Privacy Policy

1. Information We Collect

We collect and process two categories of data:

A. Account Holder Data (Event Organizers)

When you create an account and set up events or campaigns, we collect and store:

• Personal Information: Name and email address.
• Authentication Data: If you register via a third-party provider (such as Google), we receive your name, email address, and unique provider identifier. We do not store your third-party password.
• Event Information: Event name, date, end date, location, and description.
• Campaign Assets: Images, graphics, logos, background images, share text, and branding settings uploaded or configured by the account holder.
• Billing Information: Subscription plan and billing status. Payment details are processed and stored securely by our payment provider (Stripe) and are not stored on our servers.
• Security & Audit Data: IP address and browser/device user agent captured alongside account actions such as login, logout, password changes, and data export requests, for security and audit purposes.
• Currency Preference: Prices are shown in USD by default. If you choose a display currency (EUR or USD) with the currency toggle, we store that choice in a cookie and, when you register, with your account so pricing and billing communications stay consistent. No location detection is performed for this purpose.

B. Event Attendee Data

When event attendees authenticate via a social media platform to share an event, we collect and process:

• Profile Information: Name, profile URL, and profile photo as provided by the social media platform's API. We capture an attendee's email address only if they voluntarily provide it (for example, to enter a raffle) or if it is separately supplied by the event organizer.
• Profile Image: We download and store a copy of the attendee's profile picture on our servers for the purpose of generating personalized sharing cards. These images are retained for as long as the related campaign or event remains active on our platform, and are deleted when the organizer removes the campaign or event, or upon a verified deletion request.
• Sharing Activity: We record the attendee's name, profile URL, share text, and the composite image generated for each share, along with the IP address and browser/device user agent of visitors who view a sharing widget, click a tracked share link, or complete a share, to enable organizers to track campaign performance and detect abuse.

2. How We Use Your Information

For Account Holders (Event Organizers):

• To provide and manage event creation and campaign sharing functionality.
• To enable customization of sharing cards and campaign branding.
• To track and display sharing activity and campaign analytics.
• To manage subscriptions and billing.
• To communicate service-related updates and notifications.

For Event Attendees:

• To generate personalized sharing cards with the attendee's profile photo and name.
• To facilitate sharing to social media platforms on the attendee's behalf (only when explicitly initiated by the attendee).
• To track which attendees have shared a specific campaign.

We do NOT use attendee data for marketing, advertising, profiling, or any purpose unrelated to the sharing service.

3. Data Sharing and Third-Party Services

We do not sell, rent, or share user data with third parties for their own marketing purposes.

We integrate with the following third-party services to provide our platform:

• Social Media Platforms: Attendir connects with social media platform APIs (such as LinkedIn) to authenticate attendees, retrieve profile information, and enable sharing. By using these features, you acknowledge and accept the respective platform's privacy policies and data practices.
• Payment Processing: Subscription payments are handled by Stripe. Attendir does not store credit card numbers or bank details. Please refer to Stripe's Privacy Policy for details on how they process payment data.
• Transactional Email: Service emails, such as account notifications and billing receipts, are delivered by Resend, a US-based transactional email provider. Please refer to Resend's Privacy Policy for details on how they process email data.
• Authentication Providers: If you register or log in via Google, we receive limited profile data as described in Section 1A. We do not receive or store your Google password.

4. Data Storage and Security

We implement appropriate technical and organizational security measures to protect all stored data against unauthorized access, alteration, disclosure, or destruction.

Account holder data (such as email addresses, event information, and campaign assets) is stored securely on our servers.

Attendee profile images are stored on our servers for the purpose of generating sharing cards and are retained for as long as the related campaign or event remains active. They are deleted when the organizer removes the campaign or event, or upon a verified deletion request.

Session data (such as authentication tokens) is stored temporarily and cleared after the sharing session is complete.

5. International Data Transfers

Attendir is hosted in DigitalOcean's Frankfurt, Germany (FRA1) data centre. Both the application and its database run in the EU, so core customer and attendee data — account details, event information, campaign assets, and sharing activity — is stored and processed within the European Union.

Some of our sub-processors may process certain data in the United States:

• Stripe — payment processing
• Resend — transactional email delivery
• Google — OAuth sign-in & GA4 analytics
• LinkedIn — attendee authentication and sharing (see Section 3)

Each of these sub-processors operates under a GDPR-compliant Data Processing Agreement relying on Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.

6. Your Rights

As an account holder, you have the right to:

• Access, update, or delete your personal information through your account settings.
• Request a complete export or deletion of your stored data at any time.
• Cancel your subscription and close your account.

As an event attendee, you can:

• Request that your profile name, image, and sharing records be removed from our system.

For any data-related requests, please contact us at attendir.com/#contact.

7. Cookies and Tracking

Attendir uses the following types of cookies:

• Essential Cookies: Required for the platform to function, including session management and authentication.
• Preference Cookies: A currency-preference cookie (attendir_currency) stores your chosen display currency (EUR or USD) for up to one year when you use the currency toggle on our pricing pages.
• Analytics Cookies: We use Google Analytics 4 (GA4) to understand how visitors interact with our website. GA4 collects anonymized usage data such as pages visited, time on site, and general geographic region. This data helps us improve the platform. You can learn more about how Google processes this data in Google's Privacy Policy.

We do not use advertising or remarketing cookies.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If significant changes occur, we will notify users through the platform or via email. Continued use of Attendir after updates constitutes acceptance of the revised policy.

9. Contact Information

If you have any questions or concerns about this Privacy Policy, contact us at attendir.com/#contact.