Privacy notice

What we collect

What you give us: your name, email, and if you add them, a phone number, photo, bio, home city, the neighbourhood you're coming from, payment usernames, My pitch and dietary notes.

What you create: events, RSVPs, asks and promises, messages, photos, expenses and everything else you add to an event or a group.

What the app records to work: sign-in and device details for notifications, when invites are opened (counted per browser, not linked to a name unless you're signed in), and a small log of product moments (like an event being created) that never holds names, contact details, addresses or messages.

Why we collect it

To run the app: show your plans to the people in them, send the notifications you've asked for, keep the shared money record, keep accounts safe and answer reports. We ask for your consent when you sign up, and again before texting you or using your contacts.

We don't sell your information, we don't show ads, and we don't use it for anything you wouldn't expect from a planning app.

Who sees what

People in an event see what the event shows them. The exact address is shared only under the host's reveal rule, and never in a link preview or a notification. Public pages (an invite for a public event, a public group, a shared recap) show first names only, never contact details, addresses or the guest list.

Your contact details are never shown to other people unless you choose to share them. Reports go to the review team only.

How long we keep it

Your account and what you add stay until you delete them. Event album photos are deleted 365 days after the event ends. Screenshots sent with feedback are deleted after 180 days.

Server and error logs are kept by our hosting and error-tracking services for up to 90 days. Backups are kept for up to 30 days.

When you delete your account, your name, photo and contact details are removed; records other people rely on, like shared expenses, stay under "Deleted user".

Where it's stored

Our database and photo storage run with service providers, and some of them store or process information outside Canada (mostly in the United States), where it may be available to authorities under local law. Each provider only gets what it needs: hosting (Vercel), database (Neon), photo storage (Cloudflare), email (Resend), texts (Twilio), error tracking (Sentry), AI features (Anthropic: only the event details you ask it to plan from and receipt photos you ask it to read), place search and maps (OpenStreetMap), weather (Open-Meteo), exchange rates (Frankfurter) and, if you use them, Sign in with Google or Apple.

Photos

Location and camera details (EXIF) are removed from every photo before it's stored. A photo is public only if a host shows it on a shared recap.

Texts and email

We text you only if you confirm your number and turn texts on. Reply STOP to any text to stop. Invites a host sends by text or email say who sent them and how to stop getting them.

Your rights

You can see and download everything you've added (Settings, then Privacy, then Download my data), correct it, and delete your account at any time. You can ask us what we hold about you, how it's used and who it's been shared with, and we'll answer within 30 days.

You can withdraw your consent, for example by turning off texts, email or being findable by your number, or by deleting your account. If you're unhappy with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Children

Octoparty isn't for anyone under 13, and we don't knowingly collect their information.