Privacy

[Company name], [Street, postcode, city, country], is responsible for your data. You can reach us at [Contact email].

• Your answers to the questions about your event. They can include a company name and anything you type in the free answers.
• The email address you pay with.
• The brief we make from your answers, and its PDF.
• Payment records: the amount, the date and Stripe’s reference. Stripe handles your card details; we never see them.
• The name anyone types to approve a brief, and the date.
• The questions you ask about your brief, and the answers, kept with the brief.
• Short technical logs kept by our hosting providers.

We don't ask for your name, we don't build profiles, and we don't sell data.

• To make your brief, deliver it and let you change it. This is how we fulfil our contract with you.
• To email you about your brief: the brief itself, a brief made again, and approvals. For the same reason.
• To keep payment and invoice records, as tax law requires.
• To count how many visits reach each step, such as opening the demo or checkout. These counts are totals per day and hold nothing about who you are.
• Only if you accept cookies: to see how people use the site, so we can improve it. This rests on your consent, which you can withdraw at any time.

• Convex stores the data and runs the app.
• Netlify serves the website.
• PostHog (servers in the EU) shows us how the site is used, only if you accept cookies.
• Stripe takes the payment.
• Resend sends our emails.
• Anthropic writes parts of the brief and answers your questions about it: your answers, the brief and your questions are sent to its Claude API.
• Google finds the venues, hotels and other places, through Google Places, and shows their photos. Each photo loads from Google and names its author.
• Google Drive, only if you choose “Save to Google Drive”. You sign in with Google in your browser, the files go straight to your Drive, and we don’t keep the access.

Some of them are based outside the EU. Where your data leaves the EU, it is protected by the safeguards the GDPR requires, such as standard contractual clauses.

We ask before using analytics cookies. If you accept, PostHog sets cookies and records how you use the site: the pages you open, where you came from, your clicks and scrolling, and a replay of the visit. Everything you type is hidden in the replay, and on brief and payment pages so is all the text, so your brief never reaches PostHog. Neither do the key in your private link or your email address. We use it only to improve venually, and it is kept for at most 12 months.

If you choose No thanks, nothing loads and no cookie is set. You can change your mind at any time with “Cookie settings” at the bottom of every page; choosing No thanks then removes PostHog’s cookies. We ask again after a year.

• We use no advertising cookies. Analytics cookies are set only if you accept them (see above).
• Local storage remembers your cookie choice for a year.
• Session storage notes which steps this visit has already counted, so each is counted once. It holds no personal data and clears when you close the tab.
• Local storage keeps the key from your private link, so this browser can change your brief, and remembers when you have approved a brief here.
• Stripe’s checkout sets its own cookies to prevent fraud. Google’s sign-in does the same when you use Save to Google Drive.

We keep your brief and your answers so that your links keep working, until you ask us to delete them. Payment and invoice records are kept as long as tax law requires.

You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, or to send it to you in a common format. You can also object to how we use it. Write to [Contact email]. If you think we handle your data wrongly, you can complain to [Data protection authority].