Privacy Policy

Last updated: 30 July 2026


Callboard ("we", "us", "our") provides a platform for community theatre companies to manage their productions, members, scripts, schedules, recordings, and auditions. This policy explains what information we collect, how we use it, and your rights.

By creating an account or using Callboard, you agree to the practices described here.

1. Information We Collect

Account information. When you register, we collect your name and email address. If you sign up with a password, it is stored as a secure hash. We never see or store it in plain text. Your mobile number is optional. If you sign in with Apple or Google instead, we receive your name and email (or, if you choose Apple's "Hide My Email" option, a private relay address) from that provider. We never receive your Apple ID or Google account password.

Profile photo. If you choose to upload a profile picture, it is stored securely and displayed to members of productions you belong to.

Production content. We store content you create within Callboard: posts, announcements, comments, rehearsal notes, schedule events, script and score files (PDF), audio recordings, and choreography video clips.

Audition data. If your production uses our auditions feature, candidate information submitted via public sign-up forms (name, contact details, responses to form fields) is stored and visible to the production's admins and owners.

Costume measurements. Productions may optionally record wardrobe details for cast members: body measurements (e.g. height, chest, waist, hips, sizing), and notes including fabric or makeup allergies, to support costume fitting. Entering this information is optional. It is visible only to you, the production's owner/admin, and members with wardrobe/costume management permissions, not to the wider cast or crew.

Payment information. On the web and on Android, subscription payments are processed by Stripe; we never receive or store your full card number, and we retain your Stripe customer ID and subscription status to manage your plan. On iOS, subscriptions are purchased through Apple's In-App Purchase system and billed directly by Apple to your Apple ID. We never receive your payment details at all. We receive only your purchase and subscription status (via RevenueCat, see below) so we can grant access to paid features.

Device and notification data. If you enable push notifications, we store a device push token to deliver notifications to your device. On iOS this token is used to send notifications through Apple's Push Notification service; on Android and web, through Google's Firebase Cloud Messaging.

Usage data. We log document access events (e.g. which scripts were opened and when) to provide analytics features to production owners. We do not sell or share this data.

2. How We Use Your Information

We do not use your information for advertising, and we do not sell your data to third parties.

3. Information Sharing

We share information only with the following third-party service providers, solely to operate the service:

We may disclose information if required to do so by law or in response to a valid legal request.

4. Data Storage & Security

Your data is stored in Supabase's hosted infrastructure. Passwords are never stored in plain text. They are hashed by Supabase Auth. File uploads are stored in private, access-controlled storage buckets. All data in transit is encrypted via TLS.

While we take reasonable precautions, no system is completely secure. We encourage you to use a strong, unique password for your Callboard account.

5. Data Retention

We retain your account data for as long as your account is active. You can permanently delete your account at any time from within the app (Edit profile → Delete account). This takes effect immediately, not on a delay: your profile, login credentials, and personal interactions (reactions, bookmarks, attendance records, and similar) are deleted right away.

Content you contributed to a production you shared with others (posts, notes, scripts, recordings, and similar) is not deleted when you delete your account, so the rest of the production isn't disrupted by your departure. It's retained with your name removed from it (shown as "Unknown"). If you owned a production, it's handed over to another member rather than deleted, unless you were its only member, in which case the production and everything in it is deleted along with your account.

Expired subscription data and audit logs may be retained for up to 12 months for legal and financial compliance purposes, and residual copies of deleted data may persist briefly in backups before being purged in the ordinary course of our backup rotation.

6. Your Rights

Depending on where you are located, you may have rights under the New Zealand Privacy Act 2020, the EU General Data Protection Regulation (GDPR), or other applicable laws. These include the right to:

To exercise any of these rights, contact us at the address below. We will respond within 20 working days.

7. Children's Privacy

Community theatre productions routinely cast children, including children under 13, and Callboard is built to support that. It is not a service aimed at children to use independently, but it does knowingly support their participation as production members, typically with a parent or guardian operating the account on their behalf.

Any production member under 18 must have a guardian on record. A production's staff (not the child) enters the guardian's name, email, phone number, and optional notes (e.g. pickup arrangements). This is visible only to the member themselves and to staff who need it to run rehearsals or contact a guardian directly, never to the wider cast or company list.

We do not independently verify a member's age, and Callboard does not use any member's information (child or adult) for advertising, profiling, or any purpose beyond running the production they're part of. If you are a parent or guardian and have a question or concern about a child's account or the information held about them, contact us at the address below and we will address it, including deleting information where appropriate.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or via an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Callboard after a change constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this policy or wish to exercise your privacy rights, please contact us:

Callboard

Email: hello@callboard.nz

Website: callboard.nz