Privacy Policy

📄 Introduction

This Privacy Policy ("Policy") explains how ParadeSmart LLC, a Utah limited liability company and a Virgo Development company ("ParadeSmart," "we," "us," or "our"), collects, uses, stores, and protects personal and non-personal information ("Data") when you use the ParadeSmart app, the Admin & Staff ticket-scanning tools inside that app, the Web Manager dashboard, or paradesmart.com — and how we handle Data belonging to our Home Builders Association (HBA) clients, their event attendees, builders, and our own employees.

Scope

This Policy applies to everyone who interacts with ParadeSmart: event attendees who use the app to browse homes, get directions, buy tickets, or vote; builders and HBA staff who use Admin & Staff tools or the Web Manager; visitors to paradesmart.com; and our own employees and contractors.

🔒 Privacy by Design and Default

We incorporate privacy by design and default principles into our products, systems, and processes to ensure that data protection is considered from the outset and that only the Data necessary to run your Parade of Homes event is collected.

🗂️ Information We Collect

What we collect depends on how you use ParadeSmart:

Information you provide directly

• Contact & account information: name, email address, phone number, and job title — for example when you request a demo, sign up for our newsletter, or receive Web Manager or Admin & Staff login credentials from your HBA coordinator.
• Ticket purchase information: name and email address when you buy a ticket, so we can issue and, if needed, resend your ticket.
• Voting activity: if your event enables People's Choice voting, your votes are tied to your ticket (and, if enabled, restricted to homes your ticket was scanned at) so each ticket can only vote once per category.

Information collected automatically

• Location data: Home addresses and GPS coordinates are set by your HBA's event staff, not collected from your device. When you tap Directions, the app hands off to Apple Maps or Google Maps to route you — those apps' own privacy policies govern any location data collected at that point.
• Camera access (Admin & Staff only): if you're a builder or HBA staff member scanning attendee tickets, the app uses your device's camera to scan QR codes at the door. We don't store the camera images themselves — only the scan result (which ticket, which home, what time).
• Website usage data: IP address, browser type, device information, pages visited, and similar technical data, collected via Google Analytics (GA4) and cookies on paradesmart.com.

Information from your HBA / event organizer

Your HBA client uploads builder and home information (photos, descriptions, GPS coordinates) to configure their event. If your HBA collects attendee names/emails outside the app (e.g. at a printed-ticket point of sale) and imports them into ParadeSmart for scanning, that counts as information provided by your HBA, not collected directly by us from you.

Payment information

Ticket payments are processed directly by Stripe or Authorize.net — your HBA's chosen payment processor. ParadeSmart does not receive or store your full card number; we only receive confirmation that a payment succeeded and a transaction reference. Stripe's and Authorize.net's own privacy policies govern the payment data they handle.

⚙️ How We Use Information

We use Data to:

• Provide the app's core features: home directories, maps and directions, ticketing, QR scanning, and voting.
• Process ticket purchases and communicate about them (confirmations, resent tickets).
• Deliver our software engineering, app, and web development services to HBA clients.
• Communicate with clients, employees, and website visitors about our services, updates, and inquiries.
• Improve our services, enhance app and website functionality, and understand how visitors use paradesmart.com (via GA4).
• Ensure the security and integrity of our systems, networks, and data.

Lawful Basis for Processing

We only process Data when we have a lawful basis to do so, including:

• The processing is necessary to perform a contract (e.g. delivering the app and ticketing service your HBA contracted us for) or to take steps you request before entering into one.
• The processing is necessary for compliance with a legal obligation we're subject to.
• The processing is necessary for a legitimate interest pursued by us or a third party, provided that interest doesn't override your rights.
• You've given explicit consent to the processing.

🔧 App Permissions & Your Choices

The ParadeSmart app only requests device permissions it needs for the feature you're using:

• Camera: requested only from Admin & Staff accounts, only when scanning a ticket QR code. Attendees browsing homes are never asked for camera access.
• Location (if requested): would only be used to help plan your route between homes or show nearby homes. You can decline this and still browse the home directory and get directions via Apple/Google Maps manually.

You can review or revoke any permission at any time in your device's Settings app. Declining a permission won't block you from the core parts of the app that don't need it.

🤝 How We Share Information

Service providers we use

We share Data with the following categories of service providers, only as needed to run the platform, and we require each of them to protect your Data consistently with this Policy:

• Payment processors: Stripe or Authorize.net, to process ticket payments.
• Mapping services: Apple Maps and Google Maps, to provide driving directions.
• Analytics: Google Analytics (GA4), to understand website traffic.
• Forms & email: HubSpot, to process demo requests and newsletter sign-ups.

Your HBA client

If you buy a ticket or vote, your HBA (the event organizer) can see ticket and voting data for their own event through the Web Manager — it's their event, and this is necessary to run it. If your HBA's terms and conditions permit sharing attendee names/emails with event sponsors, they're required to give attendees the chance to opt in or out; that's between your HBA and its attendees, governed by the HBA's own terms, not by ParadeSmart directly.

What we don't do

We don't sell Data. We don't share, license, or transfer Event data (ticket, attendee, or voting data) to third parties outside what's described above without consent, and we don't use it for advertising or tracking purposes.

Legal disclosures

We may disclose Data if required by law or in response to valid legal requests, including to protect our rights, safety, or property.

International Data Transfers

We may transfer and store Data outside the jurisdiction where you reside. When we do, we put appropriate safeguards in place to protect it, consistent with applicable data protection laws.

🧒 Children's Privacy

ParadeSmart is not directed to children, and we do not knowingly collect personal information from children under 13 (or the relevant age of digital consent in your region). Parade of Homes events are family-friendly and may be attended by children, but the app itself is intended for use by adults — for example, an adult purchasing tickets or scanning a QR code. If we learn we've inadvertently collected a child's personal information, we'll take steps to delete it.

⚖️ Your Privacy Rights

Depending on where you live, you may have some or all of these rights over Data we hold about you:

• Right to access: request access to the personal information we hold about you.
• Right to rectification: request correction or update of inaccurate or incomplete personal information.
• Right to erasure: request deletion of your personal information, subject to legal obligations or legitimate interests (see Data Retention & Deletion).
• Right to object: object to certain processing of your personal information, based on specific grounds.
• Right to withdraw consent: where we rely on your consent, you can withdraw it at any time — see below.

🗑️ Data Retention & Deletion

We retain Data only as long as necessary for the purposes described in this Policy, or as required by law. Ticket and event Data is generally retained for the current and prior event seasons to support reporting, then archived or deleted on a schedule agreed with your HBA.

You can request deletion of your personal information at any time (see Your Privacy Rights). Note that some Data — like transaction records needed for tax or accounting purposes — may need to be retained even after a deletion request, as required by law.

🛡️ Data Storage and Security

Data may be stored on our secure servers or with third-party service providers who adhere to strict data protection standards. We implement technical and organizational measures to protect Data against unauthorized access, disclosure, alteration, or destruction — including encryption, firewalls, access controls, and regular security assessments.

Our data will be:

• Accurate and kept up-to-date
• Collected fairly and for lawful purposes only
• Processed within our legal and moral boundaries
• Protected against unauthorized or illegal access by internal or external parties

Our data will not be:

• Communicated informally
• Stored for longer than necessary
• Transferred to organizations, states, or countries without adequate data protection policies
• Distributed to any party other than those agreed upon by the data's owner (exempting legitimate law enforcement requests)

Data Breach Response

In the event of a data breach that poses a risk to your rights and freedoms, we will promptly assess the breach, take necessary action to mitigate its impact, and notify the appropriate supervisory authorities and affected individuals.

🎓 Employee Training and Awareness

We provide training and ongoing awareness programs to our employees and contractors so they understand their responsibilities under this Policy and are aware of applicable data protection laws and regulations.

🔄 Policy Review

We review and update this Policy periodically to ensure its continued relevance and compliance with applicable data protection laws and regulations, and as ParadeSmart's features change.

✉️ Contact Information

For questions about this Policy, or to exercise your privacy rights:

• Email: support@paradesmart.com
• Legal / Virgo Development: support@virgodev.com
• Phone: 435-767-1602
• Address: 87 E 2580 S, St. George, UT 84790

Further Reading

• Data Protection Act of 1998 (UK)
• The General Data Protection Regulation (GDPR)
• Data protection in United States
• California Consumer Privacy Act (CCPA)