Privacy policy

Last updated September 14, 2026

This Privacy Notice for Sabal Palm Software LLC ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

Create an account as an artist, a coach, or a student, or sign in with a magic link.
Build a profile, post availability, or publish a public coach booking page.
Request, book, pay for, or run a coaching session, including joining the video call.
Join a coach's practice, or use co-training scheduling with other artists.
Join our email list, send us feedback, or otherwise contact us.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services.

Summary of key points

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.

Do we process any sensitive personal information? Some of the information may be considered "special" or "sensitive" in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We do not ask for sensitive personal information, and we ask you not to include health details such as injuries in booking messages or feedback.

Do we collect any information from third parties? We receive limited information from our payment and authentication providers, such as whether you have a payment method saved. We do not buy personal information from data brokers or collect it from social media. Learn more about information collected from other sources.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.

How do you exercise your rights? The easiest way to exercise your rights is by contacting us at linsy@projecttandemcircus.com. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the Privacy Notice in full.

What information do we collect?
How do we process your information?
When and with whom do we share your personal information?
Do we use cookies and other tracking technologies?
Is your information transferred internationally?
How long do we keep your information?
Do we collect information from minors?
What are your privacy rights?
Controls for do-not-track features
Do we make updates to this notice?
How can you contact us about this notice?
How can you review, update, or delete the data we collect from you?

1. What information do we collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. Depending on how you use the Services, this includes:

Account. Email address, first and last name, time zone, and the versions and dates of the Terms and Privacy Notice you accepted.
Profile. City, state, country, tagline, about text, a training video link, a profile photo, your disciplines, and your training preferences.
Contact handles. Up to two ways to reach you, such as phone, email, WhatsApp, Instagram, or TikTok. These are shown to other users you train with.
Coach booking page. If you are a coach and you publish a booking page, your name, photo, credential titles, headline, about text, languages, social handles, session offerings and prices, and open times are public on the internet at your booking page address.
Scheduling and sessions. Availability you post, session requests, messages you write when requesting or cancelling, practice membership, join times, and whether a coach marked a session as missed.
Payments.For students, a payment method saved through Stripe's hosted checkout, and the booking price, currency, and payment status. For coaches, a Stripe payout account identifier. See the payments detail below.
Feedback and email list. Any message you send us, and your email address if you join our email list.

Payments.Card payments run through Stripe. When you save a card, you enter it on a page hosted by Stripe, not by us. We never see or store your full card number. We receive confirmation that a payment method exists, the country it was issued in so we can estimate fees, and whether a charge succeeded. Coaches who take payments complete identity and bank verification directly with Stripe under Stripe's own privacy policy. We store only the resulting account identifier.

Video sessions and in-call recording. Sessions run in your browser through Daily. During a coaching session, the coach can record short clips of the student's video, without audio, to play back as live feedback. Those clips exist only in the coach's browser for the length of the call. They are never uploaded to us, never stored, and are discarded when the call ends. Neither Project Tandem nor the coach keeps a copy afterwards.

Email. We send account and booking email through Resend, including magic links, session updates, receipts, and notices about failed payments. These are part of the service and are not marketing. Coaches can send a limited number of availability emails to their practice members, and members can opt out of those. If you join our marketing email list, your address is stored by MailerLite and you can unsubscribe at any time.

Sensitive Information. We do not ask for sensitive information. Some parts of the Services let you write free text, such as a message to a coach when you request a session, a cancellation note, or feedback. Please do not include health details such as injuries or medical history in those messages. If you do, we will hold that text as part of the booking or feedback record.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Product analytics. We use PostHog to understand how people move through the Services, for example how many coaches finish setting up a booking page, or where a booking is abandoned. PostHog records page views and specific product events, such as publishing a booking page or submitting a booking request, along with technical details like browser, device, and approximate location derived from your IP address. Once you sign in, these events are linked to your account so we can understand the path an individual took. We use this to operate and improve the Services. We do not use it to advertise to you, and we do not sell it. We do not record your screen or your session.

Like many businesses, we also collect information through cookies and similar technologies.

Information collected from other sources

We do not buy personal information from data brokers, and we do not collect it from public databases or social media platforms. We receive a limited amount of information from providers who act for us:

Stripe. Whether a student has a payment method saved, the country of that payment method, whether a charge succeeded or failed, and whether a coach has completed payout onboarding. We never receive full card numbers.
Supabase. The account identifier and sign-in status behind your magic-link session.

2. How do we process your information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To create and manage your account and to sign you in with a magic link.
To run the scheduling and booking features — showing open times, taking session requests, letting a coach accept or decline, and holding a booked time.
To take payment for coaching sessions and pay coaches, including charging a saved card after a session starts and sending receipts.
To run video sessions in your browser, including the in-call feedback tools.
To show you to the people you train with, and to publish a coach's booking page publicly when that coach chooses to publish it.
To send service email such as magic links, booking updates, receipts, and payment problems.
To send marketing email if you joined our email list. You can unsubscribe at any time.
To keep the Services working and secure, including error monitoring, limiting abuse, and product analytics that show us where people get stuck.
To comply with law, including tax and accounting rules that apply to payments.

3. When and with whom do we share your personal information?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
Service providers. We share information with companies that run parts of the Services for us. They may use it only to provide those services to us. They are listed below.
Other users.Training with someone means they can see you. A coach sees a student's name, photo, any message sent with a booking request, and the session details. A student sees the same about their coach. Artists using co-training see each other's profiles, contact handles, and availability.
The public. If you are a coach and you publish a booking page, everything on that page is visible to anyone on the internet and may be indexed by search engines. You choose whether to publish it.

We use the following service providers. Each receives only what it needs to do its job:

Supabase — accounts, sign-in, and our database, hosted in the United States.
Vercel — hosting and scheduled jobs.
Stripe — student card payments, and coach identity verification and payouts.
Daily — video sessions.
Cloudinary — profile and coach photos.
Resend — account and booking email.
MailerLite — our marketing email list.
PostHog — product analytics, hosted in the United States.
Sentry — error and performance monitoring.
Slack — our internal team workspace. When someone joins our email list, we post a notification to a private Slack channel that includes the email address, the list, and the page the form was submitted from. That message stays in our Slack history for as long as our workspace keeps messages. Unsubscribing from the email list removes you from MailerLite, but does not remove the earlier Slack notification.

4. Do we use cookies and other tracking technologies?

In Short: We use essential cookies to keep you signed in and operate the Services. We also use error-monitoring and product analytics tools so we can fix bugs and see where people get stuck. We do not use advertising cookies or interest-based ad trackers.

Essential cookies and session storage. When you sign in, we (and our authentication provider) set cookies or similar technologies needed to create and maintain your session, keep you logged in securely, and protect the Services from abuse. These are required for the Services to function. If you disable them in your browser, you may not be able to sign in or use authenticated features.

Error monitoring. We use a third-party error-monitoring service (currently Sentry) to detect crashes, failed requests, and other technical issues. That service may receive technical information such as device and browser details, approximate location derived from IP address, pages or API routes where an error occurred, performance traces showing how long requests took, and related diagnostic data. We use this information to operate, secure, and improve the Services — not to advertise to you.

Product analytics. We use PostHog to measure how the Services are used, for example how far coaches get through setting up a practice. PostHog stores an identifier in your browser so that repeat visits can be recognised as the same person. Once you sign in, that identifier is linked to your account. Analytics requests are served through our own domain. We do not record your screen or your session, and we do not use analytics for advertising.

Other services that set cookies. When you pay, Stripe hosts the checkout page and sets its own cookies under Stripe's privacy policy. Daily and Cloudinary load inside the Services to run video sessions and serve images.

What we do not use. We do not use advertising pixels, interest-based advertising networks, abandoned-cart reminders, or similar marketing trackers on the Services. We do not sell personal information. If we introduce additional marketing technologies later, we will update this Privacy Notice.

Most browsers let you block or delete cookies through their settings. Blocking essential cookies may prevent the Services from working correctly.

5. Is your information transferred internationally?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States. Regardless of your location, please be aware that your information may be transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we may share your personal information (see when and with whom do we share your personal information? above), including facilities in the United States and other countries.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.

Our legal bases if you are in the EEA or UK. We rely on the following legal bases to process your personal information:

Performance of a contract. Creating and running your account, scheduling, running video sessions, taking payment for a session, and paying coaches.
Legitimate interests. Keeping the Services secure and working, preventing abuse, monitoring errors, and product analytics that show us where people get stuck. We balance these against your rights, which is why we do not record sessions or use analytics for advertising.
Consent. Marketing email. You can withdraw consent at any time by unsubscribing.
Legal obligation. Keeping payment and tax records.

If you are in the EEA or UK, you have the right to access, correct, delete, restrict, or object to our processing of your personal information, and the right to data portability. You also have the right to complain to your local data protection supervisory authority.

6. How long do we keep your information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

In practice, that means:

Account and profile — until you ask us to delete your account.
Booking and payment records — kept after a session for as long as tax and accounting rules require. Stripe keeps its own payment records under its own policy.
In-call recordings — never stored. Clips are discarded when the call ends.
Marketing email list — until you unsubscribe. The internal Slack notification created when you signed up stays in our Slack history separately.
Error monitoring and analytics — for the retention period of the plan we hold with those providers.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

7. Do we collect information from minors?

In Short: Accounts are for adults. An adult may book a coaching session for a minor in their care, and remains responsible for that session.

You must be at least 18 years old to create an account. We do not knowingly allow anyone under 18 to register, and we do not market to children. The Services are not directed to children under 13, and consistent with the Children's Online Privacy Protection Act ("COPPA") we do not knowingly collect personal information directly from children under 13.

Booking a session for a minor. Circus coaching often involves young people. A parent or legal guardian who is at least 18 may hold an account and book coaching sessions in which a minor in their care is the person training. If you do this:

The account, the booking, and the payment remain yours. The minor does not get an account.
You are consenting, as parent or guardian, to the minor taking part in the session and to the coach seeing and working with them over video.
You should be present for the session and remain responsible for the minor's safety in their training space.
The coach may record short video clips of the session for live feedback, as described above. Those clips are discarded when the call ends and are never stored by us.

Any information about the minor that reaches us this way, such as their first name in a message to the coach, is held as part of your booking record. Please do not share more about a minor than the coach needs.

If we learn that someone under 18 has created their own account, we will deactivate it and take reasonable measures to promptly delete the data from our records. If you become aware of any data we may have collected from a person under 18 in a way this section does not describe, please contact us using the details in the section how can you contact us about this notice?.

8. What are your privacy rights?

In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section how can you contact us about this notice? below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Account information

If you would at any time like to review or change the information in your account or terminate your account, you can contact us using the details below.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

9. Controls for do-not-track features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

10. Do we make updates to this notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

11. How can you contact us about this notice?

If you have questions or comments about this notice, you may contact us by post at:

Sabal Palm Software LLC
123 Address Avenue
Orlando, FL 32801
United States
linsy@projecttandemcircus.com

12. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please email us at linsy@projecttandemcircus.com.