Privacy Policy

1. Data we collect

• Account and profile: email address, name or username, profile photo, language, interests and information you choose to add to your profile.
• Events and bookings: event listings, photos and videos you upload, ticket choices, attendee names and email addresses, order and check-in records, invitations, transfers and host or co-host arrangements.
• Payments and earnings: transaction amount, currency, payment and refund status, Stripe references, affiliate attribution and payout records. Stripe handles card details; Attnd does not store full card numbers.
• Location: a city or coordinates you enter, and your device location only if you grant permission. Location helps show nearby events and set an event venue.
• Device and usage: essential session data, IP address and technical logs for security, a device push token if you enable notifications, and referral-link visits tied to a browser-generated identifier.

2. Why we use it

We use account, profile, booking and payment information to provide the service and fulfil bookings; this is necessary for our contract with you. We use technical logs and limited referral metrics to protect the service, prevent fraud and understand whether shared links work, based on our legitimate interests. We keep transaction records where required by law. We use precise device location, camera access and push notifications only after you grant the relevant device permission; you can change permissions in your device settings.

3. Who sees data

Other users can see information you make public on your profile and event listings. The host and authorized check-in team can access the attendee and ticket information needed to run the event. Invited users see the invitation information you send. We use Supabase for authentication, database and storage; Vercel for website hosting; Stripe for payment processing and connected payouts; Resend for transactional emails; and map tile services for maps. These providers receive only the information needed for their services. We may disclose information when the law requires it or to investigate fraud or safety issues.

4. International transfers

Attnd and its service providers may process information in countries outside your own. Where applicable data-protection law requires a transfer safeguard, we use the provider’s available contractual and legal safeguards. You can contact us for information about the safeguards relevant to your data.

5. Cookies and local storage

Attnd uses session cookies needed for sign-in and checkout, local storage for app preferences and in-progress flows, and an affiliate referral cookie so a booking can be attributed to the person who shared the link. We do not use these identifiers to sell personal information or run cross-site advertising. Browser settings can clear cookies and local data, but doing so may sign you out or remove an unfinished checkout.

6. Retention

We keep account and profile information while the account is active. Booking, payment and payout records remain for the period required for accounting, tax, chargeback and legal obligations. Security logs are kept only as long as needed to investigate misuse. Device tokens are removed when they become invalid or you disable notifications; local app data stays on your device until cleared. When a deletion request is valid, we delete or anonymize data unless an applicable obligation requires retention.

7. Your choices and rights

You can edit much of your profile in the app. Depending on where you live, you may request access, correction, deletion, restriction, portability or objection to certain processing, and withdraw consent where processing relies on it. You can also complain to your local data-protection authority. Contact us through the legal notice to make a request; we may need to verify that the account belongs to you.

8. Security and changes

We use access controls and encrypted connections to protect data, but no online service can guarantee absolute security. If a data incident affects your rights, we will notify you and authorities where required. We may update this policy as the service changes and will show the latest date at the top. Material changes will be communicated when required.