Privacy Policy

1. Information we collect

• Account data such as your name, email address, authentication method, and profile image if provided by your sign-in provider.
• Mailing list and event data such as list names, member email addresses, optional names, event titles, event messages, and response records.
• Email interaction data related to invitations, confirmations, unsubscribe requests, and inbound replies used to process responses.
• Billing data provided by Paddle, such as subscription status, plan, billing email, and billing country. We do not store full payment card details.
• Usage and technical data such as IP address, device information, timestamps, and logs generated through normal use of the Service.
• Cookies and similar technologies used to keep you signed in and secure the Service.

2. How we use information

• Provide, operate, and maintain the Service.
• Authenticate users and enforce access controls.
• Send invitations, updates, confirmations, and notices.
• Process subscriptions, taxes, and billing status.
• Protect the Service from fraud, abuse, or security risks.
• Improve features, performance, and reliability.

3. Legal bases (EEA/UK)

If you are in the EEA or UK, we process personal data based on contractual necessity to provide the Service, legitimate interests in operating and improving the Service and protecting it from abuse, and consent where required for specific communications.

4. How we share information

We share information with trusted processors that help operate the Service. Examples include:

• Paddle for billing and tax handling.
• Google for authentication.
• AWS for email delivery and storage.
• Database and hosting providers for infrastructure.

We may also disclose information where required by law or when necessary to protect the rights, safety, and security of WeHaveTen, the Service, or other users.

5. Email communications and consent

Organizers are responsible for obtaining appropriate permission before adding contacts or sending invitations. Recipients can unsubscribe using the unsubscribe link in emails, and we process those requests through the Service.

6. Data retention

We retain account, list, event, and response data while your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, maintain backups, and enforce agreements.

7. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights

You can access, update, or delete account information through the Service where available or by contacting us. Depending on your location, you may also have rights to request access, correction, deletion, or restriction of processing, or to object to certain processing.

9. International transfers

We may process information in countries other than where you live. We take steps to apply appropriate safeguards when transferring personal data.

10. Data controller

YY Digital is the data controller for personal information processed under this Privacy Policy.

11. Children

The Service is not intended for children under 16, and we do not knowingly collect personal information from them.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version and update the date above.

13. Contact

Questions about privacy can be sent to [email protected] (YY Digital).