Privacy Policy

Overview

Seatify ("we," "our," or "us") is a cloud-based seating chart and event management service. This Privacy Policy explains how we collect, use, share, and protect personal information when you use our application and related services (the "Service").

Information We Collect

Account Data

When you create an account, we collect:

• Email address and name (via Google OAuth or email/password signup)
• Subscription and billing information (processed by Stripe — we do not store full payment card numbers)

Event Data

When you create and manage events, we store:

• Guest lists: names, email addresses, companies, job titles, industries, interests, group affiliations, and notes
• Seating arrangements, table configurations, and venue layouts
• Relationship data between guests (type and strength)
• Seating constraints and optimization preferences

RSVP Response Data

When your event attendees respond to RSVP invitations, we collect the following on your behalf:

• Attendance status and meal preferences
• Dietary restrictions and allergies (health-adjacent information)
• Accessibility needs (health-adjacent information)
• Seating preferences (who they would like to sit with)
• Plus-one information

Automatically Collected Data

With your consent, we use PostHog to collect anonymous usage data, including:

• Pages visited and features used
• Device type and browser information
• Approximate geographic location (country/region level)
• Referral sources

This data is aggregated and anonymized and is only collected if you accept analytics cookies via our cookie consent banner. We also collect server logs, IP addresses, and browser type to operate and secure the Service.

Email Subscriptions

If you choose to subscribe to updates, we collect your email address through Resend. This is entirely optional. Your email is used only to send product updates and will never be sold or shared with third parties.

How We Use Information

• Provide the seating chart and event management Service
• Process RSVP responses from event attendees
• Run seating optimization algorithms that suggest arrangements based on relationships, preferences, and constraints
• Send event communications (invitations, reminders, confirmations) on your behalf via email
• Process payments for premium features
• Understand usage patterns and improve the product (with your consent)
• Respond to support requests

Cookie Consent

When you first visit Seatify, we display a cookie consent banner asking for your permission before enabling any analytics tracking. You can:

• Accept — analytics cookies are enabled and PostHog collects anonymous usage data
• Decline — no analytics cookies are set and PostHog does not load

You can change your preference at any time using the "Cookie Preferences" option in your Profile Settings or in the footer on public pages. Essential cookies required for authentication and core functionality are always active regardless of your choice.

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We share data with the following service providers solely to operate the Service:

• Supabase (database hosting, authentication) — stores event and guest data
• Vercel (application hosting) — processes web requests
• Resend (email delivery) — receives guest email addresses to send invitations, reminders, and confirmations
• Stripe (payment processing) — processes subscription payments; we do not store payment card details
• PostHog (usage analytics) — receives anonymized usage data only when you consent to analytics cookies

We may also share anonymous, aggregated statistics about application usage, but these contain no personally identifiable information.

Algorithmic Processing

Our seating optimization feature uses algorithmic processing to suggest seating arrangements for your events. The algorithm considers:

• Relationships between guests (type and strength)
• Seating constraints you define
• Guest seating preferences submitted via RSVP
• Group affiliations

This processing is performed solely to deliver the Service. It is not profiling and produces no legal effects on guests. You maintain full control over all final seating decisions.

Data Retention

• Event data is retained while your account is active.
• You may delete individual events or your entire account at any time.
• Upon account deletion, all associated data is permanently deleted within 30 days.
• Anonymized, aggregated analytics data may be retained indefinitely.

International Data Transfers

Our service providers may process data in the United States and other countries. Appropriate safeguards are in place for international transfers of personal data.

Cookies and Tracking

Seatify uses cookies and similar technologies. We distinguish between:

Essential Cookies

Required for the Service to function. These cannot be disabled and include:

• Authentication and session management (Supabase auth tokens)
• Remembering your preferences (theme, settings)
• Cookie consent preference

Analytics Cookies

Only set with your explicit consent via the cookie banner:

• PostHog analytics (anonymous usage tracking)

You can manage your cookie preferences at any time via your Profile Settings or the "Cookie Preferences" link in the footer on public pages.

Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS) and at rest
• Access to production data restricted to authorized personnel
• Row-Level Security (RLS) policies ensuring multi-tenant data isolation

We recommend using a strong, unique password or Google OAuth authentication to protect your account.

GDPR Rights (for EU Users)

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate personal data
• Request erasure of your personal data
• Restrict or object to processing of your personal data
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at privacy@seatify.app.

For RSVP respondent data, the event organizer is the data controller. RSVP respondents should contact the event organizer first regarding their personal data. We act as a data processor on behalf of the event organizer.

CCPA Rights (for California Residents)

If you are a California resident, you have the right to:

• Know what personal information is collected about you
• Know whether your personal information is sold or disclosed and to whom
• Opt out of the sale of personal information (we do not sell personal information)
• Access your personal information
• Request deletion of your personal information
• Not be discriminated against for exercising your privacy rights

To exercise these rights, contact us at privacy@seatify.app.

Your Rights

You have the right to:

• Access your data through your account settings
• Export your event data
• Delete your account and all associated data
• Unsubscribe from email updates at any time
• Request information about data we hold
• Manage your cookie preferences via your Profile Settings or the site footer

Children's Privacy

Seatify is not intended for children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@seatify.app.