• Account and profile information you provide, such as name, email address, and optional profile details.
• Event information provided by Organizers and Attendees (e.g., event names, dates, invites, messages, media).
• Content you submit, including posts, comments, files, and images.
• Communications with us (support inquiries, feedback, survey responses).
• Device and usage data such as IP address, browser type, app version, pages viewed, and timestamps.
• Cookies and similar technologies as described in our Cookie Policy.

• Directly from you when you create an account or interact with the Service.
• Automatically through your device and browser when you use the Service.
• From third parties, where permitted by law (e.g., authentication or analytics providers).

• Provide, operate, maintain, and improve the Service.
• Authenticate users, secure accounts, and prevent fraud and abuse.
• Communicate with you about updates, features, and service notifications.
• Personalize content and measure engagement and performance.
• Comply with legal obligations and enforce our Terms of Use.

• Contract: processing necessary to perform our contract with you (e.g., account creation, event hosting).
• Legitimate interests: to operate, secure, and improve the Service, balanced against your rights.
• Consent: for certain cookies/analytics and optional communications where required.
• Legal obligation: where necessary to comply with applicable law.

• Service providers (processors) that host infrastructure, support product features, communications, or analytics.
• Legal and safety: to comply with law, protect rights, safety, and integrity of the Service.
• Business transfers: in a merger, acquisition, or asset sale, subject to appropriate safeguards.
• Aggregated or de-identified data that cannot reasonably identify you.
• We do not sell personal information as "sell" is defined by applicable privacy laws.

We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on the type of data and our obligations.

We implement technical and organizational measures designed to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

If we transfer personal data internationally, we implement appropriate safeguards (e.g., Standard Contractual Clauses) as required by law.

The Service is not directed to children under 13 (or the age of digital consent in your jurisdiction). If you believe a child provided personal information, contact us and we will take appropriate steps.

We use cookies and similar technologies as described in our Cookie Policy. You can manage your preferences via your browser settings and the cookie banner (stored under the local setting "festi_cookie_consent").

We may update this Policy from time to time. Material changes will be communicated by reasonable means (e.g., posting on this page). Continued use of the Service after updates constitutes acceptance.

Questions about this Policy? Visit our Contact page. For terms governing use of the Service, see our Terms of Use.