How we handle your information

Last updated September 20, 2026

Nikki’s Events is the registration and payment portal for events hosted by Visions of Healing (Nikki Spears). This policy explains what personal information the app collects, why, who it is shared with, how long it is kept, and the rights you have over it. It covers attendees who register, hosts who manage events, and the data the app receives when a host connects Zoom.

Who we are

The app is built and operated by Stargazers Unite LLC, doing business as Clayton Method (“Clayton Method,” “we,” “us”), based in Plano, Texas, USA, on behalf of Visions of Healing (Nikki Spears) (“the host”). The host decides which events to run and uses the roster of attendees. We run the software and the systems that store the data.

For any privacy question or request, email info@claytonmethod.com. Questions about a specific event can also go to the host at visionsofhealing1@gmail.com. We coordinate with each other, so either address works.

Information we collect

When you register for an event

Your name, email address, and, if you give it, your phone number.
Whether you are attending in person or online.
A photo of you, only if you choose to add one. It is cropped on your own device before upload, stored privately, and seen only by the event hosts, for example to recognize you at check-in. It is saved only after your payment succeeds.
The amount paid, the payment method, and the payment reference Square returns. If you join a waitlist, we collect only your name, email, and preferred format.
Check-in status on the day of the event, recorded by the host.

Card details never reach us. You type them into Square’s secure payment form, which turns them into a one-time token in your browser. We receive the token and the result of the payment, never your card number, expiry date, or security code.

When a host uses the app

The host’s name and email address, and their sign-in password, which is stored only as a secure hash.
The events they create: titles, descriptions, flyers, dates, venues, prices, capacity, the confirmation email note, and presenter names, titles, and photos. Flyers and presenter photos are shown on the public event page.
Attendees they add by hand, with the same fields as a registration.

When a host connects Zoom

The Zoom user ID and email address of the connected Zoom account.
An OAuth access token and refresh token, which let the app act on that account within the permissions the host approved.
For each meeting the app creates, the Zoom meeting ID and join link, saved with the event.

The app does not access meeting recordings, transcripts, chat, contacts, participant lists, or any Zoom meetings it did not create.

When a host connects Square

The Square merchant ID, business name, and location ID.
OAuth tokens that allow the app to take card payments into the host’s own Square account.

Technical information

Essential cookies that keep a host signed in, plus a short-lived security cookie (ten minutes) used while connecting Zoom or Square.
Standard server logs kept by our hosting provider, such as IP address, browser type, and request time, used for security and troubleshooting.
Anonymous visit measurement from Vercel Web Analytics and Speed Insights: the page visited, the site you came from, and general details such as country, device type, browser, and how quickly pages loaded. It is collected without cookies, is not linked to your name or email address, and is never used for advertising.

We do not use advertising pixels or cross-site tracking, and we never sell your information.

How we use information

To register you, take your payment, and hold your seat.
To send your confirmation and, for online attendees, your private joining link.
To give the host an accurate roster, waitlist, and day-of check-in list.
To create and keep in sync the Zoom meetings for online and mixed events.
To keep the service secure, prevent fraud and double charges, and fix problems.
To meet legal, tax, and accounting obligations.

How we use data from Zoom

Data received from Zoom is used only to provide the features the host turned on:

showing which Zoom account is connected,
creating a scheduled meeting for an online or mixed event, and
updating that meeting when the event’s title, date, or time changes, and
deleting that meeting when the event is cancelled or deleted.

We do not sell Zoom data, use it for advertising, use it to train artificial intelligence or machine learning models, or share it with anyone except the service providers needed to run the app. A meeting’s join link is never shown on a public page. It is shared only with attendees who paid for an online seat.

Zoom tokens are stored server-side in a database table that the public and signed-in users cannot read. They are encrypted in transit and at rest, and access tokens expire after one hour.

How long we keep information

Registrations and waitlist entries are kept while they are needed to run the event and for the host’s business, tax, and accounting records. After that they are deleted.
Zoom connection data (user ID, email, tokens) is kept only while Zoom is connected. Selecting Disconnect in Settings revokes the app’s access at Zoom and deletes it immediately. If the app is removed from the Zoom account instead, Zoom notifies the app, which verifies the notice and deletes the stored record automatically.
Zoom meetings the app created live in the host’s own Zoom account. They stay there after disconnecting, under the host’s control, until the host deletes them in Zoom.
Square connection data follows the same rule: deleted when the host disconnects Square.

You can ask us to delete your information sooner at any time. See your rights below.

How we protect information

All traffic uses HTTPS. The database enforces row-level security, so each host can reach only the events they run. Payment and Zoom credentials sit in tables that only the server can read, attendee photos sit in private storage that hosts reach only through links that expire after an hour, and card details are handled entirely by Square. No system is perfectly secure, but we work to protect your information and will notify you and the relevant authorities of a breach as the law requires.

Your privacy rights

Depending on where you live, you may have the right to:

Know and access the personal information we hold about you, and get a copy.
Correct information that is inaccurate.
Delete your information.
Portability: receive your information in a common, machine-readable format.
Object to or restrict certain processing.
Withdraw consent at any time. Hosts can disconnect Zoom or Square in Settings whenever they choose.
Opt out of the sale of personal information or targeted advertising. We do neither, so there is nothing to opt out of, but you can still ask.
Not be treated differently for exercising any of these rights.

These rights include those under the EU and UK General Data Protection Regulation, the California Consumer Privacy Act as amended by the CPRA, the Texas Data Privacy and Security Act, and similar state laws.

How to exercise your rights

Email info@claytonmethod.com with the subject “Privacy request.” Say what you would like us to do.
We verify the request by matching it to the email address used to register or sign in. We may ask for one more detail, such as the event name, but never for a password or card number.
We respond within 30 days. Where the law allows more time (up to 45 days, for example), we will tell you why before the first deadline.

You may use an authorized agent, who must show written permission from you. If we decline your request, you can appeal by replying with “Appeal” in the subject line. We will answer the appeal within 60 days, and if you still disagree you may contact your state attorney general. If you are in the EU or UK, you may also complain to your local data protection authority.

Hosts can also take direct action in Zoom: removing the app from the Zoom App Marketplace revokes its access immediately. The Zoom guide shows how.

Legal bases for processing (EU and UK)

Contract: registering you and taking payment for the event you chose.
Consent: connecting a host’s Zoom or Square account.
Legitimate interests: running events, keeping the service secure, preventing fraud.
Legal obligation: tax and accounting records.

Where information is stored

The app and its database are hosted in the United States. If you register from outside the US, your information is transferred there and protected as this policy describes, with contractual safeguards from our service providers where the law requires them.

Children

The app is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, email info@claytonmethod.com and we will delete it.

Changes to this policy

If we change this policy, we will post the new version here and update the date at the top. If a change materially affects how Zoom data is used, we will tell connected hosts before it takes effect.

Contact

Stargazers Unite LLC, doing business as Clayton Method
Plano, Texas, USA
info@claytonmethod.com