Privacy Policy

Version 1 · Effective [EFFECTIVE DATE]

This policy explains what Imprezzi collects, why, who else can see it, how long we keep it, and what you can ask us to do about it. It is written to be specific: where we can name a thing exactly, we do, rather than saying "such as".

1. Who we are

Imprezzi is operated by Imprezzi Inc., a corporation incorporated under the Canada Business Corporations Act. In this policy, "Imprezzi", "we", "us" and "our" mean Imprezzi Inc., and "you" means the person using the service.

This policy covers the Imprezzi mobile app, the Imprezzi website, and the programming interfaces behind them, together "the Services". Our Terms of Service govern your use of them, and this policy forms part of that agreement.

We are responsible for the personal information in our custody. Questions, requests and complaints go to our privacy contact at admin@imprezzisocials.com, or to the address in section 15.

2. What we collect, and why

Your account

Where you are

• Your city, meaning country, province or state, and city. It comes from your device's location if you allow that, or from your network address if you do not, and it is what lets us show you events near you.
• The city you registered in, kept as a fixed value for fraud prevention and to work out which rules apply to you, such as the minimum age where you live.
• A short history of the cities you have been in, with timestamps, capped at the most recent 100 entries. It exists so event discovery still works when you travel.
• Precise coordinates are used on your device and are not stored on our servers. When you search nearby, the coordinates stay on the phone; what reaches us is a city.
• Your network address (IP) reaches our servers with every request, as it does with any website. We use it to work out an approximate city and to limit abuse, and we do not store it against your account.

When we look up a city from a network address, we send only the first three parts of the address (for example 203.0.113.0) to our geolocation provider, with no name, no account identifier and no other information attached. The result is cached against that partial address, not against you.

Events and what you do on Imprezzi

• Events you create, and everything in them: title, description, images, times, venue and address, capacity, and the rules you set about who may attend.
• Events you join or save, your reservations, your check-in code, and the times you joined, reserved, were confirmed at the door, cancelled or left.
• An attendee record stored on the event itself, holding your age, gender, a snapshot of your score at the time, and those timestamps, so a host can manage who is coming.
• Messages you post in an event's discussion.
• Invitations you send and receive. For a private event, the email addresses an organizer enters are stored on that event so the invitation can be honoured, including addresses of people who do not have an Imprezzi account.
• Who you have blocked, and which events you have hidden.
• Your notification inbox, and which notifications you have read.
• Organizations you belong to, and your role in them.
• An audit trail on each event, recording actions such as joined, left, removed, confirmed and refused. It records account identifiers only, never names, email addresses, check-in codes, scores or message text, and it is reachable only by us, for support and moderation.

Your score

• The things you did that affect it: completing your profile, verifying your photo, attendance a host confirmed, no-shows, and impressions you gave other people.
• Impressions other attendees gave you after an event, each with its value, when it was given, and which event it came from.
• The resulting integrity and impression scores, your score level, and any manual adjustment we made together with which of us made it.

Payments

• Your card details never reach Imprezzi. Ticket payments are charged directly on the host's own Stripe account, and card numbers, bank details, tax identity and any identity documents are held by Stripe, not by us.
• We store the identifiers Stripe gives us, which ticket purchases exist and their status, and, if you sell tickets, the identifier of your connected Stripe account.
• For credits bought from us, we keep a purchase record: what was bought, when, the amount, the Stripe reference, and any refund or chargeback that reversed it.

Safety and moderation

• Reports you file, including what you selected and any detail you wrote.
• Reports other people file about you, your events or your organization.
• A snapshot of the reported content taken when the report was filed, and again when we reviewed it, so a decision can be reviewed against what was actually there.
• What we decided, when, the reason we would give publicly, our internal notes, and any warning or suspension that followed, including what the suspension affected.

Your agreements with us

When you register, and whenever the terms change materially, we record which document you accepted, which version, the moment you accepted it in UTC, and how you signed in. Marketing consent is recorded separately, and a withdrawal is recorded as its own entry rather than by erasing the original. This is the record that lets us prove consent was given, which the law requires of us.

Technical

• A push notification token for each device you allow notifications on, and the notifications queued for delivery.
• On the website, one sign-in cookie. It is named imprezzi_session, it cannot be read by scripts in your browser, and it expires after one hour. It exists so you stay signed in, and it is the only cookie we set.
• Your browser's own storage keeps your last search filters on your device so the search page remembers them. That never leaves your browser.
• Your chosen language and display preferences.
• Basic device information and server logs, used to run the service and investigate faults.

3. What we do not do

This section is as important as the one above, and it is checkable.

• No advertising, analytics or crash-reporting software. The app contains no analytics library, no advertising network and no attribution software, and the website loads no analytics or tag manager. We do not track you across other apps or websites, and there is nothing here to opt out of.
• No selling, renting or trading of personal information, and no sharing with third parties for their own marketing.
• No cookie banner, because there is nothing to consent to beyond the sign-in cookie described above, which the site cannot work without.
• No access to your contacts. The app never asks for your address book; invitation addresses are typed or pasted by the person sending them.
• No automated reading of your messages for advertising or profiling. We look at a message when somebody reports it.
• No facial recognition. Photo verification confirms that a photo was taken by the person submitting it at that moment. It does not identify you against any other database.
• No third-party requests from our public pages. A page you can reach without signing in loads no fonts, scripts or images from anyone else, so browsing Imprezzi anonymously does not announce you to another company. Maps load only after you ask for one.

4. Why we are allowed to use it

In Canada we rely on your consent, which you give by using the Services and, for specific things such as marketing, by a separate choice you can withdraw. We also use personal information where the law allows us to without separate consent, for purposes a reasonable person would expect:

• providing what you asked for, such as running an event you joined;
• keeping the Services and the people on them safe, including investigating reports and preventing someone evading a suspension;
• preventing fraud and abuse of payments and of the scoring system;
• meeting our legal obligations, and establishing or defending legal claims.

5. Who can see what

We also disclose personal information where the law requires it, in response to a valid legal request, to protect someone's safety, or to establish or defend a legal claim. If Imprezzi is ever sold or reorganized, personal information may transfer as part of that, and this policy continues to apply until you are told otherwise.

6. The companies that help us run Imprezzi

These providers process personal information on our behalf, under contract and only for the purpose listed. They are not permitted to use it for their own purposes.

7. Information that leaves Canada

Our own servers and stored files are in Canada. Some of the providers above operate in the United States, so information handled by them is stored or processed there, and is subject to the laws of that country, including lawful access by its authorities. We assess these transfers before we make them and require contractual protection for the information involved.

If you would like to know more about how a particular transfer is protected, write to us at the address in section 15.

8. How long we keep things

We keep personal information for as long as your account exists, and after that only for as long as one of the purposes in this policy still applies. Some periods are fixed by how the product works:

• Location history keeps only the most recent 100 entries; older ones drop off as new ones arrive.
• The website's sign-in cookie expires one hour after it is issued.
• A password reset link can be used once and expires shortly after it is sent.
• An event's audit trail is sealed once the event has been over for 14 days. After that only moderation decisions can be added to it.
• Consent records are kept for as long as we might have to prove that consent was given, including after an account is deleted.
• Safety and moderation records are kept while they are needed to prevent repeat abuse and suspension evasion, which for a suspension means indefinitely.

We are working towards published retention periods for every category. Until then, if you want to know how long we hold something specific, ask us and we will tell you.

9. Deleting your account

You can delete your account from the app at any time. Here is what that does, precisely.

Deleted

• Your profile: name, birth date, gender, interests, sexual orientation, phone number and photo details.
• Your uploaded images are deleted from our storage, so the link to a photo stops working.
• Your settings, blocks, saved events, notification inbox and location history.
• Your attendance history, your score, your integrity records, and the impressions you received.
• Your sign-in record with Firebase, and the push notification tokens for your devices, so your phone stops receiving notifications.

Kept, and why

• Messages you posted in event discussions, because they are part of a conversation other people took part in.
• The attendee record on events you attended, and impressions you gave other people, because those are part of other people's history and score rather than only yours.
• Lines in an event's audit trail, which identify you only by account identifier.
• Invitation email addresses an organizer entered, which are stored on that organizer's event.
• Reports you filed and reports about you, including the snapshots and our decision, so that abuse can still be acted on.
• Your consent records, reduced to the account identifier, the document, the version, the timestamp and the method.
• Your email address and, if you were suspended, a marker of that, so that deleting an account is not a way to come back under a fresh one. Nothing else in the account remains.
• Payment records, for as long as tax and accounting law requires.

If you believe your deletion did not complete, or you still receive something from us afterwards, write to admin@imprezzisocials.com and we will finish it and confirm.

10. Your rights

Whatever province or state you are in, you can ask us to:

• give you a copy of the personal information we hold about you, and tell you who we have disclosed it to;
• correct anything that is wrong or out of date. Birth date and gender are set once in the app and cannot be edited there, so write to us if either is wrong;
• delete your account, as described in section 9;
• withdraw consent, including to marketing, which you can also do from your notification settings or the unsubscribe link in any marketing email. Withdrawing consent to something the Services depend on may mean you can no longer use them;
• complain to us, and to a regulator if we do not resolve it.

Write to admin@imprezzisocials.com. We answer within 30 days. We may ask you to confirm who you are before we act, and we will tell you if there is a legal reason we cannot do what you asked.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to your provincial regulator. In Quebec that is the Commission d'accès à l'information.

11. Decisions made by software

Where a host has set a minimum score for their event, a request to join is refused automatically, without a person looking at it. We tell you at the time that this is why. The factors that make up a score are listed in the app and in the Terms of Service.

You can write to admin@imprezzisocials.com to ask which information was used, to submit your own observations, and to have a person review the outcome.

12. Children

Imprezzi is for adults. You must be at least 18, and higher where local law requires it. We do not knowingly collect personal information from anyone under that age. If you believe a minor is using Imprezzi, report it in the app, choosing the child-safety option, or write to us. If we find out that an account belongs to someone under age, we remove it.

13. How we protect it

• Passwords are stored only as salted hashes, and sign-in is handled by Google Firebase.
• The website's sign-in cookie cannot be read by scripts in the browser, and the browser never holds a credential for our servers.
• Moderation and administrative functions require a separate key and are unreachable with an ordinary account.
• Image links contain an unguessable identifier, so an image is not discoverable by guessing.
• Card and bank details are held by Stripe and never reach our systems.

No service can promise perfect security. If a breach affects you and creates a real risk of significant harm, we will tell you and the regulator, as the law requires.

14. Other websites, and events from other sources

Some listings on Imprezzi describe events published elsewhere and link to their source. Those listings are built from public information about the event and contain no personal information about organizers or attendees. Following such a link takes you to a site we do not control, with its own privacy policy. The same is true of any other outside link.

15. Changes, and how to reach us

We may update this policy. Each version has a number and an effective date, and previous versions stay available at their own permanent address. If a change is material, we will ask you to accept the new version before you carry on using the Services. Otherwise we will publish it and tell you in the app or by email.

For any privacy question, request or complaint: