Privacy Policy

Effective Date: August 14, 2026
Last Updated: August 29, 2026

Hey Ralli ("Hey Ralli," "we," "us," or "our") provides a communications and organization platform designed to help schools, PTOs/PTAs, parent organizations, and other community organizations plan events, create communications, coordinate volunteers, manage approvals, and publish or distribute content.

This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit heyralli.com, create or use a Hey Ralli account, connect a third-party service, or otherwise use our websites, applications, products, and services (collectively, the "Services").

By using the Services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

We collect information depending on how you interact with Hey Ralli.

Information You Provide

We may collect information that you provide directly to us, including:

• Name
• Email address
• Organization, school, PTO/PTA, or group name
• Job title or organizational role
• Account credentials
• Profile information
• Communications sent to Hey Ralli
• Customer support requests
• Feedback
• Subscription and billing information
• Information submitted during onboarding or account setup

Payment card information may be processed directly by our payment provider rather than stored directly by Hey Ralli.

Organization Content

Organizations and their authorized users may create, upload, import, or otherwise provide information to Hey Ralli, including:

• Events
• Calendars and schedules
• Communications
• Social media captions
• Campaign content
• Newsletters
• Flyers
• Images and artwork
• Files and documents
• Approval requests
• Approval comments and change requests
• Volunteer information
• Team member information
• Tasks and notes
• Vendor information
• Contact information
• Connected account information
• Other content an Organization chooses to place in its Hey Ralli workspace

We refer to this information as "Organization Content."

Organizations are responsible for determining what information they provide to Hey Ralli and for obtaining any permissions or consents required for that information.

2. Information From Connected Services

Hey Ralli may allow authorized users to connect third-party platforms and services.

Depending on the integrations enabled, we may receive information from services including:

• Facebook
• Instagram
• Meta
• Google services
• SignUpGenius
• Calendar providers
• Other communication, social media, organizational, or productivity services

The information Hey Ralli receives depends on the permissions granted by the user and the applicable third-party platform.

We use connected-service information to provide functionality requested by the Organization, such as importing events, displaying connected information, managing communications, scheduling content, or publishing authorized content.

3. Automatically Collected Information

When you use Hey Ralli, we may automatically collect technical or usage information such as:

• IP address
• Browser type
• Device type
• Operating system
• Pages or features accessed
• Dates and times of access
• Referring pages
• Application performance information
• Error and diagnostic information
• Security events
• Authentication events
• Session information

We use this information to operate, secure, troubleshoot, monitor, and improve Hey Ralli.

4. How We Use Information

We may use information to:

• Provide and operate Hey Ralli
• Create and manage accounts
• Authenticate users
• Provide Organization workspaces
• Manage roles and permissions
• Create and manage events
• Provide calendar functionality
• Coordinate volunteers
• Create newsletters, flyers, captions, images, and other communications
• Route communications for approval
• Manage approval and change-request workflows
• Schedule or publish approved content
• Provide artificial intelligence features
• Operate connected integrations
• Process subscriptions and payments
• Send transactional or service-related communications
• Provide customer support
• Monitor application performance
• Diagnose technical problems
• Detect and prevent fraud, misuse, and security incidents
• Improve the Services
• Comply with legal obligations
• Enforce agreements and policies

Hey Ralli does not sell personal information in exchange for money.

5. Artificial Intelligence Features

Hey Ralli includes artificial intelligence features that may help users create, edit, summarize, organize, or generate content.

When a user requests an AI-powered feature, information necessary to fulfill that request may be transmitted to third-party artificial intelligence service providers.

Information submitted to AI features may include:

• Event information
• Communication instructions
• Existing text
• Organization-provided content
• Images
• Creative instructions
• Other information necessary to provide the requested feature

AI functionality may be used to generate or assist with:

• Social media captions
• Flyers
• Images
• Communication plans
• Newsletter content
• Event communications
• Other organizational content

Users should not intentionally submit highly sensitive personal information to AI features unless necessary and authorized.

AI-generated content may contain errors. Organizations and users are responsible for reviewing generated content before approving, sending, publishing, or otherwise using it.

6. School, Parent, Volunteer, and Student Information

Hey Ralli is primarily an organizational and communications platform for authorized adult users.

Organizations may use Hey Ralli in connection with school and community activities. Organization Content may therefore reference students, parents, guardians, volunteers, teachers, staff members, or other members of a school community.

Organizations control the information they submit to Hey Ralli and are responsible for determining whether they have appropriate authority, permission, or consent to collect and use that information.

Hey Ralli is not intended to function as a student information system or electronic educational-record system.

Users should not intentionally use Hey Ralli to store Social Security numbers, highly sensitive medical information, financial account credentials, or similar highly sensitive information unless Hey Ralli has expressly authorized such use in writing.

7. Children

Hey Ralli accounts and administrative Services are intended for adults and authorized organizational users.

Hey Ralli is not directed to children under 13, and children under 13 should not create Hey Ralli accounts or provide personal information directly to Hey Ralli.

Content created or uploaded by adult organizational users may incidentally contain information relating to children, such as a student's name, photograph, event participation, or other school-related information.

The Organization submitting such information is responsible for obtaining any permissions or consents required by applicable law or organizational policy.

If you believe a child has submitted personal information directly to Hey Ralli without appropriate authorization, contact us at support@heyralli.com.

8. How We Share Information

Hey Ralli may disclose information to service providers that help us operate the Services.

These providers may support:

• Cloud infrastructure
• Database services
• Authentication
• Payment processing
• Artificial intelligence
• Email delivery
• Error monitoring
• Application diagnostics
• Social media integrations
• Analytics
• Security
• Fraud prevention
• Customer support

Service providers may process information on our behalf as necessary to provide their services, subject to applicable agreements and legal requirements.

At the Direction of Users

We may disclose or transmit information when an authorized user intentionally requests an action involving another service.

For example, information may be transmitted when a user:

• Publishes content to Facebook or Instagram
• Connects a third-party account
• Imports information
• Sends communications
• Shares content with another authorized user
• Uses an integration requested by the Organization

Legal and Safety Reasons

We may disclose information when we reasonably believe it is necessary to:

• Comply with applicable law
• Respond to valid legal process
• Respond to lawful government requests
• Protect the rights, property, or safety of Hey Ralli or others
• Investigate fraud or abuse
• Investigate security incidents
• Enforce our agreements

Business Transactions

If Hey Ralli is involved in a merger, acquisition, financing, restructuring, asset sale, or similar transaction, information may be transferred as part of that transaction subject to applicable law.

9. Facebook, Instagram, and Meta Data

Hey Ralli may allow authorized Organization users to connect Facebook Pages, Instagram accounts, or other Meta services.

When a user connects a Meta service, Hey Ralli may access information authorized through Meta's APIs in order to provide the requested integration.

Depending on the feature being used, this may include information necessary to:

• Identify connected Facebook Pages
• Identify connected Instagram accounts
• Manage the Organization connection
• Create or schedule authorized content
• Publish approved content
• Retrieve information necessary to provide connected functionality
• Support messaging, comments, or other enabled Meta features

Hey Ralli uses information received from Meta to provide and support the user-facing functionality requested by the Organization and in accordance with applicable Meta platform requirements.

An authorized user may disconnect the Organization's Meta connection through:

Settings → Facebook & Instagram → Disconnect

Disconnecting removes the active Hey Ralli connection to the applicable Meta account or Page.

Disconnecting does not automatically delete existing Organization Content or shared Organization records already created in Hey Ralli.

For information about requesting deletion of Meta-associated data, see Section 16, User Data Deletion.

10. Google User Data

If you connect a Google account or Google service to Hey Ralli, we may receive information authorized by you through Google's APIs.

We use information received through Google APIs to provide or improve the user-facing functionality requested by you or your Organization.

Our use and transfer of information received from Google APIs will comply with applicable Google API Services User Data requirements.

You may revoke Hey Ralli's access to your Google account through your Google account permissions.

11. Payments

Subscription and payment transactions may be processed by third-party payment providers.

Hey Ralli does not need to store complete payment card numbers when payment information is provided directly to the applicable payment processor.

We may retain information concerning:

• Subscription status
• Billing status
• Transaction history
• Purchased products or services
• Related account and billing activity

12. Data Security

Hey Ralli uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, misuse, or destruction.

These protections may include:

• Authentication controls
• Role-based permissions
• Access restrictions
• Secure infrastructure
• Private storage controls
• Encryption where appropriate
• Security monitoring
• Application logging
• Session protections
• Credential protections
• Security testing and vulnerability remediation

No internet-based service or electronic storage system can guarantee absolute security.

13. Data Retention

Hey Ralli retains information for as long as reasonably necessary to provide the Services and for the purposes described in this Privacy Policy.

Active Organization Workspaces

While an Organization maintains an active subscription or otherwise has active access to Hey Ralli, we may retain Organization Content and related workspace information as necessary to operate and provide the Services.

Canceled Subscriptions

Canceling a paid subscription does not immediately delete the Organization's workspace or Organization Content.

Following the end of an Organization's paid subscription, Hey Ralli may retain Organization Content and workspace data for up to twelve (12) months.

The retention period allows an Organization to restore its workspace if it resubscribes and allows Hey Ralli to maintain information reasonably necessary for business operations, security, fraud prevention, dispute resolution, legal compliance, and recordkeeping.

The Organization may have access to its workspace during the seven (7)-calendar-day post-subscription grace period described in the Hey Ralli Terms of Service.

After that grace period ends, the workspace generally will no longer be accessible unless the Organization resubscribes or Hey Ralli otherwise restores access.

Retention of data during this period does not mean that users will continue to have access to the workspace.

If an Organization resubscribes during the applicable retention period, Hey Ralli may restore retained Organization Content and workspace data. Hey Ralli does not guarantee that all integrations, third-party connections, scheduled activities, messages, publication settings, or other functionality can be restored.

End of the Retention Period

After the applicable twelve (12)-month post-subscription retention period expires, Hey Ralli may permanently delete or de-identify Organization Content and workspace data.

Certain information may be retained for a longer period where reasonably necessary or permitted for:

• Legal compliance
• Financial and tax records
• Fraud prevention
• Security
• Enforcement of agreements
• Dispute resolution
• Backup and disaster recovery
• Establishing, exercising, or defending legal claims
• Other legitimate recordkeeping obligations

Information maintained in backups may remain until those backups are overwritten or deleted according to Hey Ralli's normal backup and retention processes.

Earlier Deletion Requests

An Organization may request deletion of its Organization workspace and associated Organization Content before the end of the twelve (12)-month retention period by contacting support@heyralli.com.

We may take reasonable steps to verify the identity and authority of the person making an Organization-level deletion request.

Where appropriate and legally permitted, verified Organization-level deletion requests may result in deletion or de-identification before the standard retention period ends.

Certain information may nevertheless be retained where required or permitted for legal, security, fraud-prevention, financial-recordkeeping, dispute-resolution, backup, or other legitimate purposes.

Other Information

Retention periods for information that is not Organization Content may vary depending on the type of information, why it was collected, applicable third-party platform requirements, and applicable legal or operational requirements.

When information is no longer reasonably necessary, we may delete or de-identify it, subject to applicable legal, contractual, security, backup, and operational requirements.

14. Organization Administrators

If your Hey Ralli account is provided through a school, PTO/PTA, or other Organization, authorized administrators of that Organization may be able to:

• Add users
• Remove users
• Assign roles
• Change permissions
• Access Organization Content
• Review workspace activity
• Manage connected services
• Control Organization settings
• Modify or delete Organization Content

Questions about how an Organization uses your information may need to be directed to that Organization's administrator.

15. Account Deletion

Signed-in Hey Ralli users may access individual account-deletion options through:

Settings → Account

An account-deletion request applies to the individual user's Hey Ralli account and applicable membership records.

Deleting an individual account does not necessarily delete shared Organization Content.

For example, content that belongs to or is maintained on behalf of a school, PTO/PTA, or other Organization may remain in the Organization's workspace after an individual user's account is removed.

This may include Organization records such as:

• Events
• Communications
• Newsletters
• Flyers
• Files
• Approval history
• Published materials
• Volunteer records
• Other shared Organization Content

Certain information may also be retained when necessary for security, fraud prevention, dispute resolution, financial recordkeeping, legal compliance, backup processes, or enforcement of our agreements.

Individual account deletion is separate from cancellation of an Organization's subscription and from an Organization-level workspace deletion request.

Organization subscription cancellation and post-cancellation data retention are described in Section 13 and the Hey Ralli Terms of Service.

16. User Data Deletion

Hey Ralli provides several ways to disconnect services, delete an individual account, or request deletion of personal information.

Disconnect Facebook or Instagram

If you are an authorized Organization user and want to disconnect the Organization's Facebook or Instagram account from Hey Ralli, go to:

Settings → Facebook & Instagram → Disconnect

Disconnecting removes the active Hey Ralli connection to the applicable connected Meta account.

Disconnecting does not automatically delete shared Organization Content that already exists in the Organization's Hey Ralli workspace.

Delete Your Hey Ralli Account

If you want to permanently delete your individual Hey Ralli account, go to:

Settings → Account

and follow the account-deletion instructions.

Deleting your individual account removes the account and applicable membership information in accordance with Hey Ralli's account-deletion process.

Shared content belonging to a school, PTO/PTA, or other Organization may remain in the Organization's workspace after your individual account is deleted.

Request Organization Workspace Deletion

An authorized Organization representative may request deletion of an Organization workspace and associated Organization Content by contacting:

support@heyralli.com

Please state that your request concerns an Organization workspace deletion and identify the applicable Organization.

Hey Ralli may take reasonable steps to verify that the person making the request has authority to request deletion on behalf of the Organization.

Organization workspace deletion is different from subscription cancellation.

Under Hey Ralli's standard cancellation policy, Organization Content may be retained for up to twelve (12) months after the paid subscription ends so the workspace may potentially be restored if the Organization resubscribes.

An authorized Organization may instead request earlier deletion as described in Section 13.

Request Deletion of Facebook- or Instagram-Associated Personal Data

You may request deletion of personal information associated with your Facebook or Instagram connection by contacting:

support@heyralli.com

Please state that your request concerns Meta/Facebook/Instagram data deletion and provide enough information for us to identify the relevant Hey Ralli account or connection.

Do not send:

• Your password
• Facebook or Instagram password
• Access tokens
• API credentials
• Authentication codes
• Other account credentials

We may take reasonable steps to verify your identity before completing a deletion request.

Once a valid request is verified, Hey Ralli will delete or disassociate personal information associated with the requesting user when appropriate, subject to applicable legal, security, technical, platform, and organizational retention requirements.

An individual's deletion request does not automatically require deletion of an Organization's shared workspace.

Shared organizational records may remain when they belong to or are maintained for the school, PTO/PTA, or other Organization.

Examples may include:

• Events
• Organization communications
• Approved or published content
• Newsletters
• Flyers
• Files
• Approval history
• Volunteer records
• Shared Organization records
• Other Organization-owned workspace content

If you believe additional personal information associated specifically with you remains after a deletion request, contact support@heyralli.com for assistance.

The public URL for these User Data Deletion instructions is:

heyralli.com/privacy#user-data-deletion

Canonical URL: https://heyralli.com/privacy#user-data-deletion

17. Your Privacy Choices

Depending on your relationship with Hey Ralli and applicable law, you may have the ability to:

• Access certain personal information
• Correct inaccurate information
• Request deletion of personal information
• Request information concerning our privacy practices
• Disconnect third-party integrations
• Revoke permissions through connected services
• Update account information

Some requests concerning Organization Content may need to be submitted through the Organization that controls the applicable workspace.

We may verify your identity before processing certain requests.

Nothing in this Privacy Policy limits privacy rights that cannot lawfully be waived.

18. Cookies and Similar Technologies

Hey Ralli may use cookies, local storage, and similar technologies to:

• Keep users signed in
• Maintain account sessions
• Remember preferences
• Protect accounts
• Prevent fraud
• Diagnose technical problems
• Understand application usage
• Improve application performance

Some technologies may be operated by third-party providers that support the Services.

19. Communications

Hey Ralli may send service-related communications including:

• Account verification messages
• Password reset messages
• Security notifications
• Approval notifications
• Workflow notifications
• Billing notices
• Subscription notices
• Important product notices
• Important policy updates

Some transactional or operational communications may be necessary to maintain an active account.

Where Hey Ralli sends marketing communications, applicable opt-out mechanisms will be provided.

20. International Processing

Hey Ralli and its service providers may process information in the United States and other jurisdictions in which our service providers operate.

Where required, cross-border processing will be handled in accordance with applicable legal requirements.

21. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to:

• Hey Ralli
• Our Services
• Our integrations
• Our privacy practices
• Technology
• Applicable legal requirements

When we update this Privacy Policy, we will update the "Last Updated" date at the top of this page.

If a change is material, we may provide additional notice where appropriate or required.

22. Contact Us

If you have questions about this Privacy Policy, privacy practices, account deletion, Organization workspace deletion, or personal information, contact:

Hey Ralli, LLC
Email: support@heyralli.com

For Facebook, Instagram, or Meta-associated user-data deletion requests:

support@heyralli.com

User Data Deletion Instructions:
heyralli.com/privacy#user-data-deletion

Terms of Service:
heyralli.com/terms

Read Terms of Service