Privacy Policy

Overview

Confirmed ("we," "us," or "our") operates an event management platform at confirmed.events that helps people discover, create, and manage events and communities. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our platform.

By using Confirmed, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our platform.

Information We Collect

We collect information you provide directly to us, as well as information generated through your use of the platform.

Account Information

When you create an account, we collect your name, email address, and optionally a profile avatar image. You may also sign in using Google OAuth, in which case we receive your name and email from Google.

Event and Community Data

When you create events or communities, we store the content you provide including titles, descriptions, dates, locations, cover images, and other event details. When you register for events, we store your registration data including any responses to custom registration form fields set by the event organizer.

Payment Information

Payments for subscriptions are processed by Stripe. We do not store your credit card numbers or full payment details on our servers. Stripe handles payment processing in accordance with their own privacy policy.

Usage Analytics

We use Umami, a privacy-focused analytics tool, to understand how our platform is used. Umami does not use cookies, does not collect personal data, and does not track users across websites. All analytics data is aggregated and anonymous.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our platform
• Create and manage your account
• Process event registrations and manage attendee lists
• Process subscription payments
• Send you transactional emails (OTP codes, event updates)
• Respond to support requests
• Detect and prevent fraud or abuse

Information Sharing

We do not sell your personal information to third parties. We share information only in the following circumstances:

• With event organizers: When you register for an event, the organizer can see your name, email, and any registration form responses you submitted.
• With Stripe: For processing subscription payments securely.
• When required by law: If we are compelled by legal process or to protect the rights, property, or safety of Confirmed, our users, or others.

Cookies and Tracking

Confirmed uses essential cookies for session management. When you log in, we store a JWT session token in an HTTP-only cookie to keep you authenticated. We also store a theme preference cookie for dark/light mode.

Our analytics provider, Umami, does not use cookies and does not track individual users. We do not use any third-party advertising or tracking cookies.

Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will remove your personal data from our systems within 30 days, except where we are required to retain it for legal or compliance purposes. Event data associated with events you organized may be retained in anonymized form.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Update your account information through your settings page
• Delete your account and associated personal data
• Export your data upon request

To exercise any of these rights, visit your account settings or contact us at support@confirmed.events.

Security

We take reasonable measures to protect your information. Authentication is handled via one-time passcodes sent to your email or through Google OAuth -- we never store passwords. All data is transmitted over HTTPS, and sensitive tokens are stored securely.

Third-Party Services

Our platform integrates with the following third-party services:

• Stripe -- payment processing for subscriptions
• Amazon Web Services (S3) -- file storage for avatars and event images
• Umami -- privacy-focused, cookieless website analytics
• Google -- OAuth sign-in (optional)

Each of these services has their own privacy policy governing their handling of your data.

Children's Privacy

Confirmed is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can remove it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions about this Privacy Policy, please contact us at support@confirmed.events.