Privacy Policy

Who we are

Everband helps community bands, teams and clubs manage members, events, rehearsals and parent rosters. This policy explains what information we collect, how we use it, and the choices you have. It applies to the Everband website and application.

Information we collect

• Account information. Adults hold the accounts. We collect your email address to sign you in and to send you the emails your organization asks us to send.
• Organization records. Staff members add or import records about their organization: member and family names, contact emails, group assignments, events, rehearsal rosters and attachments.
• Student information. Students never sign in and never hold accounts. We collect the minimum needed to run the organization — typically a name and group membership. We do not collect student credentials or medical information.
• Technical information. We keep limited operational logs (such as the IP address of sign-in requests) to protect accounts against abuse. We do not write message contents or other sensitive details into logs.

How we use information

We use information only to provide the service: signing you in, showing your organization its own records, sending the emails your organization's staff compose (event updates, invitations, rosters), and keeping an audit history of staff actions. We do not sell personal information or use it for advertising.

Data isolation

Each organization's data is isolated. Staff and parents only see their own organization. Every request is checked on the server against your membership and role before any data is returned.

Attachments and files

Attachments are private. Files are stored in private storage and are never exposed through long-lived public links. Every download is checked against who is allowed to see it. Contact details are never public, and there are no public event pages.

Sign-in security

We use passwordless sign-in: a one-time code and magic link sent to your email. Codes and links expire after 10 minutes, can only be used once, and requests are rate-limited.

Email and unsubscribe

Organizations send operational emails through Everband, such as event updates and roster reminders. You can unsubscribe from these at any time using the link in each email. Sign-in and security emails are not affected by unsubscribing, because they are required to access your account. We record who each email was sent to and whether it was delivered, so staff can see delivery status; we do not log the full content of messages alongside recipient details.

Where data is stored

Everband runs on Cloudflare's global network, and data is stored with Cloudflare's storage services. We do not currently guarantee that data is stored in any specific country or region, including Australia.

Children

Everband is designed so that children do not use it directly. Students never sign in, hold no accounts, and cannot be contacted through the platform. Information about students is added and controlled by the adults who run the organization, and we keep it to the minimum needed.

Data retention, deletion and export

Organization data is retained while the organization remains active. Self-serve export and deletion are not yet available; if you want your personal information or your organization's data corrected, exported or deleted, contact us using the form on our home page and we will action it.

Changes to this policy

We may update this policy as the product and applicable law evolve. We will update the effective date above, and material changes will be communicated to organization owners by email.

Contact

Questions about privacy? Reach us through the contact form.