Privacy Policy

1. Who We Are

Ridge Messaging is an SMS messaging platform operated by Mayberry Ridge LLC, a Pennsylvania limited liability company. We provide subscription-based SMS communication tools to member-based organizations ("Subscribers") who use our platform to communicate with their members ("End Members").

For questions about this policy, contact us at: info@mayberryridge.com

2. Information We Collect

From Subscribers (club administrators):

• Name, email address, and account credentials
• Organization name and contact information
• Billing information (processed by Stripe; we do not store full card numbers)
• Club branding assets (logo, accent color, display name)
• IP address and login activity logs

From End Members (club members):

• First name, last name, mobile phone number
• Email address (optional)
• SMS consent status, timestamp, and method of consent
• Opt-out status and opt-out timestamp
• Inbound SMS reply content (for two-way messaging features)
• Group memberships within the subscribing organization

Automatically collected:

• Message delivery status from Twilio (delivered, failed, opted out)
• Server logs and error logs for platform stability

3. How We Use Information

We use collected information to:

• Deliver SMS messages on behalf of Subscribing organizations
• Maintain member directories and group assignments for Subscribers
• Track and honor opt-out requests immediately and permanently
• Process subscription billing through Stripe
• Provide delivery analytics and response tallies to Subscribers
• Enforce TCPA compliance requirements (quiet hours, consent, STOP handling)
• Improve platform reliability, performance, and features
• Respond to support requests

4. SMS Consent and TCPA Compliance

Ridge Messaging is designed to support TCPA-compliant SMS operations. We capture and store the following consent data for every End Member:

• Whether consent has been given (true/false)
• The method by which consent was obtained (CSV import with consent language, QR self-registration, or manual admin entry)
• The timestamp of consent

Subscribing organizations are responsible for obtaining valid prior written consent from their End Members before using Ridge Messaging to contact them. Ridge Messaging provides the tooling and consent audit trail; the legal obligation to obtain consent rests with the Subscriber.

STOP and related opt-out keywords (STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT) are honored immediately and permanently. Opted-out phone numbers are added to our platform-wide do-not-contact list and will not receive messages from any organization on the platform without new explicit consent.

5. Sharing of Information

We do not sell personal information. We do not share End Member data with third parties except as necessary to deliver the service:

• Twilio Inc. — SMS delivery provider. End Member phone numbers and message content are transmitted to Twilio to deliver outbound SMS and receive inbound replies. Twilio's privacy policy applies to their handling of this data.
• Stripe Inc. — Payment processor for Subscriber billing. Stripe handles payment card data directly; we do not store full card numbers.
• Railway / cloud infrastructure providers — Our platform is hosted on cloud infrastructure. Data is stored in encrypted databases on these platforms.
• Legal requirements — We may disclose information if required by law, court order, or governmental authority.

6. Data Retention

• Active Subscriber and End Member data is retained while the Subscriber account is active.
• Upon account cancellation, Subscriber data is retained for 90 days then deleted, unless a longer retention period is required by law.
• End Member opt-out records and platform do-not-contact entries are retained indefinitely to prevent accidental re-contact.
• Upon written request, we will purge an End Member's personal information within 30 days, except where retention is required for legal compliance.

7. Data Security

We implement industry-standard security practices including:

• Encryption of data in transit via TLS
• Encrypted database storage
• Row-level security in our multi-tenant database
• JWT-based authentication with expiring tokens
• Rate limiting on all API endpoints

No method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information using reasonable and appropriate measures.

8. Your Rights

Depending on your location, you may have rights regarding your personal information including the right to access, correct, or request deletion of data we hold about you. To exercise these rights, contact us at info@mayberryridge.com.

California residents may have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information as defined by the CCPA.

9. Children's Privacy

Ridge Messaging is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify Subscribers of material changes by email or by posting a notice on the platform. Continued use of Ridge Messaging after changes take effect constitutes acceptance of the updated policy.

11. Contact

For questions, requests, or concerns about this Privacy Policy:

Mayberry Ridge LLC
Email: info@mayberryridge.com
Pennsylvania, United States