Privacy Policy

We know privacy matters. Here’s the quick version of how Personory (by DigitalCrowd, Inc.) handles your data:

What we collect: Your name, email, phone number, address, birthdate, household members (including kids), and photos. We also record the geographic coordinates of addresses and may use AI to help format images.
Where it comes from: You, your organization, or an import provided by your organization.
Why we collect it: To provide directory services for your organization — so members can find and connect with each other.
Who we share it with: Only trusted U.S.-based service providers we use to run Personory — like Google (address lookups), Twilio (phone number formatting), and AI tools for images. These services get only the data they need for their specific task.
What we don’t do: We don’t sell your information, and we don’t use it for advertising.
Your choices: You can update or delete your information (within your organization’s policies) and choose whether to receive notifications.
How we protect it: All data is encrypted during transfer, stored securely in the U.S., and accessible only to authorized personnel.
Kids’ info: If your organization lists children in its directory, it’s for household information only — not for direct use by kids. Organizations are responsible for following applicable child privacy laws.
International users: If you’re outside the U.S., your data may be processed here with safeguards to protect it under laws like GDPR.
Questions? Email privacy@personory.com anytime.

Effective Date: Aug 12, 2025

DigitalCrowd, Inc. (“we,” “our,” “us”) operates the Personory service (“Service”), a software-as-a-service (SaaS) platform that provides directory services for organizations and their members. This Privacy Policy explains how we collect, use, store, and protect personal information, and applies to all users regardless of geographic location.

1. Contact Information

If you have questions about this Privacy Policy or our data practices, contact us at:
Email: privacy@personory.com

2. Information We Collect

We may collect the following types of personal information:

Basic Identifiers: Name, email address, phone number, mailing address, birthdate.
Household Information: Names of children for household directory purposes.
Media: Photos of members.
Location Data: Geographical coordinates retrieved from Google when addresses are entered.
Other Information: Miscellaneous details provided on a case-by-case basis by the organization using our Service.

3. How We Collect Information

Directly from Users: Information entered by individuals into forms within the Service.
From Organizations: Data imported or entered by the organization administering the directory.
From Third-Party Services:
Google Geocoding services to convert addresses to coordinates.
Twilio for phone number format verification.
AI image services for photo composition adjustments.
We also use cookies for essential site functions and performance.

4. Purpose of Data Collection

We collect and process personal information solely to:

Provide directory services for organizations and their members.
Support features such as photo formatting, address verification, and phone number validation.
Deliver organization-driven notifications (e.g., invitations, new message alerts).
We do not use collected data for personalized advertising or marketing campaigns.

5. Data Sharing and Third-Party Services

We do not sell or rent your personal information.

We may share limited data with third-party service providers solely to perform essential functions of the Service:

Twilio – phone number format verification (phone number only).
Google – geolocation lookups (address only).
AI Photo Processing – formatting and composition adjustments (image only).

No personal identifiers are combined with these shared data elements. All service providers are located in the United States unless otherwise stated to support international operations.

6. International Data Transfers

If you are located outside the United States, your personal information may be transferred to and processed in the U.S. We take appropriate safeguards, such as Standard Contractual Clauses (SCCs) under GDPR, to ensure your data is protected when transferred internationally.

7. User Rights

For U.S. Residents

California (CCPA/CPRA): California residents have the right to request access to, deletion of, and portability of their personal data, as well as the right to opt out of the sale or sharing of personal data.

For EU/UK Residents (GDPR & UK GDPR)

Access & Portability: You may request a copy of your personal data.
Correction: You may request corrections to inaccurate information.
Deletion (“Right to be Forgotten”): You may request deletion of your data where legally permissible.
Restriction & Objection: You may request to restrict or object to processing in certain circumstances.
Data Portability: You may receive your data in a structured, machine-readable format.

Requests can be submitted to privacy@personory.com. We may require identity verification before processing requests.

8. Data Retention

Data is stored for as long as the organization uses the Service or until it is deleted by the organization or user.
Removed data may remain in encrypted backup archives until backups are no longer required for operational or legal purposes.

9. Security Measures

All data transmissions occur over SSL/TLS encryption.
Access to personal data is restricted to authorized personnel.
Data is stored in secure U.S.-based servers.

10. Children’s Information

Our Service is not intended for direct use by children. However, organizations may store information about children in member households to share with other members within the same organization.

The handling of children’s information is governed by the organization’s own privacy practices. We encourage organizations to comply with applicable child data laws, including COPPA (U.S.) and equivalent protections in other jurisdictions.

11. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and UK, we process your personal data on the following legal bases:

Consent – When you provide explicit consent (e.g., uploading your own photo).
Contract – To fulfill our obligations in providing the Service to your organization.
Legitimate Interest – For operational purposes that do not override your rights and freedoms.
Legal Obligation – When processing is required by applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on our website with a revised effective date. Your continued use of the Service after changes are posted indicates your acceptance of those changes.

13. Your Agreement

By using the Personory Service, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.