Privacy Policy

1. Introduction

TeamOutings ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our team event management platform ("Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the collection and use of your information as described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

Account Information

• Name and email address
• Profile photo (optional)
• Organization name and details
• Password (stored in encrypted form)
  

Event Information

• Event titles, descriptions, dates, and locations
• RSVP responses and preferences
• Poll votes and activity suggestions
• Comments and messages in event chats
  

User-Generated Content

• Photos uploaded to events
• Comments and reactions
• Activity suggestions and votes
  

Payment Information

• Billing address
• Payment method details (processed securely through third-party payment processors)
  

2.2 Information Collected Automatically

Usage Data

• Pages and features accessed
• Time spent on the Service
• Actions taken within the Service
• Error logs and performance data
  

Device Information

• Device type and operating system
• Browser type and version
• IP address- Unique device identifiers
  

Cookies and Tracking Technologies

• Session cookies for authentication
• Preference cookies for user settings
• Analytics cookies to understand usage patterns

2.3 Information from Third Parties

• Authentication providers (Google, Microsoft) when you choose to sign in with these services
• Organization administrators who add you to their team

3. How We Use Your Information

We use the information we collect to:

• Provide the Service: Create and manage your account, enable event creation and participation, facilitate team communication
• Improve the Service: Analyze usage patterns, identify and fix issues, develop new features
• Communicate with You: Send event notifications, RSVP reminders, service updates, and respond to inquiries
• Ensure Security: Detect and prevent fraud, unauthorized access, and other illegal activities
• Comply with Legal Obligations: Meet legal requirements, respond to legal requests, and protect our rights

4. How We Share Your Information

4.1 With Other Users

• Your name and profile photo are visible to other members of your organization
• Your RSVP status and poll votes are visible to event participants
• Photos you upload are visible to event participants
• Comments and messages are visible to event participants

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Clerk - Authentication and user management
• AWS - Cloud hosting and file storage
• PostHog - Analytics and product insights
• Stripe - Payment processing and Subscription billing
• Railway - Cloud hosting

4.3 For Legal Purposes

We may disclose your information if required to do so by law or in response to valid requests by public authorities, or when we believe disclosure is necessary to:

• Comply with a legal obligation
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the safety of users or the public

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. We will also retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except for information we are required to retain for legal purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Regular security assessments and audits
• Access controls and authentication requirements
• Secure data centers with physical security measures

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

7. Your Rights and Choices

7.1 Access and Update

You can access and update your account information at any time through your account settings.

7.2 Delete Your Account

You can request deletion of your account by contacting us or through your account settings. Note that some information may be retained as required by law or for legitimate business purposes.

7.3 Communication Preferences

You can opt out of promotional communications by following the unsubscribe instructions in those messages. You cannot opt out of service-related communications (e.g., security alerts, billing notifications).

7.4 Cookie Preferences

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service.

7.5 Data Portability

You can request a copy of your personal data in a portable format by contacting us.

8. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete that information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from your country. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You can opt out of the sale of your personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at privacy@teamoutings.io.

11. European Privacy Rights

If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Request restriction of processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

Our legal basis for processing your information includes:

• Contract: Processing necessary to provide the Service
• Legitimate Interests: Processing necessary for our legitimate business interests
• Consent: Processing based on your consent
• Legal Obligation: Processing required by law

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:
Email: privacy@teamoutings.io
Address: TeamOutings, Inc.
Data Protection Officer: dpo@teamoutings.io