Effective September 1, 2026
Poolo privacy.
This notice explains what Poolo collects in its U.S. public beta, why it is used, who processes it, and how to delete or export it.
Information Poolo collects
Account information includes your verified email, optional display name and phone number, internal account identifier, sign-in activity, and session data. Pool information includes service, title, amount, renewal date, capacity, organizer and membership roles, invite status, marketplace-review status, and plan-verification status. If an organizer enables receipt checks, Poolo processes forwarded receipt sender, recipient, subject, message identifier, billing timing, and the limited message content needed to match the provider and renewal. Poolo stores the verification result and timing rather than raw receipt content or attachments. Payment records include Stripe customer, payment, refund, dispute, and event identifiers; amount; status; consent version and time; and failure information. Support requests include the email, category, and message you submit.
Payment information
Stripe collects and stores card numbers, security codes, bank or wallet credentials, and other payment details. Poolo does not receive or store raw card numbers or security codes. Poolo receives the limited identifiers and status information needed to show payment state, route the plan share, calculate fees, process refunds, and respond to disputes.
How information is used
Poolo uses information to authenticate users, remember pools, operate invites and approvals, calculate and collect authorized amounts, route funds, show payment history, stop recurring authorizations, provide support, prevent fraud and prohibited transfers, enforce provider-eligibility safeguards, debug the service, measure recurring use, and comply with legal obligations.
Who receives information
Poolo uses Supabase for email authentication, Stripe for payments and connected-account transfers, and OpenAI Sites and Cloudflare infrastructure to host and operate the application. These providers process information under their own terms and privacy commitments. Pool organizers and members see display names, roles, eligibility state, and payment status for their pool; they do not see another member's email, phone number, or payment credentials. Poolo does not sell personal information or use it for cross-context behavioral advertising.
Retention
Active account and pool information is kept while the account or pool is needed. Support and security records are kept long enough to resolve the request and prevent abuse. When an account is deleted, Poolo removes the sign-in and personal profile fields, cancels organizer pools, and stops future Poolo authorizations. Limited anonymized payment records may be retained as reasonably necessary for refunds, disputes, fraud prevention, accounting, tax, and legal obligations, generally no longer than applicable recordkeeping periods.
Your choices and rights
From Account Control, a signed-in user can download account data and permanently delete the account. Members can leave and organizers can cancel from the pool page. You may also submit an access, correction, deletion, or appeal request through Support. Poolo will verify requests before disclosing or deleting information and will not discriminate for exercising an applicable privacy right.
Security
Poolo uses encrypted connections, secure HTTP-only session cookies, server-side authorization checks, Stripe-hosted checkout, webhook signature verification, and restricted production secrets. No system is perfectly secure; report suspected unauthorized access through Support.
Children and location
Poolo is for U.S. adults and is not directed to children under 13. Poolo does not knowingly collect information from a child under 13. Information is processed in the United States and other locations where Poolo's service providers operate.
Changes and contact
Poolo will post material changes with a revised effective date and provide additional notice when required. Privacy questions or requests can be submitted through Poolo Support or emailed to support@poolo.me. This notice should be reviewed by qualified counsel before live payments or expansion beyond the U.S. beta.