Understand what's collected and who sees it
What information the app collects and why, where it's kept, who can see it, how long it's kept, and emails.
This page explains, in plain words, how the app looks after people's information. It's for viewers, members and the organisations that run events.
What we collect, and why
| Information | Whose | Why |
|---|---|---|
| Name, and email if they sign in | Viewers who take part | So they can ask questions and vote, and so producers know who asked |
| Questions, poll answers, words and reactions | Viewers | To run the event |
| Recorded audio and video questions | Viewers who record one | So the host can play it |
| When and how long people watched | Viewers, on events with reports switched on | Attendance reports for the organiser |
| Registration answers | People who register | For the organiser |
| Member register, proxies and votes | Members, at formal meetings | Running the meeting and keeping the official record |
| Name, email and messages | Website visitors who chat or send an enquiry | So JPC can reply |
Where it's kept
- Event information and files are stored in Australia (Sydney), on Cloudflare.
- Video is delivered by Castr.
- Email is sent through Resend, in the US.
- Google Analytics is only used on JPC's own marketing pages, never on event pages.
Who can see what
| Person | Can see |
|---|---|
| Viewers | The event, approved questions (without names for anonymous ones), and poll results once shown. Never other viewers' emails. |
| Hosts | Questions sent to them, with the asker's name or "Anonymous". Never emails. |
| The control room | The on-air question and poll results. Never anyone's contact details. |
| Producers | Their own events only: questions with names, registrations and reports |
| Formal meeting officers | The register and proxies for their meeting. Secret ballot votes can't be linked to a member. |
| JPC staff | Everything, to run and support events |
How long it's kept
| What | How long |
|---|---|
| Viewing records | 90 days by default. The producer can choose 1 to 365 days. |
| Event information | Until the event is deleted. Deleting an event removes everything about it, including files. |
| Recorded questions that weren't used | 24 hours |
| Website chats | 2 years after the last message |
| Formal meeting records (register, proxies, votes, questions and audit trail) | The meeting's "keep records for" setting, 7 years by default, counted from the meeting. Then they're deleted automatically. |
Emails
Every invitation and reminder has an Unsubscribe link. Sign-in codes and voting links always go out, because people asked for them. See Stop invitation and reminder emails.