Privacy policy

Who this applies to

This policy applies to the Plansio website and related planning tools operated by the Plansio team.

If you have any privacy questions, data access requests, or deletion requests, you can contact hello@plansio.app.

What personal data we use

• • Organizer account data, such as the email address and profile data returned by Google sign-in and Supabase Auth.
• • Plan data, including titles, descriptions, dates, times, locations, recurrence settings, and public visibility choices.
• • Guest response data, such as RSVP status, guest name, optional notes, and timestamps.
• • Security and technical data, such as hashed IP information, browser information, cookie preferences, and service logs used for abuse prevention and debugging.
• • Analytics data only when you accept analytics cookies, and only in an aggregated, non-PII form.

Why we use personal data

• • To create, publish, and manage plans and RSVPs.
• • To authenticate organizers and protect access to private organizer tools.
• • To prevent spam, abuse, duplicate submissions, and service misuse.
• • To investigate incidents, fix bugs, and improve reliability.
• • To understand aggregate product usage when analytics consent has been given.

Legal bases

• • Performance of a service you request when you create plans, manage RSVPs, or use organizer features.
• • Legitimate interests for security, fraud prevention, service administration, and maintaining product stability.
• • Consent for optional analytics cookies and analytics measurement.

Service providers and transfers

Plansio uses infrastructure and service providers such as Netlify (hosting), Supabase (database and authentication), Google (sign-in and, if accepted, analytics), and Resend when organizer email notifications are enabled.

Some of these providers may process data outside your country or outside the EEA. Where that happens, the provider is responsible for applying the transfer safeguards it offers, such as contractual commitments and security controls.

Retention

We keep account, plan, and RSVP data for as long as it is needed to run the service, keep organizer records consistent, prevent abuse, and maintain backups.

If you delete or cancel a plan, it may become inaccessible in the product while certain operational records remain retained for integrity, support, fraud prevention, and backup purposes.

Your rights

• • You can ask for access, correction, deletion, restriction, objection, or portability where applicable.
• • You can withdraw analytics consent at any time from the cookie settings link in the footer.
• • You can also complain to your local data protection authority. If you are in Portugal, that is the CNPD.