Legal documents
Privacy policy
What data reaches us, why we need it, how long we keep it and what you can do about it.
Version 0.1 · draft of 13 November 2026
The text below is a draft written in plain language. It has no legal effect yet and may change before launch. Places marked in square brackets are still to be completed by the operator.
In short: we do not sell data, we show no adverts and we track no one. What you put in a plan is seen only by the people you give access to.
1. The data controller
The data controller is [operator — to be completed], [address — to be completed]. For any question about your data, write to [data protection contact address — to be completed].
2. What data we process and why
| What data | Why |
|---|---|
| Account: email address, the name you choose, preferred language | So that you can sign in and receive sign-in codes and the notifications you asked for. |
| Occasion content: tasks, dates, budgets, recorded payments, suppliers, messages, files | So that we can keep and show your plan, to you and to the collaborators you choose. |
| Guests: household name, email address (if you enter one), reply, number of adults and of children, private requests | So that guests can reply and you know whom to count on. |
| Sign-in safety: IP address, a device identifier, the time of sign-in attempts | So that we can limit repeated attempts and protect accounts from abuse. |
| Businesses: listing data, team members, enquiries received and replies given | So that we can publish the listing and pass on planners’ enquiries. |
| Businesses added from public sources: name, category, locality, the contact route the business published, the source | So that the directory is useful from the start; each such listing is approved by a moderator and can be claimed, corrected or removed. |
| Reports: what you reported, your contact details if you give them, the decision taken | So that we can review the report and communicate the decision. |
The legal basis for each kind of processing will be stated here after legal review: [legal bases — to be completed].
3. Children
Children are never stored as persons. A reply to an invitation contains only the number of children in a household — no names, no ages, no other details.
4. What we do not do
- We do not sell or rent data to anyone.
- We show no advertising and use no third-party tracking or analytics tools.
- Directory statistics are daily totals, with no visitor identifier at all.
- We send no marketing to contacts entered by planners, nor to businesses found in public sources.
5. Who sees the data
Private by default: the guest list, the budget and private requests are seen only by the people the planner has given that specific access. A business learns who a planner is only from an enquiry the planner sends, and sees only the fields the planner chose to include.
If you yourself connect an external AI assistant, it receives only the data you allow, for as long as you keep the connection.
We work with providers that process data on our behalf, for instance for hosting and for sending email: [list of processors and the countries where they process data — to be completed].
6. How long we keep data
| Type of data | How long it is kept |
|---|---|
| Sign-in codes and other sensitive codes | Deleted 24 hours after they expire or are used. |
| Accounts and occasions | Until you ask for deletion; then 7 days in which you can change your mind, then deletion. |
| Guests’ private requests | 30 days after the occasion is closed out. |
| Conversations with businesses (enquiries and quotes), guest replies, household email addresses | As long as the occasion exists; deleted with it. |
| Receipts and financial records | 7 years after the occasion is closed out, as accounting law requires. |
| Rejected drafts of listings added from public sources | 90 days. |
| Records of claims and objections | 3 years. |
| The audit log | 2 years. |
| Directory statistics | Indefinitely, as daily totals; no raw visitor data exists. |
| Any other type of data | As long as the account or occasion it belongs to exists; deleted with it. |
7. Your rights
You have the right to know what data we hold about you and to receive a copy, to ask for it to be corrected or deleted, to ask for processing to be restricted, to object to processing, and to take your data with you in an easily usable format. Much of this you can do directly in the app: exports, edits, deleting your account.
For any request, write to [data protection contact address — to be completed]. We reply within 30 days. If you believe we have not respected your rights, you can turn to the Romanian data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal).
8. Cookies
This public site uses no cookies at all. The app uses exactly three, none of them for tracking.
9. Changes
When we change this policy, we publish the new version here, with its date, and announce important changes in the app as well.