Last updated: 2026-05-14.
Sober AF Entertainment (“SAF”, “we”, “us”) is a 501(c)(3) non-profit. This Privacy Policy describes what information we collect when you visit soberafe.com, sign up for an event, donate, or volunteer with us, and what we do with it. We wrote this in plain language. If anything is unclear, please contact us at our contact page or submit a question through our Data Request form.
Information we collect
We collect only what we need to deliver our programs:
- Account information you give us when you apply to be a Peer, register for an event, or create a dashboard login: name, email address, role, and any optional profile fields you fill in.
- Donation information when you give: amount, frequency (one-time or recurring), and the email address you used at checkout. Card numbers are processed by Stripe and never touch our servers.
- Communication content you send us through forms, replies to our newsletter, or messages to our team.
- Technical information automatically captured by our server: IP address, browser user-agent, the pages you visited, and the time you visited.
- Cookies as described in our Cookie Policy.
How we use it
- To run the events, peer programs, and resources you signed up for.
- To process your donations and send you tax receipts (we are required by the IRS to keep donor records).
- To send you transactional email (event reminders, ticket confirmations, replies to your messages).
- To send you our newsletter, only if you opted in. Every newsletter has an unsubscribe link.
- To keep the site working, fight spam, and investigate abuse.
Who we share it with
We do not sell or rent your personal information. We share data only with the service providers we need to run the site:
- Stripe processes donations and recurring subscriptions. Stripe receives your name, email, billing address, and card details directly. Stripe’s Privacy Policy.
- Acumbamail sends our newsletter. If you subscribe, your email address is stored on Acumbamail’s servers in the EU.
- Google Workspace handles our transactional email through Gmail OAuth. Email content travels through Google.
- ChemiCloud hosts our website and database in the United States.
- Government agencies if required by law (subpoena, court order, IRS audit of donor records).
How long we keep it
- Donation records: at least 7 years (IRS requirement for non-profits).
- Event registrations: 3 years after the event.
- Peer applications: 2 years after the decision; approved Peers, for the duration of their service plus 2 years.
- Newsletter subscribers: until you unsubscribe.
- Server logs: 90 days.
Your rights
You can ask us to:
- Show you what we have on file about you (access).
- Correct anything that is wrong (correction).
- Delete your data, subject to the legal retention windows above (deletion).
- Send your data to another service (portability).
- Stop processing your data for a particular purpose (objection).
Submit any of these requests through our Data Request form. We respond within 30 days.
If you are in the EU, EEA, or UK, you have rights under GDPR. If you are in California, you have rights under CCPA. The form above covers all of these.
Children
Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.
Security
We use HTTPS site-wide, two-factor authentication on administrator accounts, a web-application firewall, and encrypted database backups. No system is perfectly secure; if a breach affects you, we will notify you within 72 hours of discovery as required by law.
Changes
If we materially change this policy, we will post the new version here and update the date at the top. For significant changes, we will email registered users.
Contact
Questions? Send us a note through contact or submit a formal request through /data-request/. The mailing address for our 501(c)(3) is available on request.
