Privacy Policy
Effective August 8, 2026 · Version privacy-2026-08-08-draft-1
The proposed data controller is Courtesy of Culture, at 1732 Pryor Rd, Atlanta, GA 30315. This draft must not be published until that identity is confirmed.
Information collected
Depending on how you use the site, we process account identifiers and profile details supplied by the authentication provider; waitlist contact, school, interest, location, referral, and consent information; membership status and billing dates; Stripe customer, subscription, Checkout Session, Price, invoice, charge, refund, and event identifiers; support communications; delivery status and suppression events; and housing-page or booking-handoff context.
Payments
Stripe processes full payment-card details. The application does not intentionally store full card numbers or security codes. It stores payment-related identifiers and subscription state needed to fulfill and manage membership. Review Stripe’s privacy notice.
Waitlist and marketing
Waitlist marketing is sent only after affirmative consent. Consent is separate from required contract acceptance. Promotional messages include an unsubscribe mechanism. Unsubscribing stops promotional updates but does not block essential security, account, billing, or membership-fulfillment messages.
Providers and disclosures
The service uses ChatGPT/Sites authentication and hosting, Cloudflare-hosted storage, Stripe for membership billing, and Resend for transactional email. Student & Intern Housing pages may later hand off to an identified reservation operator using Lodgify. Lodgify’s role is booking software; the housing reservation company must be identified as [HOUSING RESERVATION COMPANY — OWNER TO CONFIRM] before a reservation handoff is enabled. Review Lodgify’s privacy notice. No production analytics provider is currently connected; local browser events do not establish a live analytics service.
Purposes
We use information to authenticate accounts, operate the waitlist, process and fulfill membership, determine access, prevent duplicate fulfillment, provide billing controls, send requested or essential messages, keep delivery and consent records, secure the service, respond to support requests, and meet legal obligations.
Housing information
Pop Up Dorms does not currently process a housing reservation in this application. Information entered after an external handoff is governed by the identified operator’s and Lodgify’s notices. Demonstration inquiry forms do not send requests. [DATA-SHARING DETAILS REQUIRE OPERATOR CONFIRMATION.]
Retention and security
We use access controls, signature verification, deduplication, and server-only credentials, but no system can be guaranteed secure. [CATEGORY-SPECIFIC RETENTION PERIODS AND DELETION RULES REQUIRE OWNER AND ATTORNEY APPROVAL.] Information should be retained only as long as needed for the stated purpose, disputes, accounting, security, or legal obligations.
Cookies and local technology
Authentication and third-party checkout may use cookies or similar technology. The current application uses browser storage for device-local demonstration preferences and does not treat it as authoritative account data. [A COOKIE INVENTORY AND JURISDICTION REVIEW ARE REQUIRED BEFORE ADDING ANALYTICS OR ADVERTISING.]
Optional conversion analytics
After optional consent, the application may store a random anonymous visitor ID, landing path, referrer host, campaign source, medium, campaign, page type, stable housing property ID, and a limited conversion-event history in first-party storage. When you authenticate, that anonymous journey may be linked to the opaque internal user ID. We do not use raw email, name, phone, full address, card data, credentials, support-message contents, or housing documents as analytics identifiers or properties. Optional browser events are suppressed when consent is declined and when supported Do Not Track or Global Privacy Control signals are present. No session replay or advertising pixel is enabled. Recommended optional-event retention is 13 months; production deletion automation must be configured before analytics launch.
Your choices
Use the email unsubscribe link for marketing. To request access, correction, deletion, or information about your data, contact support@popupdorm.com. Rights vary by location; no state-specific or international rights are promised until customer jurisdictions are confirmed.
Changes
Material changes should receive an updated effective date and version and, where required, notice or renewed consent.