Station Kitty LLC ("Station Kitty," "we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy describes how we collect, use, disclose, and protect information when you use the StationKitty software-as-a-service platform, including the websites located at stationkitty.com, cgfh4.com, and all associated subdomains, mobile applications, and related services (collectively, the "Service").
By accessing or using the Service, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Service.
1. Information We Collect
1.1 Information You Provide Directly
When you create an account, subscribe to the Service, or use its features, you may provide us with the following types of information:
| Category | Examples |
|---|---|
| Account Information | Full name, email address, password (encrypted), phone number, profile photograph |
| Department Information | Department name, station name(s), station address(es), shift schedules, department logo |
| Role and Membership Data | User role (administrator, kitty manager, officer, crew member), shift assignment, rank, member status |
| Financial Records | Daily contribution amounts, breakfast charge records, expense descriptions, expense amounts, fund balances, tab records |
| Receipt and Document Uploads | Photographs of receipts, invoices, and other supporting documents uploaded in connection with expense tracking |
| Inventory Data | Inventory item names, quantities, categories, low-stock thresholds, shopping list entries |
| Billing Information | Payment method details (processed and stored by Stripe; Station Kitty does not directly store credit card numbers), billing address, subscription plan selection |
| Communications | Messages, feedback, and support requests you send to us |
1.2 Information Collected Automatically
When you access or use the Service, we may automatically collect certain information, including:
| Category | Examples |
|---|---|
| Device Information | Device type, operating system, browser type and version, screen resolution |
| Usage Data | Pages visited, features used, actions taken within the Service, timestamps of activity |
| Log Data | IP address, access times, referring URLs, error logs |
| Cookies and Similar Technologies | Session cookies for authentication, preference cookies for user settings |
1.3 Information from Third-Party Services
If you choose to register or log in using a third-party authentication provider (such as Google OAuth), we may receive your name, email address, and profile photograph from that provider, as authorized by your privacy settings with that provider.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Providing and Operating the Service. We use your information to create and manage your account, process subscriptions, deliver the features of the Service, and provide customer support.
- Billing and Payments. We use billing information to process subscription payments, setup fees, and related financial transactions through our payment processor, Stripe. Station Kitty does not directly access, store, or process credit card numbers or bank account details.
- Communication. We may use your email address to send you important notices about the Service, including account verification, password reset links, subscription confirmations, billing receipts, service updates, and security alerts.
- Improving the Service. We use usage data and analytics to understand how the Service is used, identify areas for improvement, diagnose technical issues, and develop new features.
- Security and Fraud Prevention. We use information to detect, prevent, and respond to security incidents, fraud, and other harmful activities.
- Legal Compliance. We may use information as necessary to comply with applicable laws, regulations, legal processes, or governmental requests.
3. How We Share Your Information
Station Kitty does not sell your personal information. We may share your information in the following limited circumstances:
- Within Your Department. Information you enter into the Service is visible to other Authorized Users within your Department in accordance with the role-based access controls configured by your Department Administrator.
- Service Providers. We share information with third-party service providers who perform services on our behalf, subject to contractual obligations to protect your information. These providers include Stripe (payment processing), Google (authentication), cloud infrastructure providers (hosting and data storage), and Amazon Web Services S3 (file storage).
- Legal Requirements. We may disclose information if required to do so by law, regulation, legal process, or governmental request.
- Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
- With Your Consent. We may share your information for any other purpose with your explicit consent.
4. Data Security
Station Kitty implements appropriate technical and organizational measures to protect your information, including:
- Encryption. All data transmitted between your device and our servers is encrypted using TLS. Data stored in our databases and file storage systems is encrypted at rest.
- Authentication. User passwords are hashed using bcrypt and are never stored in plain text.
- Access Controls. The Service implements role-based access controls that restrict access to data based on user roles and permissions.
- Infrastructure. The Service is hosted on professionally managed cloud infrastructure with industry-standard physical and network security controls.
While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.
5. Data Retention
We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The following table describes our standard retention periods:
| Data Type | Retention Period |
|---|---|
| Active Account Data | Retained for the duration of the active subscription |
| Department Data After Cancellation | Retained for 30 days after subscription cancellation to allow for data export, then permanently deleted |
| Inactive User Accounts | Retained for 12 months after last login, then subject to deletion with prior notice |
| Billing Records | Retained for 7 years as required for tax and accounting purposes |
| Server Logs | Retained for 90 days for security and diagnostic purposes |
| Health Monitoring Data | Granular data retained for 24 hours; hourly summaries for 7 days; daily summaries for 90 days |
Upon request, we will delete your personal information in accordance with applicable law, subject to any legal obligations that require us to retain certain records. See Section 6 below for instructions on how to request deletion.
6. Your Rights and Choices — Including Data Deletion
Depending on your jurisdiction, you may have certain rights regarding your personal information:
- Access and Portability. You may request a copy of the personal information we hold about you. Department Administrators may export Department Data through the export features available within the Service.
- Correction. You may update or correct your Account information at any time through the Service's profile settings.
- Deletion — How to Request Deletion of Your Data. You may request deletion of your personal information at any time by:
- Emailing [email protected] with the subject line "Data Deletion Request" and your registered email address.
- We will process your request within 30 days and confirm deletion by email.
- Please note that we may retain certain information as required by law (e.g., billing records for tax purposes) or for legitimate business purposes, as described in Section 5.
- Deleting your account will permanently remove your profile, contribution history, and all personal data from active systems. Backups are purged within 90 days.
- Opt-Out of Communications. You may opt out of non-essential email communications by following the unsubscribe instructions in those emails. You cannot opt out of essential Service-related communications (such as security alerts and billing notices).
- Cookie Preferences. You may control cookies through your browser settings. Please note that disabling cookies may affect the functionality of the Service, particularly authentication features.
7. California Privacy Rights
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:
- Right to Know. You have the right to request information about the categories and specific pieces of personal information we have collected about you.
- Right to Delete. You have the right to request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out of Sale. Station Kitty does not sell personal information.
- Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.
To exercise your California privacy rights, please contact us using the information in Section 11 below.
8. Children's Privacy
The Service is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe that a child under 18 has provided us with personal information, please contact us at [email protected].
9. Third-Party Links and Services
The Service may contain links to third-party websites or services that are not owned or controlled by Station Kitty. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Service.
10. International Users
The Service is operated from the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to the United States.
11. Changes to This Privacy Policy
Station Kitty reserves the right to update this Privacy Policy at any time. We will notify you of material changes by posting the updated Privacy Policy on our website and updating the "Last Updated" date above. Where required by law, we will provide additional notice (such as email notification) for significant changes. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices — including data deletion requests — please contact us at:
Station Kitty LLC
Privacy inquiries & data deletion: [email protected]
General inquiries: [email protected]
Website: https://stationkitty.com
This Privacy Policy was last updated on March 22, 2026.