Your data

How we protect your data

• Kept apart. Each organization's data is separated by rules inside the database itself, and we test this on every change. One client can never see another's guests.
• You decide who sees what. Owner, Organizer, Team and Check-in each see only what you allow. Health and diet details are never applied automatically: a person always checks them.
• Where it lives. The database is in the EU (Ireland). Emails go out through Postmark, and incoming booking emails arrive through Cloudflare. To read a booking email, its text goes to Anthropic (Claude), which does not use it to train its models. Your guest list is never sent.
• Recorded. Changes and exports are recorded, and you can see who did what.
• Our staff. Our staff have no access to your guest data through the app, unless you invite one of us to your team. That access ends when you remove them, and everything they change shows in your History. Our staff page shows only counts and billing, never guest details.
• Deleted on time. Health and diet details are deleted 30 days after the event, booking emails 180 days after the event, and everything else 365 days after the event. The Owner can download everything or ask us to delete it.
• Sign-in. Sign-in is by an emailed code, with no passwords. Two-factor sign-in is available.