9-ON
Last Updated: August 31, 2026

Privacy Policy

Effective Date: August 31, 2026

Introduction

9-ON (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use 9-ON, our platform for small facilitated discussion groups.

Information We Collect

Account Information

  • Registration Data: Email address, password (hashed), first name, and display name
  • OAuth Authentication: If you sign in with Google, we receive your email address, name, and profile picture from Google. That same sign-in also requests permission to create, update, and delete the Google Calendar events 9-ON generates for Parlor video sessions, including Google Meet links. Google's privacy policy applies to the data they share with us.
  • Google Calendar: Signing in with Google connects that Google account's Calendar when you approve the request. Email-and-password accounts can connect Calendar later. 9-ON uses the connection only for events it creates for your Parlor sessions. Calendar access is not required to browse or join a Parlor. You can disconnect it from the Parlor video settings, and meeting links can still be created without it.
  • Shared login infrastructure: 9-ON and Club Dewey are separate products that share account infrastructure. Credentials may work across both services; account-related data may be accessible across products we operate. 9-ON does not require a Club Dewey membership.

Profile Information

  • Display Name and Bio: Information you choose to share on your 9-ON profile
  • Profile Photo: An optional photo you upload for your profile

Parlor Participation Data

  • Applications: Information you provide when applying to join a Parlor
  • Host Data: If you host a Parlor, the title, description, topic, schedule, and settings you configure
  • Participation Records: Which Parlors you have joined or hosted

Payment Information

  • Payments: Hosting and joining Parlors on 9-ON is free. If paid features are offered later, payments will be processed by Stripe; we do not store your full credit card number. Stripe's privacy policy applies to payment data.

Technical Information

  • Usage Data: How you interact with the platform (pages visited, features used)
  • Device Information: Browser type, operating system, IP address
  • Cookies: We use cookies to maintain your session and enhance your experience

How We Use Your Information

We use your information to:

  • Provide the Service: Facilitate browsing, applying to, creating, and managing Parlors
  • Scheduled video sessions: Create Google Meet links for scheduled Parlor sessions so participants can join. If you connect Google Calendar as a host, those session events are also created on your calendar
  • Communication: Send you notifications about applications, session updates, and important service communications
  • Profile Display: Show your name and profile information to other participants and hosts within your Parlors
  • Payment Processing: Process any future paid features through Stripe when applicable
  • Improvement: Understand how the platform is used to improve the experience
  • Legal Compliance: Meet legal obligations and protect our rights

Data Storage and Security

Data Hosting

  • Your data is stored securely on Supabase, a trusted cloud database provider
  • All data is encrypted in transit and at rest
  • We implement industry-standard security measures to protect your information

Security Measures

  • Secure authentication and authorization systems
  • Access controls limiting data access to authorized personnel only
  • Monitoring and logging of data access

Third-Party Services

Stripe

When payments are collected for 9-ON features, we use Stripe. Stripe's privacy policy applies to payment data they handle on our behalf.

Google OAuth and Google Calendar

  • We use Google OAuth for optional sign-in. Signing in with Google also requests Google Calendar access so that account is connected for Parlor meeting links. Email-and-password accounts can connect Calendar separately.
  • When you sign in with Google, Google shares your email address, name, and profile picture with us so we can create and manage your 9-ON account. The same approval includes Calendar permission to create, update, and delete only the calendar events 9-ON generates for Parlor sessions, including Google Meet links
  • When a host connects Google Calendar, we request exactly these Google scopes: https://www.googleapis.com/auth/calendar.events, openid, https://www.googleapis.com/auth/userinfo.email, and https://www.googleapis.com/auth/userinfo.profile. The Calendar scope lets us create, update, and delete calendar events that 9-ON itself generates for that host's Parlor sessions, including attaching Google Meet video links. The identity scopes identify which Google account was connected. We do not use this access to read, display, modify, or delete the host's other calendar events, contacts, or Google account content
  • We store an encrypted OAuth refresh token, the connected Google account email, and related event identifiers so we can keep those 9-ON session events in sync when the schedule changes or the host disconnects
  • Meet links created this way are shared with Parlor participants so they can join the scheduled session. We do not sell Google user data or use it for advertising
  • Google's privacy policy and terms of service apply to the OAuth process and to data Google holds in your Google account
  • Hosts can disconnect Google Calendar from the Parlor's video sessions settings in 9-ON, which deletes the stored refresh token. You can also revoke 9-ON's access at any time in your Google Account permissions

Google API Services User Data Policy (Limited Use)

9-ON's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve user-facing 9-ON features (account sign-in and host-scheduled Meet sessions). We do not use that data to serve ads, to train generalized AI or machine-learning models, or for any purpose that is not disclosed in this policy.

Supabase

We use Supabase for database hosting and user authentication. Supabase's privacy policy and security measures apply to data stored on their platform.

Vercel

Our platform is hosted on Vercel. Vercel's privacy policy applies to hosting-related data processing.

Resend

We use Resend to deliver transactional emails (e.g., application updates, session notifications). Resend's privacy policy applies to email delivery data.

Information Shared with Other Users

  • Hosts can see your display name, profile photo, and application details when you apply to their Parlor
  • Participants within the same Parlor can see your display name and profile photo
  • Public listings: If you create a public Parlor, the title, description, topic, your display name, and schedule are visible to all visitors

Your Rights and Choices

Access and Control

  • View Your Data: Access your profile and participation data through your account
  • Update Information: Modify your profile at any time
  • Google Calendar connection: Hosts can disconnect Google Calendar in 9-ON or revoke access in their Google Account
  • Delete Account: Request account deletion, which will remove your personal data

Communication Preferences

  • Essential service communications (application status, session updates) cannot be disabled while your account is active
  • You may unsubscribe from optional marketing or promotional communications

Data Retention

  • Account Data: Retained while your account is active
  • Google Calendar tokens: Retained only while a host's Calendar connection is active; deleted when the host disconnects or the account is deleted
  • Participation Records: Retained to maintain group history for other participants
  • Deleted Accounts: Personal data is permanently deleted within 30 days of account deletion request
  • Legal Requirements: Some data may be retained longer if required by law

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data during international transfers.

Cookies and Tracking

We use cookies and similar technologies to:

  • Maintain your authentication session
  • Remember your preferences and settings
  • Analyze platform usage and performance
  • Improve our services

You can control cookie settings through your browser preferences.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the updated policy on our website and updating the Effective Date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Your Consent

By using 9-ON, you consent to the collection and use of your information as described in this Privacy Policy.

Last Updated: October 20, 2026

9-ON - Real people. Real connection.

9-ON - Let's talk about it.