Privacy Policy

What this covers

This page describes what LedBy actually does today. It is written by us and has not been reviewed by a lawyer. If our product behavior changes, we update this page.

The business behind this service is 1Schedule Holdings, Inc., a California corporation ("LedBy", "we", "us"), doing business as LedBy, including via getledby.com. We are the data controller for the personal data described herein: we decide what is collected and why. You can reach us at hello@getledby.com.

Instructor information

When you create an instructor account, we store your email address and password with our authentication provider, plus the profile details you enter: name, public handle, discipline, city, optional bio, optional photo, and optional Instagram and other social media handles. Your information becomes publicly visible at your LedBy URL once you publish it. Your email address and account identifiers are never shown on your public page.

Separately from accounts, LedBy publishes unclaimed directory listings built from publicly available professional information about instructors and studios. Those listings are labelled “Unclaimed profile”, never imply membership or endorsement, and can be claimed, corrected, or removed at any time. Our directory listing policy explains what we list, what we never list, and how to get a listing changed.

Studio schedules and rosters

When a studio connects a scheduling system it already uses — for example a calendar feed or a supported scheduling provider — and authorizes us to read it, we receive the locations, class titles, times and the instructor names published in that schedule. We use this to build the studio’s schedule inside LedBy, to create or link instructor listings so the team can be rostered for substitute coverage (Swap), and to match a person who later signs in to the roster row that is already about them. The legal basis is our legitimate interest, and the studio’s, in running the coverage service the studio asked for.

Instructor listings created from a roster import are unclaimed listings: they are labelled as unclaimed, they hold professional information only (name, discipline, venue, publicly listed class times), they never carry a photo, and they cannot send messages or see student contact details. An instructor can claim, correct or remove their listing at any time. A studio administrator can see the professional roster and coverage activity for their own studio; a studio never receives an instructor’s students, student contact details, or private messages.

Attendance and optional location check-in

If you use check-in, we store which class you checked into and when. Automatic check-in is a convenience feature that compares a location reading taken by your device, while a class you follow is about to start, with the coordinates the instructor or studio set for that class. We store the result — checked in, or not — and not a location history: the reading is used for that comparison and is not kept as a trail of where you have been. You can turn automatic check-in off at any time in your settings and check in by QR code or by hand instead. Your browser will also ask for its own permission before any reading is taken.

Credits, Pro Credits and Points

Where these features are available to you, we keep the balance and the transaction history behind each of them: Credits (student offering credits), Pro Credits (professional email and text capacity bought by instructors and studios) and Points (earned reward units). Each entry records what happened, when, and what it related to, because these are records of value and we have to be able to reconcile and correct them. We keep them for as long as your account exists and for up to 7 years afterwards where tax and accounting rules require it.

Student information

When a student joins an instructor's community we store their first name and the contact details they provide (email address and/or mobile number), along with which instructor they joined, where they joined from, and the exact consent wording they agreed to with a timestamp. We keep a record of each consent event separately for each channel.

Student contact details are not shown to the instructor whose community the student joined. LedBy delivers that instructor's messages on their behalf, using the channels the student chose. An instructor can see or export a student's email address or mobile number only if that student separately and explicitly chose to share their contact details with them, which is optional, off by default, never implied by an email or text opt-in, and recorded with the date of consent. Contact details are also available to LedBy staff for operating the service. They are never public and are never sold.

Messages you receive

We only send email or text messages on channels you explicitly opted into. Text messages are recurring automated marketing and informational messages (class reminders, schedule or substitute changes, and class announcements). Message frequency varies (typically 0–4 messages per day). Message and data rates may apply. Consent is never a condition of purchase. You can unsubscribe at any time by using the unsubscribe link in an email or by replying STOP to a text, and reply HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

How to opt in, including by text, is described on our text alerts opt-in page.

Messaging data we hold

When an instructor sends an announcement through LedBy we hold the message content (subject and body), the recipient list drawn from that instructor's own followers, and per-recipient delivery status. From our delivery providers we receive and store delivery events — sent, delivered, bounced, failed, opened or clicked for email, and delivered, failed or STOP for text — together with the provider's message identifier and any error it returned.

We also keep a suppression list of addresses and numbers that must never be messaged again, built from unsubscribes, STOP replies, hard bounces and spam complaints. This list is enforced at send time and an instructor cannot override it. Campaign previews and dry runs are stored without recipient contact details.

Message content and per-recipient delivery records are kept for 24 months so we can answer delivery and complaint questions, then deleted or aggregated. Suppression entries are kept indefinitely, because deleting them would allow someone who opted out to be contacted again.

Payment information

Payments are processed by Stripe. When you pay for something on LedBy, your card details are collected and processed by Stripe, not by LedBy — we never see or store your card number. Stripe shares with us the information we need to run your account: your billing email, what you bought, the payment status, and Stripe's own customer and payment identifiers. Purchases of LedBy software are sold by 1Schedule Holdings, Inc.; classes, events and sessions are sold by the instructor or studio hosting them, who receives the payment directly. Stripe processes your data under its own privacy notice.

Why we process your data

We use instructor data to create and run your account and publish your page, and to provide support — this is necessary to perform our contract with you. We use payment and subscription data to give you the plan you bought and to meet our tax and accounting obligations. We use student contact details only to deliver the messages that student consented to receive, on the basis of that consent. We use limited, privacy-safe usage data — such as page views, shares and device category — to keep the service secure and to improve it, on the basis of our legitimate interest in running and improving LedBy.

Who we share data with

We do not sell personal data. We share it only with the providers we need to run the service, and only with the data each one needs:

Mobile numbers and SMS consent are never shared with third parties or affiliates for marketing or promotional purposes. Numbers are shared only with our messaging carrier below, solely to deliver the messages you asked for.

• Twilio SendGrid — email delivery. Receives recipient email addresses, names used for personalization, and message content, and returns delivery and engagement events.
• Twilio — text message delivery. Receives recipient mobile numbers and message content, and returns delivery events and STOP replies. Carrier registration additionally requires business details about the sending instructor.
• Stripe — payment processing, payouts to instructors and studios, receipts and refunds.
• Our hosting, database and authentication providers — storage and operation of the service.
• Professional advisers such as accountants where necessary, and authorities where the law requires it.

These providers act on our instructions as processors and may not use the data for their own purposes. Message delivery involves transfers to providers in the United States, made under the standard contractual clauses and equivalent safeguards in their data processing terms. A student's contact details are shared with the instructor whose community they joined only where that student explicitly chose to share them.

How long we keep it

We keep instructor account and profile data for as long as your account is active, and delete or anonymize it within 90 days of you closing your account or asking us to delete it. Student contact details are kept until the student unsubscribes or asks to be removed, or until the instructor's account is deleted, after which we remove them within 90 days. We keep consent records and payment or invoice records for up to 7 years where we need them to meet legal, tax and accounting obligations. Usage analytics are kept in aggregated form.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it or delete it, ask us to restrict or stop certain processing, ask for it in a portable form, and withdraw consent at any time — withdrawing consent does not affect what we did before you withdrew it. You can unsubscribe from messages at any time using the link in an email or by replying STOP to a text. Depending on where you live, you may also have the right to complain to your local data protection authority. Email us and we will respond within one month.

How we protect your data

We use appropriate technical and organizational measures to protect your data: data is encrypted in transit, passwords are hashed by our authentication provider and never stored by us in readable form, and access to student contact details is restricted at the database level so only the instructor whose community they joined can read them. Access by LedBy staff is limited to what is needed to operate and support the service. No service can promise perfect security, but we take this seriously and fix problems quickly when we find them.

Cookies

We use only essential cookies and similar storage: the ones that keep you signed in and keep the service secure, plus a random identifier used for privacy-safe product analytics that is not tied to your name or email. We do not use advertising or third-party marketing cookies. Stripe sets its own cookies during checkout to process your payment. You can clear this storage in your browser settings at any time.

Deletion requests

Email hello@getledby.com to request access to, correction of, or deletion of your data. We handle these manually today.

Questions

Reach us at hello@getledby.com. See also our Terms of Service and Refund Policy.