Your members are yours.

WyoConnected is operated by Social Catnip. This policy covers wyoconnected.com and the platform behind it, including the chamber websites we host on yourchamber.wyoconnected.com or on a chamber's own domain.

There is an important distinction running through everything below. A chamber's member records, event registrations and mailing lists belong to that chamber. We hold and process them on the chamber's instructions, the way a filing cabinet holds files. We do not own that data and we do not get to decide what it is used for. Our own customer relationship is with the chamber, and that is the only relationship in which we do any marketing.

If you are a member business or an event attendee with a question about your record, your chamber is the right first stop. It is their data, and they can correct or remove it themselves. We will always help them do it.

• Chamber staff accounts: name, email, a hashed password (never the password itself), and the role that decides what each person can see.
• Member records: the businesses and contacts a chamber imports or adds: name, email, phone, website, address, membership tier, renewal dates, invoices and payment history.
• Event registrations and vendor applications: who signed up, the attendee names on the booking, and the answers to any custom questions the chamber added to its own form.
• Website content: the pages, posts, images and events staff create.
• Email records: which campaigns went to which addresses, whether they bounced, and unsubscribe requests, so the same person is never mailed after opting out.

Spelled out, so there is nothing to interpret:

• We will not sell, rent, license, or trade a chamber's member list, attendee list, or mailing list.
• We will not use those contacts for our own marketing at all. No product announcements to your members, no adding them to our newsletter, no “a chamber near you uses WyoConnected” email.
• We will not hand a chamber's data to another chamber, or merge it into a statewide directory, a lead product, or any dataset sold to advertisers or data brokers.
• We will not use member or attendee records to train AI models, ours or anyone else's.
• We will not sell advertising against your data or place third-party trackers on your chamber website.

If we are ever acquired, this commitment travels with the data. A buyer takes it on as written, or the data does not go.

When a chamber publishes an event, the platform pushes it to the statewide calendar at wyoevents.co so that anyone in Wyoming can find what is happening in your town. Publish once, seen statewide, no re-entry by your staff. This is a feature chambers ask for, and it only ever moves information that is already public on your own website.

The controls, plainly:

• Off until you connect it. Syndication does nothing until a chamber sets it up in Settings, and it can be paused or disconnected there at any time.
• Only published events. Drafts and internal events are never sent. The sync fires when you publish, and not before.
• Unpublishing pulls it back. If you unpublish or cancel an event, the platform retracts the statewide listing to match. Corrections propagate the same way.

Registrations made on wyoevents.co flow back into your attendee list so that you have one accurate count. That traffic runs toward you, not away from you.

Running a platform means using a handful of outside services. Each one below does a specific job, is bound to use the data only for that job, and is barred from selling it. This is the complete list.

Beyond these, we disclose data only when a chamber tells us to: for example by connecting their own Google Sheet, or by issuing an API key to their web developer, or where the law genuinely requires it. If we are served with a legal demand for a chamber's data, we will tell that chamber unless we are prohibited from doing so.

Chamber websites include our own visitor counting, and it is deliberately minimal. For each page view we store three things: which chamber, which page, and when. That is the entire record.

• No cookies and no consent banner, because there is nothing stored on the visitor's device to consent to.
• No IP addresses and no device fingerprints. We cannot tell one visitor from another, and we cannot follow anyone from page to page.
• No third-party trackers. We do not run Google Analytics, ad pixels, or session recording on chamber sites. If a chamber adds its own tag through Settings, that is the chamber's choice and its own disclosure to make.
• Counts are deleted after 180 days, automatically.

Newsletters sent as formatted HTML record whether a recipient opened the message or clicked a link, so chambers can see whether their news is landing. Every one carries a working unsubscribe link, and an unsubscribe is honoured permanently across the whole platform.

Card payments are handled by Stripe on Stripe's own hosted checkout page. Card numbers are typed into Stripe, not into us. We never see, transmit, or store them. What comes back to us is the outcome: who paid, how much, for what, and when.

Registrations and invoices are only marked paid when Stripe confirms the payment directly to us over a signed webhook, never on the strength of a browser redirect. That is a fraud control as much as a bookkeeping one.

• Tenant isolation is structural. Every database read and write is scoped to one chamber, and a request's permissions are re-checked against live records rather than trusted from a browser cookie. Cross-chamber access is covered by an automated test that runs before every release.
• Credentials are never stored in the clear. Passwords are hashed; API keys and integration tokens are stored as one-way hashes or encrypted, so a key that is lost has to be replaced rather than looked up.
• Access is limited and revocable. Chamber staff see only their own chamber. API keys are scoped, named, and can be switched off individually.
• Everything runs over HTTPS.

Our team can access chamber data when we are asked for support or need to diagnose a fault. We keep that to what the task requires. If a breach ever affects a chamber's data, we will tell that chamber directly and promptly, with what we know and what we are doing about it. Not a press release.

• Export whenever you like. Member lists, attendee lists and financial reports export to CSV from inside the admin. No request, no fee, no waiting on us.
• Correct or delete any record directly in the admin. Members who ask a chamber to remove them can be removed by that chamber the same day.
• Leaving. If a chamber closes its account, we provide a full export and then delete the chamber's data from our live systems within 30 days. Encrypted backups age out on their own cycle. We do not keep a copy of your member list as a parting gift.

The platform is built for chamber staff and adult members, and we do not knowingly collect information from children. Family events do sometimes mean a child's name appears on an attendee list a parent filled in. We treat those entries the same as any other attendee record: held for the chamber, never marketed to, and deletable on request.

We will post any change here with a new effective date. If a change meaningfully affects how chamber data is handled, we will email account administrators before it takes effect rather than relying on you to notice. The commitments in What we will never do are not the kind of thing we intend to revise.

Write to [email protected]. A real person answers, on Mountain Time. If you think something on this page does not match what the platform actually does, tell us. We would rather hear it from you than not at all.