Privacy Policy

Altitude Productions (“we”) runs CaliHub. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what we collect, why, who we share it with, and your choices.

What we collect

Your account

• Your name and email address.
• Your password, stored only as a secure one-way hash. We can't see it.
• Which clubs you belong to, and your role in them.

Club data entered by clubs

• Performers' first and last names, costume size, shoe size, costume fitting notes, and which teams they're in.
• Teams, costumes, costume stock, costume photos of the costumes themselves, and which performer has which costume.
• Schedule events (competitions, rehearsals and performances), training videos of routines, and jobs like costume alterations, added by coaches and committee members.

We deliberately don't collect performers' birth dates, ages, heights, body measurements, contact details, addresses or health information, and our terms don't allow clubs to enter them. Costume photos must show costumes only, never an identifiable performer. Training videos are the one place performers may appear onCaliHub: coaches choose whether to add them, and are responsible for having a parent or guardian's permission before they do. Only people the club has invited — its committee, coaches and the parents it's given a code to — can watch them.

Things you post

• Competition results, forum threads and replies, marketplace listings and their photos. These are public.
• Messages between buyers and sellers. These are private to the two people involved (and to us when investigating a report).
• Reports you make about content.

Payments

Card payments are processed by Stripe. We don't receive or store card numbers. Stripe gives us the subscription's status and a card fingerprint: an identifier that tells us whether the same card was used before, without revealing the card. We use it only to enforce one free trial per card.

Technical information

When you use CaliHub, our hosting provider records standard server logs (such as IP address, browser type and pages requested) for security and troubleshooting. We use one essential cookie to keep you logged in. We don't use advertising or analytics cookies.

Children

Many performers are children. Performers don't have accounts; their club records them. Clubs must have permission from a parent or guardian before entering a child, and only the minimal details listed above can be entered. Club data is visible only to the people each club invites. Accounts are for adults (18+).

How we use it

• To provide CaliHub: your account, your club's tracker, and the community features.
• To take subscription payments, and to prevent the free trial being used more than once.
• To send service emails: password resets, message notifications, and warnings before club data is deleted. We don't send marketing emails without asking.
• To keep CaliHub safe: moderating reports, stopping abuse, and securing accounts.

We never sell or rent personal information, and never use it for advertising.

Who we share it with

We use these service providers to run CaliHub. They may store or process information outside Australia, including in the United States:

• Stripe: payments and subscriptions.
• Vercel: website hosting, and photo and video storage.
• Turso: our database.
• Resend: sending emails.

We choose providers with strong security and privacy commitments, and share only what each needs. We may also disclose information if the law requires it.

How long we keep it

• Club data: while the club is subscribed. When a subscription ends, the club is read-only for 30 days and then permanently deleted with its photos and videos, unless renewed.
• Your account: until you delete it. Deleting it removes your personal information, forum posts, listings and messages. Competition results you entered stay, shown without your name, because other clubs rely on them.
• Free-trial records (your email, and a card fingerprint): kept for up to 3 years after the trial, so trials can't be claimed twice.
• Server logs: kept briefly by our hosting provider for security.

Security

Everything is sent over encrypted connections, passwords are hashed, and access to club data is limited to the people each club invites. No system is perfectly secure; if a data breach is likely to cause serious harm, we'll notify you and the Office of the Australian Information Commissioner as the law requires.

Your choices and rights

• See and update your details, change your password, or delete your account on your Account page.
• Club administrators can correct or remove a performer's details at any time. Parents can ask their club to do this, or contact us.
• You can ask us for a copy of the personal information we hold about you, or to correct it, by emailing us.

Questions and complaints

Email trstnclements@gmail.com. We'll respond within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we make significant changes to this policy, we'll tell you by email or on the site before they take effect.