Privacy policy

• What you send us. When you apply, ask for an estimate, take CROSS CAM™, or email us: your name, email, links to your work, and your answers.
• Purchases. When you buy a planning kit, Stripe takes the payment. We receive your name, email, and what you bought, never your card details.
• Your CROSS workspace. When you sign in with Google we receive your name, email address, and profile picture. In the workspace we keep the messages, answers, approvals, and files you send, and the replies you make to our emails.
• Site analytics. Vercel Web Analytics counts page views in aggregate. It does not set cookies or build a profile of you.

Each creator’s site has its own separate fan database. That data belongs to the creator. We handle it only to run their site and services, it is never combined with another creator’s, and it never moves into our own systems. If you signed up on a creator’s site, that creator decides how your data is used. We will help them answer any request you make.

• To reply to you and do the work we agreed with you.
• To run your workspace, including the emails it sends you when something needs you.
• To keep things secure: who signed in, who changed what, and when.
• To understand which pages are useful, from aggregate counts only.

We use Google sign-in only to confirm who you are. We request your name, email address, and profile picture, and nothing else from your Google account. We use that information to sign you in and show your name in the workspace. We do not use it for advertising, sell it, or share it, except with the providers below where needed to run the service. Our use of information from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

We use a small set of providers, each only for its own job:

• Vercel: hosting and private file storage
• Neon: databases
• Google: sign-in
• Resend: workspace email
• Stripe: payments
• GoHighLevel: our customer records

We do not sell personal data, and we do not share it for advertising.

We keep your information while we work together and as long as needed for our records and legal obligations, then delete it. Files you upload to the workspace are kept until you or we remove them.

You can ask for a copy of your data, a correction, or deletion. Email slowsie@endlessriver.org and we will answer within 30 days. You can also revoke CROSS’s access from your Google account settings at any time.

Workspace files are stored privately and served only to signed-in people with a seat on that workspace. Every change to who can access a workspace is logged. No system is perfectly secure, and we will tell you promptly if something goes wrong that affects you.

CROSS is for creators and their teams. It is not meant for anyone under 16.

If we change this policy, we will update the date above, and tell workspace members about meaningful changes. Questions: slowsie@endlessriver.org.