SashBoard

Privacy Policy

Last updated October 25, 2026

SashBoard is made and run by Cresta Studios LLC (“Cresta Studios”, “we”, “us”), a Utah company. This policy explains what we collect through sashboardapp.com, each pageant’s portal and the SashBoard app, why, and the choices you have. We don’t sell or share personal information, we don’t use advertising or tracking cookies, and we don’t use anyone’s information to train AI.

1. Two kinds of information

Pageants’ information. Each pageant that subscribes decides what it collects about its members (board, titleholders, contestants and their parents or guardians), its applicants, fans, buyers and sponsors, and who in the pageant can see it. For that information we are the pageant’s service provider: we store and process it only to run SashBoard for that pageant, under our Pageant Agreement with it, and the pageant’s own privacy policy, shown on its website, applies. Requests to see, correct or delete it go to the pageant, and we carry them out on its instructions.

Our own information. For visitors to sashboardapp.com, people who ask for a demo or write to us, the people who sign a pageant up, and free SashBoard accounts, we decide what is collected, and this policy applies.

2. What we collect

• Visits to sashboardapp.com: which pages are viewed, the site that sent you there, and the country and kind of device, counted by Vercel Web Analytics. It uses no cookies and keeps nothing that identifies you or follows you to other sites. The portal and the app aren’t counted this way.
• Demo requests and messages: your name, email, pageant, role, when suits you and your message, so we can reply and set up the demo.
• Pageant sign-ups and billing: the administrator’s name and email, the pageant’s name and state, and its plan. Card details go straight to Stripe; we never see or store them.
• Free SashBoard accounts (for anyone 13 or older who wants to follow pageants in the app): name and email; birth month and year, only to confirm age and to keep marketing to adults; your state, if you choose one; and whether you want news by email (off unless you turn it on).
• Sign-in: your email and a password, with a one-time code sent to your email the first time you sign in on a new device or if you forget your password; or Sign in with Apple. Passwords are stored only as a secure hash by our sign-in provider, never in a form anyone can read. Directors also use two-step sign-in with an authenticator app, and keep backup codes.
• The app: if you allow notifications, a device token so we can send alerts; it’s removed when you sign out. Wallet cards and tickets you add to Apple Wallet register your device with us only so we can update them there.
• What you add in the portal and the app: for the pageant you belong to, your profile (name, email and, if you add it, phone number), the photos, videos and files you upload (such as headshots, appearance-report photos and paperwork), messages to other members, voice messages and voice notes, appearance reports, statements, stories and notes, and, only if you fill it in, an emergency medical card. Tickets you buy show in the app.
• Camera and microphone: used only when you choose to: taking or choosing a photo, recording a voice message or note, or practicing an interview or on-stage answer on camera. A practice recording stays on your device unless you choose to save it to your files, where your directors can see it. The app never records in the background.
• Checking in: when a pageant uses location check-in for an appearance, the app works out how far you are from the venue on your phone and sends only that distance, never your position.
• Problem reports and diagnostics: what you write when you report a problem (and a screenshot, if you add one), with the page and the kind of device it happened on, linked to your account so we can reply; and records of errors on our servers. We use these only to fix problems.
• Server logs: our hosting keeps standard logs (such as IP address and browser type) for security.

A pageant’s own information can include things only its directors and the person (or a teen’s parent) can see, such as an emergency medical card for competition week. We store it for the pageant and use it for nothing else.

3. How we use it

To run and secure SashBoard, sign people in, send the emails, notifications, Wallet cards and ticket passes pageants ask us to send, answer messages, bill pageants, and fix problems. We don’t use anyone’s information for advertising, we don’t track people across other apps or websites, and we don’t sell or share personal information as the California and other state privacy laws define it.

4. What a pageant makes public

Some things are public because a pageant chooses to publish them: its website, events, results and titleholders, and, in the SashBoard app, its program and program book. A contestant appears in a pageant’s program or program book only once she (or, for a teen, her parent or guardian) says yes, and only with what that yes covers: her name, number, hometown, talent, community service initiative and headshot. When a pageant publishes its program book to the app, the pictures in it are copied to public storage so the app can show them; when the pageant takes the book out of the app, those copies are deleted.

5. AI

SashBoard uses artificial intelligence (AI) in a few features. Each one is optional, and here is exactly where it runs and what it sees.

On your device. Coaching on a practice interview answer, transcribing a practice answer you record (“Listen back”), and tidying your writing use Apple Intelligence and Apple’s speech recognition on your iPhone, iPad or Mac. They run entirely on the device: what they read or hear doesn’t leave it, and we never receive it.

With a pageant’s own AI account. A pageant can connect its own Claude (Anthropic), ChatGPT (OpenAI) or Gemini (Google) account for features such as reviewing its emcee script. When a director uses one, what that feature needs (for example, the script and the run of show, which can include contestants’, judges’ and titleholders’ names) is sent to the provider the pageant chose, under the pageant’s account and that provider’s terms. Only directors can use these features, nothing is sent unless one of them asks, the app asks the director’s permission, naming the provider, before anything is sent the first time, and the pageant’s key is stored encrypted. Pageants that don’t connect an account don’t use them.

What we don’t do. We don’t use AI to score, rank, judge or make decisions about anyone, including contestants. We don’t use what you put into SashBoard to train AI models, and we don’t sell it to anyone who does. AI suggestions are only suggestions: a person decides what to use.

6. Pageants are kept separate

One pageant can’t see another’s members or records. If you belong to more than one pageant, each sees only what you’ve given it. Our team looks at a pageant’s information only when needed to keep the service running, fix a problem, or help that pageant when it asks.

7. Services we use, and where

Each only for its job: Supabase (database, sign-in and file storage, in Canada), Vercel (hosting, in the United States), Resend (email), Apple Push Notification service (iPhone notifications and Wallet passes), Google Firebase Cloud Messaging (Android notifications), Stripe (subscriptions, and each pageant’s own ticket, vote, donation and other sales), OpenStreetMap and Photon by Komoot (maps and address search), Open-Meteo (weather for events), jsDelivr (code libraries), Vercel Web Analytics (cookie-free visit counts on our public website only), and, only for pageants that connect one, Anthropic, OpenAI or Google for AI. Information is stored and processed in Canada and the United States. SashBoard sets no cookies; our cookie policy lists what is kept on your device.

8. Children and teens

SashBoard is for people 13 and older. A member under 18 uses SashBoard only with a parent or guardian’s permission and the pageant’s; any contestant under 18 applies with a parent or guardian, who gets their own linked access. For a contestant under 13 (for example in a pageant’s younger age groups), a parent or guardian fills in the application, and the pageant works with the parent. If someone signing up for a free account is under 13, no account is made, and any account found to belong to someone under 13 is deleted. Teens aren’t offered marketing emails.

9. How long we keep it

We keep a pageant’s information while it uses SashBoard and as its directors decide. When a pageant leaves, its administrators can ask us to export or delete its information, and we delete it as our Pageant Agreement describes. Demo requests and messages are kept as long as needed to follow up. Problem reports and error records are kept as long as we need them to fix problems and keep SashBoard reliable. We delete information on request unless the law requires us to keep it, such as billing records.

10. Your choices and rights

You can update your profile, turn emails off by kind or altogether (every email has a “Manage email settings” link, and Settings › Notifications in the portal), turn off phone notifications in your phone’s settings, or delete your account yourself in the app or portal (Settings › Privacy › Delete my account). For a pageant’s records, ask that pageant’s directors. For anything else, including a free account or a demo request, send us a message. Depending on where you live, you may have the right to know what we hold about you, to correct it, to get a copy, or to have it deleted; we answer those requests within the time the law sets, and won’t treat you differently for making one.

11. Security

Information is sent over encrypted connections, private files are stored privately and opened with short-lived links, and each person sees only what their role allows. No system is perfectly secure; if something goes wrong that affects your information, we’ll tell the affected pageants and people as the law requires.

12. Changes and contact

If we change this policy we’ll update the date above, and tell pageant administrators about significant changes before they take effect. Questions? Send us a message, email hello@sashboardapp.com, or write to Cresta Studios LLC, 4963 West Willowstone Drive, Highland, Utah 84003. Our terms of service cover the rest of using SashBoard.