Privacy Policy

This Privacy Policy applies to the GatherPro platform at gatherpro.events and all subdomains (e.g. acme.gatherpro.events). It covers data collected from platform organizers (tenants), their attendees, and visitors to the marketing site.

By using GatherPro you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

We collect different categories of data depending on how you interact with us:

Account & Organizer Data

When you apply to become a GatherPro organizer (tenant) we collect your name, business name, email address, phone number, and billing details. This data is used to provision your tenant account, communicate service updates, and process subscription payments.

Attendee RSVP Data

When an attendee registers for an event, the data is collected on behalf of the organizer and may include name, email, phone number, dietary or accessibility requirements, custom form responses, and check-in status. GatherPro acts as a data processor for this information; the organizer is the data controller.

Payment Data

All payment card data for ticket purchases is handled directly by Stripe, Inc. through Stripe Checkout and Stripe Connect. GatherPro does not store or transmit raw card numbers. We receive metadata such as transaction IDs, amounts, and payout statuses from Stripe.

Technical & Usage Data

We automatically collect IP addresses, browser type, operating system, referring URLs, pages visited, and timestamps when you access our platform. This data is used for security, debugging, and aggregate analytics.

Cookies

We use session cookies to maintain your authentication state, CSRF protection cookies for security, and optional analytics cookies (see Section 4 — Cookies & Tracking). You can control cookies through your browser settings.

We use the data we collect to:

• Provision and operate your tenant account and event pages
• Process ticket purchases and organizer payouts via Stripe
• Send transactional emails (registration confirmations, check-in QR codes, badges)
• Provide customer support and respond to inquiries
• Detect and prevent fraud, abuse, and security incidents
• Improve and develop the GatherPro platform
• Comply with legal obligations

We do not sell your personal data to third parties or use it for targeted advertising.

GatherPro uses the following types of cookies:

• Essential cookies — required for authentication (Laravel session) and CSRF protection. These cannot be disabled without breaking the application.
• Preference cookies — store your language selection and UI preferences (e.g. locale).
• Analytics cookies — aggregate, anonymised statistics to help us understand how GatherPro is used. No personal profiles are built.

You may disable non-essential cookies in your browser settings. Please note that doing so may affect the functionality of some features.

We rely on the following third-party processors to deliver the platform:

• Stripe, Inc. — payment processing, subscription billing, and organizer payouts via Stripe Connect. Subject to Stripe's Privacy Policy.
• Transactional Email Provider — delivery of registration confirmations, QR code badges, and system notifications. Emails are transmitted over TLS-encrypted connections.
• Cloud Infrastructure Provider — hosting, storage, and backup of platform data in encrypted-at-rest environments.

Each processor is bound by a data processing agreement and is only permitted to process your data for the specific purpose described.

We retain organizer account data for as long as the account is active and for a reasonable period thereafter to comply with legal obligations or resolve disputes.

Attendee data collected on behalf of an organizer is subject to the organizer's own retention policy. Organizers may export or delete attendee data from their portal at any time.

Server access logs are retained for up to 90 days. Anonymised aggregate analytics may be retained indefinitely.

We take security seriously. For details of the technical and organisational measures we employ — including encryption in transit, hashed credentials, tenant isolation, and infrastructure controls — please read our Security page.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we continually work to improve our safeguards.

Depending on your jurisdiction you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — ask us to fix inaccurate or incomplete data
• Deletion — request erasure of your personal data (subject to legal obligations)
• Portability — receive your data in a structured, machine-readable format
• Restriction — ask us to limit processing in certain circumstances
• Objection — object to processing based on legitimate interest

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are an attendee of a specific event, please contact the event organizer directly as they are the data controller for your registration information.

GatherPro is operated from Hong Kong. Your data may be transferred to and processed in other countries where our infrastructure providers and sub-processors operate. When transferring data internationally we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms recognised under applicable law.

GatherPro is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately at [email protected] and we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify active organizer accounts by email. Continued use of GatherPro after changes are posted constitutes your acceptance of the revised policy.

For questions, data subject requests, or concerns about this Privacy Policy, please contact: