Privacy Policy

1. Information We Collect

Information you provide

We collect information you provide directly, such as your email address when you register, and any content you create within the Service (event names, schedules, uploaded photos).

Automatically collected information

When you use the Service, we automatically collect certain technical information, including your IP address, browser type, and pages visited. This information is used solely for security and to keep the Service running smoothly.

Cookies

We use essential cookies only — to keep you logged in and protect against fraud. We do not use advertising or analytics cookies.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service
• Process payments securely via Stripe
• Send transactional emails (account confirmation, password reset)
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your data or use it for advertising.

3. Information Disclosure

We may share your information only in the following circumstances:

• Service providers: with trusted third parties who assist us in operating the Service (Supabase for hosting and storage, Stripe for payment processing). These providers are contractually obligated to protect your data.
• Legal requirements: when required by law, court order, or government authority.
• Business transfers: in connection with a merger, acquisition, or sale of assets, in which case your data would remain subject to this policy.

4. Data Security

We implement appropriate technical and organisational measures to protect your personal data. Your data is stored on Supabase infrastructure within the European Union, encrypted at rest and in transit. Payments are handled entirely by Stripe under PCI-DSS compliance — we never store card details.

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Your Rights

You have the right to access, correct, export, or delete your personal data at any time. To exercise any of these rights, contact us at team@planthefun.org. We will respond within 30 days.

You may also opt out of any promotional communications by following the unsubscribe link in any email we send.

If you are located in the EEA, you have the right to lodge a complaint with your national data protection authority.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Payment records are retained for 7 years as required by tax law.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or via a notice on the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

8. Contact

For any privacy-related questions, contact us at team@planthefun.org.