Privacy policy

At a glance

A summary of what we collect and how we handle it. Each row is explained in full below. In short: we do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Information we collect

• Messages you send on the website — if you use our contact form, the name, email, optional phone number, and message you submit.
• Account and contact details — in the app, your name and email address, and the phone numbers and emergency contacts you add for your household.
• Student details — the names, and where you provide them the ages, skill levels, and program notes, of the skiers you enroll (often your children).
• Waivers, consents, and agreements — the liability waiver you sign, the version of these documents you accepted, and, when you buy, the signed purchase agreement together with the evidence of signing: signer name and email, timestamp, IP address, browser, and a hash of the exact text displayed.
• Payment information — memberships and lessons are billed through our payment processor, Helcim. Card numbers are entered with and stored by Helcim; we keep only the charge records (amount, date, status) and the card’s brand, last four digits, and expiry, not your full card number.
• Sign-in information — if you sign in with Google, the basic profile Google shares (see “Signing in with Google” below).
• Email you exchange with MetroSlopes staff — copied into your customer record under the rules in “Staff mailboxes and your customer record” below.
• Usage and device data — standard server logs (IP address, browser type, pages requested) and analytics on the marketing website and customer app (see “Cookies and analytics”) that help us keep the service running, secure, and understandable.

We do not intentionally collect more sensitive categories of information than the above, and we do not use or disclose sensitive personal information (such as precise account credentials or a child’s details) for any purpose other than running the programs you sign up for.

Where it comes from

• Directly from you, when you fill in a form, create an account, or sign a waiver.
• From the account holder, about the students they add to a household.
• Automatically from your device and our servers as you use the site or app.
• From our service providers — for example, charge records from our payment processor.
• From Google, if you choose to sign in with it.
• From a MetroSlopes staff mailbox that has exchanged email with you.

How and why we use it

We use your information to run MetroSlopes, and only for purposes you’d expect:

• Create and secure your account, and sign you in.
• Enroll students in classes, manage memberships, and run check-in.
• Bill for memberships and lessons, and keep a record of those charges.
• Respond to messages you send us through the website or by email.
• Send you account and operational messages — enrollment confirmations, waitlist offers, schedule changes, receipts. Marketing email, if any, is separate and opt-out; every such message carries a one-click unsubscribe.
• Keep the service safe — prevent fraud and abuse, and debug problems.
• Meet our legal, tax, accounting, and safety obligations.

For visitors in the EEA/UK, our legal bases are: performance of our contract with you (accounts, enrollment, billing), compliance with a legal obligation (tax records, waivers), our legitimate interests (security, fraud prevention, keeping the service working), and your consent (any marketing email, which you can withdraw at any time). We do not make decisions about you by solely automated means that produce legal or similarly significant effects.

Who we share it with

We don’t sell your personal information. We share it only with the service providers that run the platform, and only so they can perform that service for us. Every company that receives your data today is listed here:

• Helcim — payment processing and card storage.
• Amazon SES — sending account and program email, so it receives the recipient address and the message.
• Vercel and Neon — application hosting and database.
• Inngest — background job processing.
• Google — sign-in, Google Analytics on customer-facing pages, and read-only access to the MetroSlopes staff mailboxes described below.

We may also disclose information if the law requires it, to protect the safety of our members and staff, or as part of a merger, acquisition, or sale of assets (with notice to you where required). We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act. We have not sold or shared personal information — including that of minors — in the preceding 12 months.

MetroSlopes has code for Sign in with Apple that is not configured in production: no “Continue with Apple” button appears and no data reaches Apple. If that changes, this policy changes with it.

Signing in with Google

If you choose “Continue with Google,” we request only the openid, email, and profile scopes and nothing else. Through them Google shares your name, email address, whether that address is verified, and basic profile, which we use solely to create your account or sign you into an existing one.

Your sign-in gives us no access to your Gmail, Drive, Calendar, or Contacts. The Gmail access described in the next section is a MetroSlopes staff member connecting their own work mailbox — never a customer’s, and never through your sign-in.

MetroSlopes’ use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, and we do not sell or transfer it to third parties except to provide our service, comply with the law, or in connection with a merger or acquisition. You can revoke our access at any time from your Google Account permissions.

Staff mailboxes and your customer record

A MetroSlopes staff member can connect their own metroslopes.com Google Workspace mailbox to the admin console with read-only Gmail access, which they grant themselves and can revoke themselves. There is no domain-wide access to anybody’s mail, and no staff member can connect someone else’s mailbox.

When a connected mailbox exchanges email with you, that message is copied into your customer record if you are already a contact there: subject, the body as text, who it was addressed to, when it was sent, and its message ID. On a shared address such as info@, a message from someone not yet in the record can create a new inquiry entry. Connecting a mailbox also backfills up to 90 days of its history under the same rules. Email between staff members is never copied.

This is the only Gmail access MetroSlopes holds, it is read-only, and it applies to MetroSlopes’ own staff mailboxes rather than to any customer account.

Children's information

MetroSlopes accounts are for adults. Parents and guardians create and manage the account and provide the details of the children they enroll — we do not knowingly let children create their own accounts or submit their own information directly. We use a child’s information only to run the program they’re signed up for, and we keep it confidential.

A parent or guardian can review, update, or delete their child’s information at any time from the account, or by emailing info@metroslopes.com. If we learn that a child under 13 has given us information directly without a parent, we will delete it. We do not sell or share the personal information of any consumer, including minors under 16.

How long we keep it, and how we protect it

Connections are encrypted in transit, sessions are cookie-based, and card data is handled by our PCI-compliant payment processor rather than stored by us. No system is perfectly secure, but we use reasonable administrative and technical safeguards to protect your information.

How long each record lasts:

• Signed purchase agreements, waivers, media consents, and policy acceptances, with their signing evidence — kept indefinitely. They are the proof of what was agreed, so a deletion request does not remove them.
• Charge, refund, and credit records — as long as tax, accounting, and audit obligations require.
• Household account, participant profiles, emergency contacts — while your account is open, then only what the rows above require.
• Health details — while the participant is active. Removed on request.
• Email delivery records and operational monitoring records — 24 months.
• Inquiries, staff notes, and copied staff email — while the relationship is active.
• Server request logs — held by our host under its own retention, measured in days.
• Analytics events — held by Google Analytics under that property’s retention setting, 14 months or less.

When you close your account we delete or de-identify what we no longer need, but the signed records and the billing and audit evidence above are kept for the reasons given: closing an account cannot erase proof of what was agreed or what was charged.

Cookies and analytics

The app uses essential cookies to keep you signed in — without them, sign-in doesn’t work. The marketing website and customer-facing parts of the app use Google Analytics to understand aggregate traffic, content engagement, signup progress, and which portal tasks people attempt or cannot complete so we can improve the experience. Google Signals and ad personalization are switched off, so no advertising audience is built from your visit. We do not send form entries, names, email addresses, phone numbers, student or account identifiers, or payment references to Google Analytics. Analytics is only enabled on our production sites, and never on admin, instructor, or kiosk screens. You can block cookies in your browser, and we honor browser-based opt-out preference signals such as the Global Privacy Control (GPC): if your browser sends that signal, the analytics script never loads. Because we do not sell or share personal information, no additional opt-out is necessary.

Your California privacy rights

If you’re a California resident, the CCPA/CPRA gives you the right to:

• Know and access the personal information we’ve collected about you, including the categories, sources, purposes, and who we disclosed it to.
• Delete personal information we hold about you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information — though we do neither.
• Limit the use of sensitive personal information — we already use it only as needed to run your programs.
• Not be discriminated against for exercising any of these rights.

To exercise a right, email info@metroslopes.com or use the tools in your account settings — you don’t need an account to make a request. We’ll respond within 45 days (extendable to 90 with notice) and may need to verify your identity first. An authorized agent may submit a request on your behalf with proof of authorization.

Your rights in the EEA and UK

If you’re in the European Economic Area or the UK, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent at any time (without affecting processing already carried out). You also have the right to lodge a complaint with your local data protection supervisory authority. To exercise any of these, email info@metroslopes.com.

We are based in the United States, so using MetroSlopes involves transferring your information to the US. Where required for EEA/UK data, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Changes to this policy

If we change how we handle your information, we’ll update this page and move the effective date. For material changes, we’ll give you a heads-up by email or an in-app notice, and where the law requires it, we’ll ask for your consent again.

Contact us

Metro Slopes LLC
50 Broderick Road, Burlingame, CA 94010
info@metroslopes.com

For privacy requests, please put “Privacy” in the subject line so we can route it quickly.