Privacy Policy
1. Introduction
Keystone Logix LLC ("we," "our," or "us") operates GatherLogic ("the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services.
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
Information You Provide
We collect personal information that you voluntarily provide when you:
- Register for an account (name, email address, password)
- Sign in with Google (name, email address, Google profile ID)
- Create or join groups (group name, description, location)
- Create or RSVP to events
- Upload photos or other media
- Send messages or contact other members
- Submit feedback or contact us
- Subscribe to a paid plan (billing details handled by our payment processor)
Automatically Collected Information
When you access the Service, we may automatically collect:
- IP address and approximate geographic location
- Browser type and version
- Device type and operating system
- Pages visited and time spent on the Service
- Referring URLs
- Session identifiers stored in cookies
Information from Third Parties
If you choose to sign in using Google, we receive your name, email address, and Google profile identifier from Google. We do not receive your Google password.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Provide and maintain the Service
- Send transactional emails (event notifications, RSVP confirmations, group messages)
- Enable group organizers to communicate with their members (subject to your email privacy settings)
- Process subscription payments and manage billing
- Respond to your inquiries and support requests
- Detect, prevent, and address fraud, abuse, or security incidents
- Comply with legal obligations
- Improve the Service through analytics and usage data
We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.
4. Cookies and Tracking Technologies
We use cookies and similar technologies for the following purposes:
- Session cookies: Required to maintain your authenticated session while using the Service
- Preference cookies: To remember settings such as cookie consent
- Analytics: To understand how users interact with the Service and improve it
You can control or disable cookies through your browser settings. Disabling session cookies will prevent you from logging in to the Service.
5. Information Sharing and Disclosure
We do not sell your personal information.
We may share your information in the following limited circumstances:
- With other members: Your name and profile information are visible to other members of groups you join, according to your privacy settings. Your email address is only shared with group organizers if you have consented to email sharing.
- With service providers: We use trusted third-party service providers to help operate the Service (e.g., email delivery, hosting, payment processing). These providers access your information only as necessary to perform their services and are bound by confidentiality obligations.
- With Google: If you use Google Sign-In, authentication data is exchanged with Google in accordance with Google's Privacy Policy.
- For legal reasons: We may disclose information when required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Keystone Logix LLC, our users, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and your choices.
6. Email Communications
We send two types of email communications:
- Transactional emails: Account verification, password resets, security alerts, and event/RSVP notifications that are necessary for the Service to function. These cannot be opted out of while you hold an active account.
- Organizer emails: Group organizers may contact members directly. You control whether your email address is shared with organizers via your email privacy settings. You may also unsubscribe from organizer emails at any time.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Account data: Retained while your account is active. Deleted within a reasonable period after account deletion.
- Event and group data: Retained for the lifetime of the group or event, unless deleted by the organizer.
- Billing records: Retained for a minimum of seven (7) years as required for financial and tax compliance.
- Security logs: Retained for up to 90 days for security and fraud prevention purposes.
Following account deletion, we may retain anonymized or aggregated data that cannot identify you.
8. Data Security
We implement appropriate technical and organizational safeguards to protect your personal information, including:
- Encrypted transmission of data via HTTPS/TLS
- Hashed storage of passwords (never stored in plaintext)
- Session security with HttpOnly and Secure cookie flags
- CSRF protection on all state-changing requests
- Rate limiting on authentication endpoints
- Optional two-factor authentication (2FA) for account access
No method of transmission or storage over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
9. Children's Privacy
The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal information from a minor, we will take steps to delete that information promptly. If you believe we have collected information from a minor, please contact us at privacy@gatherlogic.com.
10. Your Privacy Rights
General Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal retention requirements)
- Portability: Request your data in a structured, machine-readable format
- Opt-out of communications: Unsubscribe from non-essential emails at any time
California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@gatherlogic.com.
European and UK Residents (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to lodge a complaint with your local supervisory authority. Our legal basis for processing your data is primarily contractual necessity (to provide the Service) and, where applicable, your consent. To exercise your rights, contact us at privacy@gatherlogic.com.
Exercising Your Rights
You may exercise many of these rights directly through your account settings. For requests that require our assistance, please contact us at privacy@gatherlogic.com. We will respond within 30 days (or within any shorter period required by applicable law).
11. Third-Party Services
The Service integrates with the following third-party services:
- Google Sign-In: Optional authentication service. Subject to Google's Privacy Policy.
- Stripe: We use Stripe to handle subscription billing. Your payment card information is collected and processed directly by Stripe and is not stored on our servers.
- Email delivery: We use a third-party email service provider to deliver transactional and notification emails.
These services have their own privacy policies. We encourage you to review them.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, by sending a notice to your registered email address. The "Last Updated" date at the bottom of this page indicates when the policy was last revised. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Keystone Logix LLC
Email: privacy@gatherlogic.com