Legal
Privacy Policy
Effective · Last updated
This policy describes what UNASSTD collects, why, who can see it and the choices you have. It is written to be complete and honest about how the product works today.
Who runs UNASSTD
UNASSTD is an independently operated online platform managed by its owner as a sole proprietorship. The service runs at unasstd.com. You can reach us at hello@unasstd.com.
What we collect
We collect what the service needs to work, and not much else.
- Account: your email address, which is also what you sign in with, and the display name you choose. Sign-in itself (your password, or your Google account) is handled by Clerk, our sign-in provider; UNASSTD never sees your password. Hosts and the people you meet see your display name, not your email address.
- Participation: your RSVPs and their status (confirmed, waitlisted, cancelled, checked in or no-show), any note you add for the host, and check-ins recorded by a host at the event.
- Preferences: your choices about reminder, event update and host message emails.
- Reports: what you tell us when you report an event, club or person, and your email address if you report without an account.
- Organizer information: if you create a club, its name, description, area and website, a responsible contact email, and everything in the events you publish.
- Technical records: a hashed form of your IP address and your browser's user-agent string, stored with a report you file to limit abuse; server logs of errors and events; and an audit record of host and admin actions, and of your own sign-ins and sign-outs. Our logs are written not to contain email addresses, names or tokens.
- Email records: which messages we sent you, when, and whether they were delivered.
How we use it
Everything we collect serves one of these purposes.
- Running the service: confirming RSVPs, moving people off waitlists, sending reminders, and telling you when an event changes or is cancelled.
- Letting hosts run their events: showing them who has RSVP'd and letting them record who came.
- Keeping the service safe: Clerk's limits and lockouts on sign-in attempts, rate limits on reporting, reviewing reports, suspending clubs or accounts, and keeping an audit trail of host and admin actions.
- Understanding use in aggregate: when the site is deployed on our hosting platform, cookieless page-view analytics with no cross-site tracking.
- Answering you when you write to us.
We do not build advertising profiles, we do not use your data to train AI models, and we do not sell it to anyone.
Who can see what
Visibility follows the shape of the product.
- The public sees an event's general area, never its exact meeting point.
- Confirmed attendees see the exact meeting point and the host's instructions, on the event page and in their confirmation email.
- Hosts, admins and owners of a club see the display names, RSVP status, notes to host and check-in status of the people registered to that club's events, and may export that list to run the event. They do not see your email address.
- UNASSTD's platform administrators see reports, email delivery failures and the audit log. They do not see attendee lists unless they are also members of that club.
- Other attendees see nothing about you beyond what you share in person.
- Service providers process data on our behalf: web hosting (Vercel), the database (Neon), email delivery (Resend) and sign-in (Clerk, which holds your email address, your password or Google sign-in, and your sessions).
- We disclose data when the law requires it.
How long we keep it
Your account and its data stay until you delete the account. Sign-in sessions end seven days after sign-in, or earlier when you sign out.
When you delete your account, your future RSVPs are cancelled (and waitlisted people are moved up), your preferences and queued emails are deleted, your sign-in account at Clerk is deleted, and your account record is anonymized: your email address and display name are replaced with placeholders. Past registrations remain, attached to the anonymized record, so that organizers' attendance history stays truthful; they no longer identify you.
Server logs, email records, reports and audit records are kept for as long as they are needed to run the service, keep it safe and meet legal obligations; we have not set fixed retention periods for them.
Your choices
You can act on your data without writing to us.
- Export your data as a file, or delete your account, at Account, Your data.
- Change which emails you receive at Account, Preferences, or with the one-click link in any reminder or update email.
- Messages about your own actions (RSVP confirmations, waitlist promotions, and Clerk's verification codes and password resets) are always sent while you have an account.
- Cancel an RSVP from the event page or from your account.
- Ask us anything about this policy at hello@unasstd.com.
Age
UNASSTD is for adults. You must be 18 or older to create an account, and we do not knowingly collect data from anyone younger. If you believe we have, write to hello@unasstd.com and we will delete it.
Changes to this policy
If this policy changes, we will post the new version here with its effective date. Material changes will ordinarily be communicated to registered users before they take effect.