Clio, MI 48420. The data controller for the purposes of this Policy is Modular Organization Studio LLC. Our Data Protection Officer (or equivalent contact for privacy matters) is Not applicable — Modular Organization Studio LLC does not designate a Data Protection Officer. Privacy inquiries can be sent to [email protected].

2. Information we collect

We collect three categories of information: information you give us, information we collect automatically as you use the Services, and information we receive from third parties.

2.1 Information you give us

  • Account information — when you create an account as a user, vendor, coordinator, or admin, we collect your name, email address, password (stored as a salted hash, never in plain text), and any optional profile details you provide (photo, bio, location, business name, etc.).
  • Event interactions — events you register for, favorite, comment on, review, or share; vendors you favorite or message; and content you submit to the platform (event listings if you are a coordinator, product listings if you are a vendor, messages in conversations, feedback posts).
  • Payment information — when you purchase tickets, pay a vendor booth fee, subscribe to a membership, or pay for a featured listing, your card details are collected directly by our payment processor, Stripe, Inc. We do not store full card numbers on our servers. We retain only the last four digits, the card brand, and Stripe’s tokenized references that let us reconcile transactions.
  • Communications — if you email us, fill in our feedback form, or message another platform participant, we retain those communications.
  • Two-factor authentication — if you enable 2FA, we store the encrypted TOTP secret needed to verify your codes.

2.2 Information we collect automatically

  • Device and connection data — IP address, browser type and version, operating system, device type, screen size, language preference, and approximate location derived from IP.
  • Usage data — pages and events you view, the path you take through the site, search queries, filters you apply, links you click (including affiliate links — see Section 5), the date and time of each request, and a session identifier for anonymous visitors so we can deduplicate analytics events.
  • Cookies and similar technologies — see Section 4.

2.3 Information we receive from third parties

  • Affiliate networks — when you click an affiliate link on our site (for example to buy a ticket on Ticketmaster), our affiliate partners report back to us whether the click resulted in a qualifying purchase so we can be credited. We receive aggregate click and conversion data, not your full purchase details.
  • Payment processors — Stripe shares transaction status, last-four card digits, billing country, and fraud risk signals back with us.
  • Public event sources — our Michigan event scrapers aggregate publicly listed event information from regional newspapers, convention & visitor bureaus, venue sites, and partner APIs. This is public event metadata, not personal information about you.

3. How we use your information

We use the information we collect to:

  • Provide, operate, and improve the Services;
  • Create and maintain your account, authenticate you, and recover your password;
  • Process payments, registrations, vendor subscriptions, and featured-listing transactions;
  • Personalize what you see — for example by surfacing events near you or events similar to ones you have favorited;
  • Send transactional emails such as registration confirmations, password resets, vendor invoices, and security notices;
  • Reply to your feedback, support requests, and other communications;
  • Measure how the Services are used, debug problems, and improve performance and accessibility;
  • Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service;
  • Comply with legal obligations, respond to lawful requests, and enforce our rights.

We do not sell your personal information for money. See Section 8 for how state-specific “sale” and “sharing” definitions apply to the affiliate-tracking cookies we describe in Section 5.

4. Cookies and similar technologies

We use three categories of cookies and similar storage technologies:

  • Functional cookies are required for the Services to work — for example, remembering that you are signed in, remembering your theme preference, and protecting against cross-site request forgery. These cannot be disabled without breaking the site.
  • Analytics cookies help us understand how the Services are used in aggregate. We anonymize and aggregate this data before reviewing it.
  • Affiliate attribution cookies — when you click an affiliate link (for example a Ticketmaster ticket CTA), the affiliate network drops a cookie that tells the partner you came from GatherGrid. This is how we earn a commission if you complete a purchase. See Section 5 for the list of affiliate partners.

You can disable cookies in your browser settings. Disabling functional cookies will break key features (such as login). You can also disable affiliate attribution cookies without affecting site functionality — we will simply not be credited for the click.

5. Affiliate disclosure and third-party partners

GatherGrid participates in affiliate marketing programs. When you click certain outbound links on our site — for example, a “Purchase this event now” ticket CTA, a “Book a table” restaurant link, or a “Get a ride” transportation link — GatherGrid may earn a commission from the partner if you complete a qualifying purchase. There is no additional cost to you.

We use the following affiliate networks and partners. Each of these third parties has its own privacy policy that governs the data they collect through their tracking pixels, cookies, and redirect URLs. We encourage you to read their policies.

We do not share your name, email address, or other directly identifying information with affiliate partners. The partner sees the click event (with a partner-generated click reference and, in our case, the GatherGrid event id as a sub-identifier) and your standard browser data (IP, user agent) that any web request would transmit.

6. Other third-party processors we rely on

In addition to the affiliate partners above, we rely on the following service providers to operate the Services. Each of them is contractually limited to processing your data only on our behalf and only for the purposes described.

  • Stripe, Inc. — payments. See stripe.com/privacy.
  • Email delivery (SMTP / transactional email) — we use Gmail SMTP (and may use Resend or similar transactional email providers) to send registration confirmations, password resets, and other operational emails.
  • Cloudflare and Cloudflare Turnstile — for DDoS protection, bot mitigation, and form-spam screening on certain public forms.
  • Fly.io — hosting infrastructure.
  • Neon — managed Postgres database hosting.

7. How we share your information

We share your personal information only in these situations:

  • With other platform participants — if you message a vendor, your username and message content are visible to that vendor. If you register for an event, the coordinator can see your name and registration details. If you submit a public review or comment, the content is visible to everyone.
  • With our service providers — the processors listed in Section 6, only as needed to operate the Services.
  • With affiliate networks — as described in Section 5.
  • For legal reasons — to comply with valid subpoenas, court orders, or legal process; to enforce our Terms; to investigate fraud or security incidents; or to protect the rights, property, or safety of GatherGrid, our users, or the public.
  • In a corporate transaction — if GatherGrid is acquired, merged, or sold, your information may transfer to the successor entity, subject to a privacy policy at least as protective as this one.

8. Your privacy rights

8.1 All users

You may at any time:

  • Access the information we hold about you;
  • Correct inaccurate information;
  • Delete your account and the personal information associated with it (subject to legal-retention exceptions noted below);
  • Export your data in a portable format;
  • Object to or restrict certain processing activities;
  • Opt out of non-essential marketing emails (we will still send transactional emails such as receipts and security notices).

To exercise any of these rights, email [email protected] from the email address on your account, or use the in-app account controls. We will respond within 30 days.

8.2 California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the CPRA:

  • The right to know what categories of personal information we collect, the sources, the purposes, and the categories of third parties with whom we share it;
  • The right to delete personal information we have collected, subject to certain exceptions;
  • The right to correct inaccurate personal information;
  • The right to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. To the extent affiliate-attribution cookies described in Section 5 constitute “sharing” under California law, you may opt out by disabling those cookies in your browser or by emailing us at the address above;
  • The right to non-discrimination — we will not deny you service, charge you a different price, or provide a different level of quality because you exercised these rights.

8.3 European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

GatherGrid is currently focused on Michigan, but we recognise that residents of the EEA, UK, or Switzerland may reach the Services. If you are in one of these regions, the General Data Protection Regulation (or its UK equivalent) grants you the following rights, which we will honor on request:

  • Right of access;
  • Right to rectification;
  • Right to erasure (“right to be forgotten”);
  • Right to restriction of processing;
  • Right to data portability;
  • Right to object to processing;
  • Right not to be subject to solely automated decision-making;
  • Right to withdraw consent at any time where processing is based on consent;
  • Right to lodge a complaint with your local supervisory authority.

Our legal bases for processing your information include: your consent (where required); the performance of our contract with you when you create an account or register for an event; our legitimate interests in operating, securing, and improving the Services; and compliance with legal obligations.

9. Children's privacy (COPPA)

The Services are not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please email [email protected] and we will delete it promptly.

For users between 13 and 17, certain venues, events, or vendor products surfaced on the Services may have age restrictions of their own (for example, 18+ or 21+ venues). Those restrictions are the event organizer’s, not ours.

10. Data retention

We retain your personal information for as long as your account is active and for a reasonable period afterward in case you choose to reactivate the account. After account deletion, we retain only the minimum information needed to comply with legal obligations (such as financial records for tax and accounting purposes), resolve disputes, prevent fraud and abuse, and enforce our Terms of Service.

Aggregated and anonymized data — data that cannot reasonably be tied back to you — may be retained indefinitely.

11. Security

We protect your information with appropriate administrative, technical, and physical safeguards: passwords are stored as salted hashes, transport-layer security (HTTPS) is required for all connections, payment card data is processed by Stripe and not stored on our servers, and access to production systems is restricted to authorized personnel and audited. We support two-factor authentication for all account types and strongly encourage you to enable it.

No system is perfectly secure, however. If we become aware of a security incident that materially affects your information, we will notify you as required by applicable law.

12. International data transfers

GatherGrid is operated from the United States and our service providers are primarily located in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection rules than your home jurisdiction. Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

13. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or by a notice on the site before the change takes effect. Your continued use of the Services after the effective date of the updated Policy constitutes your acceptance of the changes.

14. Contact us

If you have questions about this Policy or your privacy rights, email us at [email protected] or write to us at:

Modular Organization Studio LLC
Attn: Privacy
P.O. Box 177, Clio, MI 48420

You can also reach us through our Contact page.