Privacy policy
Last updated September 2026.
What this covers
This policy describes how CRUMP360 handles personal data for the CRUMP360 platform: the marketing site, event registration, ticketing, check-in, and the learning management system. Each organization using CRUMP360 (an "organization") is the data controller for its own attendees and learners. CRUMP360 acts as the data processor on their behalf and as the controller for its own account holders.
What we collect
- Account data: name, email, and authentication details for people who sign in.
- Registration data: attendee name, email, answers to an event's own registration questions, and payment status (not full card numbers, which Stripe holds).
- Learning data: enrollment, lesson completion, and quiz results.
- Usage data: pages visited and actions taken, for security and product improvement.
- Support data: anything sent to us through the contact form or by email.
How we use it
To operate the service an organization configures: registering attendees, sending confirmation and reminder email, processing payments and refunds, running courses and quizzes, and preventing abuse. We do not sell personal data.
Who we share it with
Only the subprocessors listed on our Subprocessors page, each under a data processing agreement, and only to the extent needed to run the service: hosting, database, payments, and email delivery.
Your choices
You can ask to access, correct, export, or delete your personal data by contacting the organization you registered or enrolled with, or by emailing privacy@crump360.com. We respond within 30 days.
Retention
We keep registration and learning records for as long as the organization's account is active, plus a limited period for financial and legal recordkeeping. Rate-limit and abuse-prevention records are kept for a few days.
Children
CRUMP360 is intended for business, nonprofit, government, and campaign use, not for children.
Contact
CRUMP360, Crump Solutions Group. Questions: privacy@crump360.com.