This policy explains what information ChamberPages Awards Manager collects, how we use it, and the choices you have. It applies to our marketing site, the application at app.chamberpages.com, and the public application pages we host for organizations using the Service.
Who's who
When your organization runs an awards program with us, the organization is the data controller for the applicants, nominees, and reviewers in that program. ChamberPages is the data processor — we hold and process that information on the organization's behalf, under these terms and the organization's instructions.
For our marketing site visitors and the people who create organization accounts with us, ChamberPages is the controller.
What we collect
Account information. Name, email address, the organization you belong to, your role, and any preferences you set. We use a passwordless sign-in (one-time code by email), so we don't store passwords.
Program content. The programs, categories, rubrics, application forms, branding, and other content your organization configures.
Submission data. Information applicants and nominees provide through application forms — including answers, file uploads, scores, reviewer comments, and status changes. The fields collected are defined by the host organization, not us.
Usage data. Standard web logs (IP address, user agent, pages visited, timestamps) and product analytics about how features are used, in aggregate.
Cookies.A session cookie to keep you signed in and a small number of functional cookies. We don't use third-party advertising or cross-site tracking cookies.
How we use information
- Provide, maintain, and secure the Service.
- Send transactional email — sign-in codes, application confirmations, status updates, and reviewer assignments.
- Communicate with you about your account or material changes to the Service.
- Improve features and fix bugs (using aggregated or de-identified usage data).
- Comply with legal obligations and enforce our Terms.
We do not sell personal information, and we don't use customer submission data to train machine-learning models.
Sharing
We share information with a small set of subprocessors that help us run the Service:
- Supabase (Postgres database, authentication, file storage).
- Our hosting provider (Vercel) for serving the application.
- Our transactional email provider for sending email on your behalf.
Each subprocessor is contractually required to protect your information and to use it only to provide services to us. We don't share customer data with third parties for their own marketing.
Storage and security
Data is stored in the United States. We use row-level security at the database layer so an organization's data is only accessible to that organization's members. Connections are encrypted in transit (TLS), and data is encrypted at rest by our infrastructure providers. We follow reasonable industry practices, but no system is perfectly secure.
Retention
We keep your information for as long as your account is active. If your organization deletes a program or a submission, the record is removed from the live database within a reasonable period. Backups roll off on a rolling schedule. When you close your account, we delete or anonymize remaining personal information within 90 days, except where we're required to keep it for legal or accounting reasons.
Your rights
Depending on where you live (e.g. EU/UK, California), you may have the right to access, correct, delete, or export your personal information, or to object to certain uses. If you're an applicant or nominee, the easiest path is usually to contact the organization running the program. For account holders, you can reach us through the contact page.
Children
The Service is not designed for children under 13. We don't knowingly collect personal information from children. If an organization runs a program that involves applicants under 13 (a youth scholarship, for example), the organization is responsible for obtaining the appropriate parental consents.
Changes
We may update this policy as the Service evolves. If we make a material change we'll notify you through the Service or by email before it takes effect.
Contact
Questions about this policy or how we handle your information? Reach us through the contact page.