Privacy policy

1. Information We Collect

We collect only what we need to operate, secure, and improve the platform, always by fair and lawful means.

• Account information: Name, email address, profile photo, and password (stored hashed) when you create an account.
• Event & collaboration data: Events, committees, milestones, tasks, RSVPs, guest lists, memories, and announcements you create or contribute to.
• Subscription & billing data: Your chosen plan, billing interval, and subscription status. Payment card details are collected and stored solely by Stripe. We never see or store full card numbers.
• Communications: Messages you send via in-app team chat, announcements, or email broadcasts to guests.
• Usage data: Pages visited, features used, session duration, and interaction patterns, used to improve the product and detect abuse.
• Technical data: IP address, browser type, device characteristics, and error traces collected automatically when you use the platform.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Plan Our Reunion platform and all its features.
• Process subscription payments, billed by Reunion Fund through Stripe, and manage your plan status.
• Send transactional emails: RSVP confirmations, invitations, event announcements, and billing receipts.
• Send product updates and promotional communications (you can opt out at any time).
• Detect and prevent fraud, abuse, spam, and security threats.
• Improve and develop new features based on how the platform is used.
• Comply with legal obligations.

3. Sharing of Information

We do not sell your personal data. We share limited data only in these circumstances:

• Service providers: Infrastructure and tooling providers who process data on our behalf (Appwrite for database/auth, Vercel for hosting, Resend for email, Stripe for payments, Cloudflare Turnstile for checking that newsletter sign-ups come from people). Each operates under its own data processing terms.
• Ad measurement: On our public pages only, the Meta Pixel tells Meta Platforms, Inc. that a browser visited or created an account, so we can measure and show our own ads on Facebook and Instagram. Section 6 explains exactly what it does and does not see.
• Other users: Content you share on an event, such as your name, RSVP status, and memories, is visible to other event participants as intended by the platform's collaboration features.
• Legal requirements: If required by law, court order, or governmental authority, we may disclose information to the extent required.
• Business transfer: If WeeBie Media, LLC or Plan Our Reunion is acquired or merges, your data may transfer to the acquiring entity subject to the same privacy protections.

4. Data Security

We implement reasonable technical and organizational safeguards including:

• TLS encryption for all data in transit.
• Appwrite-managed authentication with server-side session validation.
• Role-based access controls limiting which team members can access which data.
• Collection-level permissions ensuring users can only access data they are authorized to see.
• Rate limiting and abuse detection to protect against automated attacks.

No internet transmission or storage system is completely secure. We cannot guarantee absolute security and encourage you to use a strong, unique password.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated personal data. Records of money that moved through an event (contributions, refunds and payouts) are kept in anonymised form and are not deleted on request.
• Export a portable copy of your data.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is consent-based (this does not affect prior lawful processing).
• Opt out of promotional emails using the unsubscribe link in any email we send.

To exercise any of these rights, email support@planourreunion.com. We will respond within 30 days. We may ask you to verify your identity before fulfilling the request.

California residents (CCPA): You have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to non-discrimination for exercising your rights.

EEA / UK residents (GDPR / UK GDPR): The legal bases for processing your data are: (a) contract performance (to provide the service you signed up for); (b) legitimate interests (security, fraud prevention, product improvement); and (c) consent where explicitly requested. You have the right to lodge a complaint with your local supervisory authority.

6. Cookies, Analytics & Advertising

We use cookies and similar technologies to:

• Session cookies: Maintain your logged-in state across page loads.
• Preference cookies: Remember your theme (light/dark) and other UI preferences.
• Analytics: Aggregate, anonymised usage statistics to understand how features are used and where the product can improve.
• Advertising: Plan Our Reunion is supported in part by advertising. On ad-supported plans we show ads from businesses that buy placements directly from us. We serve these ads ourselves, not through an ad network, and they use no advertising cookies and no tracking of your activity on other websites.

Meta Pixel (ads we run on Facebook and Instagram): We advertise Plan Our Reunion on Facebook and Instagram. To learn whether those ads bring people to us, our public pages (such as the homepage, pricing, help and blog pages, and the sign-up and log-in pages) load the Meta Pixel from Meta Platforms, Inc. It tells Meta that a browser viewed one of those pages and, when an account is created, that a sign-up happened. Meta receives the information a browser sends with any web request, such as your IP address, browser type and the Meta cookies in your browser, and may link it to a Facebook or Instagram account under Meta's own privacy policy. We use it to measure our ads and to show our ads to people who have visited. We do not send Meta your name, your email address, or anything about your events, guests, RSVPs, committees or money. The pixel never runs inside your account, on event pages, or on RSVP and invitation pages, and it does not load at all if your browser sends a Global Privacy Control signal. Showing our ads to past visitors may count as "sharing" personal information for targeted advertising under some US state laws; to opt out, turn on Global Privacy Control in your browser or email us. You can also manage how Meta uses this information in your Facebook or Instagram ad preferences.

When one of these ads is shown or clicked, we record which ad it was, the page, the time, your IP address, your account ID if you are signed in, and, for a click, your browser's user agent and the address of the page you clicked from. We use these records to count views and clicks and to detect fraudulent clicks. Advertisers do not receive them.

Ads are not shown on this page, our Terms of Service, Refund Policy, pricing page, or sign-in screens. The Enterprise tier is ad-free.

We do not sell your personal information, and we do not share guest lists, RSVP responses, committee discussions, contribution amounts, or Memory Wall content with advertisers.

You can configure your browser to block or delete cookies. Note that blocking session cookies will prevent you from staying logged in.

7. Log Data

When you use the platform our servers automatically record standard log data including your IP address, browser user agent, pages requested, HTTP status codes, and timestamps. This data is used for security monitoring, debugging, and reliability improvements. Log data is retained for up to 90 days and then deleted or anonymised.

8. Third-Party Services

Plan Our Reunion integrates with the following key third-party services, each of which has its own privacy policy:

• Stripe: subscription billing and event contributions, which are charged to the organiser's connected Stripe account. Stripe Privacy Policy
• Appwrite: database, authentication, and file storage.
• Vercel: hosting and edge infrastructure.
• Resend: transactional email delivery.
• Cloudflare Turnstile: a check that our newsletter sign-up forms are used by people, not automated scripts. It loads only when you scroll to or use one of those forms. Cloudflare receives the information a browser sends with any web request, such as your IP address and browser type, plus signals from your browser it uses to tell people from bots; when you sign up, we also send Cloudflare your IP address to confirm the check. Cloudflare does not receive the email address you enter. Turnstile Privacy Addendum
• Meta Platforms: the Meta Pixel on our public pages, used to measure and show our ads on Facebook and Instagram (see section 6). Meta Privacy Policy
• Ollama and Groq: the AI providers behind WeeBie, our assistant, and features such as the invitation writer, event descriptions and recaps. We use one of them at a time, and may switch between them. Text you submit to an AI feature is processed by that provider to generate a response. When you are signed in and ask WeeBie a question, it also receives your display name and a short summary of your events, committees and open tasks, so it can answer questions about them. It also receives what it needs to know about the page you are on: on your dashboard, committee workspaces and messages, a short summary that we look up with your permissions of information you can already see there, such as event, committee and task names, RSVP counts, money totals, the names of your committee members and of the people and group chats you message, but never the text of any message; on public pages such as help, pricing, the blog and stories, the text of the page, with email addresses and phone numbers in common formats removed. WeeBie never receives the text of your account settings or security pages. We do not send personally identifiable information to AI features without your action. Ollama Privacy Policy, Groq Privacy Policy

Our platform may also contain links to external websites we do not control. We are not responsible for the privacy practices of those sites.

9. Children's Privacy

Plan Our Reunion is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at support@planourreunion.com and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Effective" date and version above and, where the changes significantly affect your rights, notify you by email or in-app notice. Continued use of Plan Our Reunion after the effective date constitutes acceptance of the revised policy.

11. Contact

Questions or requests about this Privacy Policy:

• Email: support@planourreunion.com
• WeeBie Media, LLC (Tampa, Florida)

Changelog

• v1.8.0 (2026-10-09): Sections 3 and 8 add Cloudflare Turnstile, which checks that our newsletter sign-up forms are used by people rather than automated scripts. It loads only when you reach one of those forms, and Cloudflare does not receive the email address you enter.
• v1.7.0 (2026-09-27): Section 8 now describes everything WeeBie receives when you ask it a question: your display name and a summary of your events, committees and open tasks, which it has always received; a summary of the dashboard, committee or messages page you are on, including names you can already see there but never the text of any message; or the text of a public page such as help or pricing, with email addresses and phone numbers removed. It never receives the text of your account settings or security pages.
• v1.6.0 (2026-09-25): Section 8 adds Ollama as an AI provider alongside Groq. Text you submit to WeeBie or another AI feature is processed by whichever of the two we are using at the time.
• v1.5.0 (2026-09-25): We now advertise on Facebook and Instagram and use the Meta Pixel on our public pages to measure those ads. Section 6 describes what the pixel sees, where it never runs (inside your account, event pages, RSVP and invitation pages), that it does not load when your browser sends Global Privacy Control, and how to opt out. Section 3 lists ad measurement among the ways we share data, and Meta is added to the third-party list in section 8.
• v1.4.1 (2026-09-24): Our contact email address is now support@planourreunion.com. No other changes; no change to your rights or our obligations.
• v1.4.0 (2026-09-22): We no longer use Google AdSense. Section 6 now describes the ads we still show: placements businesses buy directly from us, served by us without advertising cookies or cross-site tracking. It also discloses what we record when one of those ads is shown or clicked, which the policy had not described before. Google AdSense is removed from the third-party list in section 8.
• v1.3.2 (2026-09-22): Section 8 no longer describes event contributions as a future feature; they have been live since 3 August 2026, and the entry now says what Stripe processes for us. Section 5 now says that records of money that moved through an event are kept in anonymised form when an account is deleted, which the deletion flow has done since 13 September 2026; before that they were kept with the contributor's name on them. Section 2 now says that subscription payments are billed by Reunion Fund through Stripe, matching the Terms and the Refund Policy. Section 10 now refers to the "Effective" date and version shown at the top of this page, which is what the page displays; it previously referred to a "Last updated" date. No change to your rights or our obligations.
• v1.3.1 (2026-09-21): Product renamed to Plan Our Reunion; the Reunion Fund name is retained for payments and funding, and both names are names for the same company. The introduction says so, and the business-transfer clause now names the operator. No change to your rights or our obligations.
• v1.3.0 (2026-08-21): Advertising disclosed. Section 6 previously stated that we did not use cookies for cross-site advertising tracking; that was not accurate while Google AdSense was serving ads, and the third-party list in section 8 did not name the ad network. Section 6 now describes advertising cookies, links to Google's controls for turning off personalisation, and states which plans and pages are ad-free. Section 8 also corrects the AI provider: it named Google/Gemini, which we stopped using on 15 June 2026, two days after this policy was last updated; AI features have run on Groq since.
• v1.2.0 (2026-06-13): Updated to reflect pivot from crypto crowdfunding to event collaboration SaaS. Replaced crypto/KYC vendor language with accurate Stripe/Appwrite/Resend/Vercel service providers. Added cookies section, children's privacy, CCPA/GDPR notes, contact section.
• v1.1.0 (2025-09-25): Added table of contents, version tag, structured data, vendor responsibility section, user rights details.
• v1.0.0: Initial public release.