Privacy policy

1. Introduction

Amassara ("we", "us", "our") is committed to protecting the personal information of our users. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

2. Information we collect

We collect the following types of information:

• Organiser accounts: Name, email address, and profile picture (via Google sign-in) or name and email (via email/password sign-up).
• Event attendees: Full name and email address provided when registering for an event.
• Contact form: Name, email, and message content submitted via our contact form.
• Usage data: Basic server logs including IP addresses and page visits for security and performance monitoring.

3. How we use your information

• To create and manage your organiser account
• To send attendees their QR code tickets and event confirmations by email
• To notify waitlisted attendees when a spot becomes available
• To enable event organisers to check in attendees at their events
• To respond to contact form enquiries
• To protect the platform from abuse and fraudulent activity

4. Data sharing

We do not sell your personal data. We share data only with the following third-party services required to operate the platform:

• Neon — database hosting (PostgreSQL)
• Vercel — platform hosting and deployment
• Resend — transactional email delivery
• Google — optional OAuth sign-in
• Cloudflare — bot protection (Turnstile)

Attendee names and emails are visible to the event organiser for the purposes of managing their event.

5. Data retention

We retain organiser account data for as long as the account is active. Event and ticket data is retained for 12 months after the event date, after which it may be deleted. You may request deletion of your data at any time by contacting us.

6. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent to data processing at any time

To exercise these rights, contact us via the contact form on our homepage.

7. Security

We implement reasonable technical measures to protect your data, including encrypted database connections, hashed passwords, and secure HTTPS connections. However, no system is completely secure and we cannot guarantee absolute security.

8. Cookies

Amassara uses session cookies strictly necessary for authentication. We do not use tracking cookies or advertising cookies. No cookie consent banner is required as we only use essential cookies.

9. Children's privacy

Amassara is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data through our platform, please contact us for removal.

10. Contact

For privacy-related enquiries, contact us at our contact form