Privacy Policy

Potluckr is the controller for the personal information of Hosts and registered users. For Guest information that a Host uploads (such as a guest list of email addresses or phone numbers), the Host is the controller and Potluckr acts as a processor on the Host's behalf. Hosts must have a lawful basis (such as consent) to share Guest contact details with us.

You give us:

• Account details: name, email address, password (hashed), profile preferences.
• Event details: event title, date, time, location, description, menu items, dish categories, photos you upload.
• Guest details (uploaded by Hosts): name, email address, and/or phone number, dietary or allergen notes, RSVP status, dish or menu selections.
• Communications: messages you send to us (such as support emails) and your responses to surveys.
• Payment details: for paid plans, billing name and the last digits of a card number from our payment processor — we do not store full payment card numbers on our servers.

We collect automatically:

• Device and log data: IP address, browser type, operating system, referring pages, timestamps, and error reports.
• Usage data: pages visited, features used, RSVPs and dish sign-ups, approximate location derived from IP.
• Cookies and similar technologies: see "Cookies" below.

From third parties:

• Sign-in providers (such as Google), if you choose to sign in with one — we receive your name, email address, and profile photo.
• Service providers that help us deliver email, host data, and monitor abuse.

We do not knowingly collect sensitive personal data (such as government IDs, biometric data, or health records) and ask that you not submit it through the Service.

We use personal information to:

• Create and operate your account and events.
• Deliver core features — invitations, RSVPs, dish coordination, menu selections, reminders, and analytics for Hosts.
• Send transactional emails (account, security, RSVP confirmations, event reminders).
• Provide customer support and respond to your requests.
• Process payments and manage subscriptions.
• Detect, prevent, and address fraud, abuse, spam, and security incidents.
• Improve and develop the Service (including aggregated, de-identified analytics).
• Comply with legal obligations and enforce our Terms.

Where required by law, our legal bases for processing are: (a) performance of a contract with you, (b) your consent (which you may withdraw at any time), (c) our legitimate interests in operating and securing the Service, and (d) compliance with legal obligations.

We share personal information only as described below:

• With Hosts and Guests of the same event: Guests' names, RSVP status, dish and menu selections, and any notes they submit may be visible to the event Host and (when the Host chooses) to other Guests through the public event page.
• Service providers ("processors"): hosting, database, authentication, email delivery, error monitoring, analytics, and payment processors that work under contract and only on our instructions.
• Legal and safety: when we believe in good faith disclosure is necessary to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of Potluckr, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to the protections of this Policy.
• With your consent: for any other purpose disclosed to you at the time.

We do not sell personal information. We do not share personal information with third parties for their own advertising or marketing.

When a Host publishes an event, the event page may be accessible to anyone who has the link. Do not include sensitive information in event titles, descriptions, or menus. By RSVPing or claiming a dish, you agree that the name and details you submit may be displayed to the Host and to other Guests of that event. Email addresses are not displayed publicly on event pages.

We use strictly necessary cookies to keep you signed in, remember your preferences, and protect the Service from abuse. We may also use limited analytics cookies to understand how the Service is used. You can control cookies through your browser settings; blocking strictly necessary cookies may prevent parts of the Service from working.

We keep personal information for as long as your account is active, as needed to provide the Service, and as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Event data and Guest lists are retained while the event remains in your account; you can delete events at any time. When you delete your account, we delete or de-identify personal information within a reasonable period, except where we are required to retain it (for example, for tax, accounting, or fraud-prevention purposes). Backups are purged on a routine cycle.

We use industry-standard technical and organizational measures designed to protect personal information — including encryption in transit, row-level database access controls, hashed passwords, and limited employee access on a need-to-know basis. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

We and our service providers may process personal information in countries other than where you live, including the United States. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) to protect personal information transferred internationally.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information ("right to be forgotten").
• Object to or restrict certain processing.
• Withdraw consent at any time, where processing is based on consent.
• Port your personal information to another service.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email email us. We will respond within the time frame required by applicable law. If you are a Guest whose information was uploaded by a Host, contact the Host first — they control your information for their event. If they cannot help, we will assist.

California (CCPA/CPRA): in the past 12 months we have collected the categories of personal information described in Section 2 for the business purposes described in Section 3. We do not sell or "share" personal information for cross-context behavioral advertising.

EEA/UK (GDPR/UK GDPR): our legal bases are described in Section 3. You have the rights described in Section 10 and may complain to your supervisory authority.

The Service is not directed to children under 13 (or the minimum age of digital consent where you live). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

The Service may contain links to third-party sites or services. We are not responsible for their privacy practices. Review their policies before providing them with information.

We may update this Policy from time to time. When we do, we will revise the "Effective" date above and, for material changes, notify you by email or through the Service.

Potluckr is headquartered in San Francisco, California, USA. For privacy questions or to exercise your rights, email email us or reach us through our contact form.