Privacy Policy

1. Who We Are

RacePaceCrew is an online platform that connects ultramarathon runners with pacers, crew members, and coaches. This Privacy Policy applies to the RacePaceCrew website and all services operated under it (collectively, the “Service”).

For privacy questions or data requests, contact us at: privacy@racepacecrew.com

2. Data We Collect

2a. Account & Profile Data

When you create an account or complete onboarding, we collect:

• Display name, first name, and last name
• Email address
• Profile photo (uploaded directly or fetched from your Google or Facebook account)
• Date of birth (used for age-appropriate content and profile differentiation)
• Gender
• Fitness level and running distance preferences
• Home location and other locations you choose to share
• A short bio
• The support roles you offer (pacer, crew, coach)

For accounts created with an email and password we store a bcrypt-hashed version of your password. We never store plaintext passwords.

2b. Race & Team Activity

When you participate in the platform we collect records of:

• Races you register for or join a team on
• Teams you create or join, and the role you fill
• Availability notices you send or receive
• Team-join invitations you send or receive and their responses
• Races you mark as favorites
• Comments you post on race pages

2c. Messages

Direct messages and team-chat messages that you send or receive are stored so that all participants can access them. Messages may include text, images, and location data that you voluntarily attach.

2d. Sign-In & Usage Data

We log the date of your first login, most recent login, and a cumulative login count. If you sign in via Google or Facebook we receive your name, email address, and profile photo URL from that provider.

We use a secure, HTTP-only session cookie (managed by Auth.js) to keep you signed in. No additional tracking cookies are set.

2e. Feedback

If you submit feedback through our feedback form, we store the content of that message together with your user ID (if signed in) and a snapshot of your display name at submission time.

2f. Interest Sign-Ups (Pre-Registration)

Visitors who submit an interest form before creating an account provide an email address and optional profile information (fitness level, distance preferences, location). This data is used only to contact you with a sign-up invitation and to gauge regional demand.

3. How We Use Your Data

We process your personal data for the following purposes:

• Providing the Service — displaying your profile, matching runners with pacers/crew/coaches, facilitating team coordination, and delivering messages.
• Account management — authenticating your identity, keeping your session active, and enabling you to update or delete your account.
• Notifications — informing you of availability requests, team invitations, responses to your requests, and team changes.
• Security & trust — detecting and preventing abuse, fraud, and unauthorized access.
• Platform improvement — understanding how the platform is used so we can improve it. We do not sell this data or use it for advertising.
• Legal compliance — meeting obligations under applicable law.

4. Data Sharing & Third-Party Services

We do not sell your personal data. We share it only with the infrastructure providers necessary to operate the Service:

• Neon (database) — our PostgreSQL database host stores all structured user and activity data. Neon Privacy Policy
• Vercel (hosting & file storage) — the platform is hosted on Vercel. Profile photos you upload are stored in Vercel Blob. Vercel Privacy Policy
• Google (OAuth) — if you choose to sign in with Google, Google authenticates you and shares your name, email, and profile photo with us under their terms. Google Privacy Policy
• Meta / Facebook (OAuth) — if you choose to sign in with Facebook, Meta authenticates you and shares your name, email, and profile photo with us under their terms. Meta Privacy Policy

Other users of the platform will see your public profile information (display name, profile photo, bio, location, and the roles you offer) and any public activity such as race comments. Team members you collaborate with will also see the messages you send within shared conversations.

5. Data Retention

We retain your personal data for as long as your account is active. If you request deletion of your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or legitimate business interests (for example, transaction records required for financial compliance).

Feedback submissions are retained in anonymized form even after account deletion so we can continue learning from the content.

6. Your Rights

Depending on your location you may have rights including:

• Access — request a copy of the personal data we hold about you.
• Correction — update inaccurate data via your account settings, or ask us to do so.
• Deletion — request that we delete your personal data (see Section 7 below).
• Portability — request a machine-readable export of your data.
• Objection / restriction — object to or ask us to restrict certain processing.

To exercise any of these rights, email us at privacy@racepacecrew.com. We will respond within 30 days.

7. Account & Data Deletion

You can request deletion of your account and all associated personal data at any time using either of the following methods:

1. In the app — go to Account Settings and click “Delete my account.”
2. By email — send a deletion request from the email address associated with your account to privacy@racepacecrew.com. Include “Account Deletion Request” in the subject line.

Deletion removes your profile, messages, team memberships, comments, and all other personal data we hold. We will confirm completion within 30 days of receiving your request.

8. Security

We use industry-standard measures to protect your data, including encrypted database connections (TLS), bcrypt password hashing, and HTTP-only session cookies. No system is perfectly secure; if you believe your account has been compromised, contact us immediately at privacy@racepacecrew.com.

9. Children's Privacy

RacePaceCrew is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out to: