Entrybound

Privacy Policy

Last updated: October 2026

This Privacy Policy describes how Entrybound ("we," "us," or "our") collects, uses, and discloses information when you use our website (entrybound.com), our interactive demo (demo.entrybound.com), and our visitor management software-as-a-service platform (collectively, the "Services").

1. Information We Collect

We collect information in three distinct capacities depending on your relationship with Entrybound:

  • Client Account Data: When you register for an Entrybound account, we collect your name, email address, company details, and billing information.
  • Visitor Data (Processed on behalf of Clients): When a guest checks in using the Services at a Client's location, we collect data as directed by that Client (which may include names, emails, phone numbers, visit purposes, and, where enabled by the Client, visitor photographs and electronic signatures). Entrybound processes this data strictly on behalf of the Client.
  • Demo and Website Data: When you use our interactive demo, we collect temporary configuration states to simulate the visitor management experience. When you submit our contact form, we collect the name, email address, organization, and message you provide so that we can respond to you.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Entrybound platform and interactive demo.
  • Authenticate users and secure Client accounts.
  • Process transactions and send related administrative communications.
  • Respond to customer support requests.

3. Cookies and Tracking Technologies

Entrybound uses only strictly necessary and functional cookies and similar browser storage (such as local storage) to operate our Services. These are used to keep you signed in and secure your session, pair a kiosk device to a location, remember interface preferences such as badge print settings, and, in our interactive demo, temporarily store your selected demo location and session state. Because these technologies are essential to the core functionality of the Services, they are set automatically when you use the relevant features.

We do not currently use non-essential marketing, advertising, or analytics cookies, and we do not use cookies to track you across other websites. If we introduce non-essential cookies in the future, we will update this Privacy Policy and request your consent where required by law.

4. Data Sharing and Sub-Processors

We do not sell your personal information. We share data only with trusted third-party service providers ("Sub-processors") necessary to operate our infrastructure:

  • Vercel: For application hosting and cloud delivery.
  • Supabase: For database management and secure user authentication.
  • Merchant of Record, Lemon Squeezy: For secure billing and subscription management.
  • Resend: For delivery of transactional email, such as visitor and host notifications and contact form submissions.
  • Cloudflare: For bot and abuse protection (Cloudflare Turnstile) on sign-up, sign-in, password, and contact forms.

5. Security and Data Retention

We implement industry-standard security measures to protect your data. Client Account Data is retained as long as the account is active. Visitor Data is retained according to the configuration settings chosen by the respective Client. When a subscription is cancelled, terminated, or expires, all associated Customer Data is subject to permanent deletion thirty (30) days later, as described in our Terms of Service, which also set out our data processing roles and responsibilities.

6. Your Data Rights

Depending on your location, you may have the right to access, correct, or delete your personal information.

  • Clients: To request access to, correction of, or deletion of your account information, contact us at privacy@entrybound.com. Upon cancellation or termination of your subscription, your Customer Data is subject to permanent deletion as described in Section 5; please export any data you wish to keep before then.
  • Visitors: Because Entrybound acts as a Data Processor for Visitor Data, any requests to access or delete check-in records must be directed to the specific Client (the host location) you visited.

7. Geographic Scope & International Visitors

Entrybound is based in the United States and our Services are intended exclusively for organizations and visitors located within the United States. Our servers, database infrastructure, and sub-processors (including Vercel and Supabase) are located in the United States. By accessing or using our Services, or by providing any personal information to us through a check-in kiosk or demo, you acknowledge and agree that your information will be transferred to, processed, and stored in the United States, where privacy and data protection laws may differ from those in your home jurisdiction.

8. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: