Privacy Policy

Last Updated: March 5, 2026

This Privacy Policy describes how Clue Command ("we," "our," or "us") collects, uses, and protects your personal information when you use our escape room management software and services.

1. Information We Collect

1.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Email address, password (encrypted), name, and role when you create an account
• Company Information: Company name, address, phone number, and business details
• Waiver Data: Customer names, email addresses, dates of birth, digital signatures, and custom field data collected through our waiver system
• Team Photos: Photos of customers taken during escape room experiences
• Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers)

1.2 Information Automatically Collected

When you use our services, we automatically collect:

• Usage Data: Game sessions, timestamps, and system interactions
• Technical Data: IP addresses, browser type, device information, and operating system
• Cookies: Session cookies and authentication tokens (see Cookie Policy below)

2. How We Use Your Information

We may use the information we collect for various purposes, including but not limited to:

• Providing, maintaining, and improving our services
• Processing transactions and managing subscriptions
• Sending administrative information, updates, and communications
• Responding to inquiries and providing customer support
• Detecting, preventing, and addressing technical issues and security threats
• Complying with legal obligations and enforcing our terms
• Sending marketing and promotional communications
• Conducting business analytics and research
• Other purposes as we may determine from time to time

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party service providers who perform services on our behalf (e.g., payment processing via Stripe, hosting services)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

4. Data Security

We implement various technical and organizational measures that we believe are appropriate to help protect your personal information. These measures may include:

• Encryption of data in transit (HTTPS/TLS) where technically feasible
• Encryption of certain sensitive data at rest
• Password hashing using industry-standard methods
• Security measures and access controls as we deem necessary

However, no method of transmission over the internet or electronic storage is completely secure. We do not guarantee or warrant the security of your information. You acknowledge that you provide information at your own risk and that we are not responsible for any unauthorized access, use, or disclosure of your information.

5. Data Retention

We may retain your personal information for various periods depending on our business needs, legal requirements, and operational considerations. We retain information for as long as we determine is necessary or appropriate, including but not limited to:

• Providing our services to you
• Compliance with legal, regulatory, or contractual obligations
• Resolving disputes and enforcing agreements
• Business and operational purposes

When you cancel your account, we may delete or anonymize your personal information, but we are not obligated to do so within any specific timeframe. We may retain certain information as required or permitted by law, for legitimate business purposes, or for other reasons we determine appropriate.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us using the information provided below.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze usage patterns and improve our services

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our service.

8. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

11. Contact Us